Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
git-diff before 2.0.7 contains an OS command injection vulnerability that allows attackers to execute shell commands by supplying crafted strings to the gitDiff API. Attackers who control a diffed document string can embed $(cmd) or backtick substitutions that shelljs.exec evaluates, running…
Opis źródłowy NVD · ENCVSS 9,3 · EPSS 2,35 % · rekomendacja wg zapisanej polityki
pypdftk through 0.5 contains an OS command injection vulnerability in fill_form(), dump_data_fields(), and pdftk_cmd_util() that builds shell commands from caller-supplied paths. Attackers controlling pdf_path or out_file can inject shell metacharacters interpreted by subprocess.Popen with…
Opis źródłowy NVD · ENCVSS 9,3 · EPSS 2,35 % · rekomendacja wg zapisanej polityki
A flaw has been found in Tenda CH22 1.0.0.1. Affected by this issue is the function fromSafeUrlFilter of the file /goform/SafeUrlFilter. Executing a manipulation of the argument page can lead to buffer overflow. The attack can be launched remotely. The exploit has been published and may be used.
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 4,71 % · rekomendacja wg zapisanej polityki
An improper neutralization of input vulnerability was identified in GitHub Enterprise Server that allows DOM-based cross-site scripting via Issues search label filter that could lead to privilege escalation and unauthorized workflow triggers. Successful exploitation requires an attacker to have…
Opis źródłowy NVD · ENCVSS 9,6 · EPSS 0,7 % · rekomendacja wg zapisanej polityki
Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to execute code over a network.
Opis źródłowy NVD · ENCVSS 9,6 · EPSS 0,65 % · rekomendacja wg zapisanej polityki
GPT-SoVITS through 20250606v2pro contains an OS command injection vulnerability in webui.py where ASR, slice, denoise, and uvr5 functions interpolate unsanitized Gradio textbox values directly into shell commands executed with shell=True. Attackers can inject shell metacharacters through path…
Opis źródłowy NVD · ENCVSS 9,3 · EPSS 2,15 % · rekomendacja wg zapisanej polityki
Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access for attacker. This…
Opis źródłowy NVD · ENCVSS 9,6 · EPSS 0,63 % · rekomendacja wg zapisanej polityki
Type confusion in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Opis źródłowy NVD · ENCVSS 9,6 · EPSS 0,62 % · rekomendacja wg zapisanej polityki
git-diff before 2.0.7 contains an OS command injection vulnerability that allows attackers to execute shell commands by supplying crafted strings to the gitDiff API. Attackers who control a diffed document string can embed $(cmd) or backtick substitutions that shelljs.exec evaluates, running…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,3 · EPSS 2,35 % · rekomendacja wg zapisanej polityki
pypdftk through 0.5 contains an OS command injection vulnerability in fill_form(), dump_data_fields(), and pdftk_cmd_util() that builds shell commands from caller-supplied paths. Attackers controlling pdf_path or out_file can inject shell metacharacters interpreted by subprocess.Popen with…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,3 · EPSS 2,35 % · rekomendacja wg zapisanej polityki
A flaw has been found in Tenda CH22 1.0.0.1. Affected by this issue is the function fromSafeUrlFilter of the file /goform/SafeUrlFilter. Executing a manipulation of the argument page can lead to buffer overflow. The attack can be launched remotely. The exploit has been published and may be used.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 8,8 · EPSS 4,71 % · rekomendacja wg zapisanej polityki
An improper neutralization of input vulnerability was identified in GitHub Enterprise Server that allows DOM-based cross-site scripting via Issues search label filter that could lead to privilege escalation and unauthorized workflow triggers. Successful exploitation requires an attacker to have…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,6 · EPSS 0,7 % · rekomendacja wg zapisanej polityki
Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to execute code over a network.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,6 · EPSS 0,65 % · rekomendacja wg zapisanej polityki
GPT-SoVITS through 20250606v2pro contains an OS command injection vulnerability in webui.py where ASR, slice, denoise, and uvr5 functions interpolate unsanitized Gradio textbox values directly into shell commands executed with shell=True. Attackers can inject shell metacharacters through path…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,3 · EPSS 2,15 % · rekomendacja wg zapisanej polityki
Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access for attacker. This…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,6 · EPSS 0,63 % · rekomendacja wg zapisanej polityki
Type confusion in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,6 · EPSS 0,62 % · rekomendacja wg zapisanej polityki