Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
The User Rights Access Manager WordPress plugin through 1.1.3 does not restrict access to one of its AJAX account-registration handlers and assigns newly registered accounts a role that was created as a copy of the administrator role, allowing unauthenticated attackers to register an…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
fast-jwt provides fast JSON Web Token (JWT) implementation. From 6.2.0 until 6.3.0, fast-jwt can misclassify RSA public-key text as an HMAC secret when the key has non-whitespace content before its PEM header. In src/crypto.js, performDetectPublicKeyAlgorithms trims whitespace but…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
Dell Command | Configure (DCC), versions prior to 5.2.3.35, contain an Improper Handling of Mixed Encoding vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of Privileges.
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Restriction of Excessive Authentication Attempts vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges,…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
Incorrect Privilege Assignment vulnerability in Shabti Kaplan Frontend Admin by DynamiApps acf-frontend-form-element allows Privilege Escalation.This issue affects Frontend Admin by DynamiApps: from n/a through 3.29.13.
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
SCM_RIGHTS file descriptor passing did not preserve FD_RESOLVE_BENEATH when a descriptor was transferred. A process could clear the restriction by sending the descriptor to itself over a Unix domain socket.
A process in a jail that has received a directory file descriptor from another jail can…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
HP ThinPro 8.1 System management application failed to verify user's true id. HP has released HP ThinPro 8.1 SP8, which includes updates to mitigate potential vulnerabilities.
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
The User Rights Access Manager WordPress plugin through 1.1.3 does not restrict access to one of its AJAX account-registration handlers and assigns newly registered accounts a role that was created as a copy of the administrator role, allowing unauthenticated attackers to register an…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
fast-jwt provides fast JSON Web Token (JWT) implementation. From 6.2.0 until 6.3.0, fast-jwt can misclassify RSA public-key text as an HMAC secret when the key has non-whitespace content before its PEM header. In src/crypto.js, performDetectPublicKeyAlgorithms trims whitespace but…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
Dell Command | Configure (DCC), versions prior to 5.2.3.35, contain an Improper Handling of Mixed Encoding vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of Privileges.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Restriction of Excessive Authentication Attempts vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges,…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
Incorrect Privilege Assignment vulnerability in Shabti Kaplan Frontend Admin by DynamiApps acf-frontend-form-element allows Privilege Escalation.This issue affects Frontend Admin by DynamiApps: from n/a through 3.29.13.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
SCM_RIGHTS file descriptor passing did not preserve FD_RESOLVE_BENEATH when a descriptor was transferred. A process could clear the restriction by sending the descriptor to itself over a Unix domain socket.
A process in a jail that has received a directory file descriptor from another jail can…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
HP ThinPro 8.1 System management application failed to verify user's true id. HP has released HP ThinPro 8.1 SP8, which includes updates to mitigate potential vulnerabilities.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,27 % · rekomendacja wg zapisanej polityki