Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
The OpenText™ (EnCase SAFE Agents) component utilized by OpenText™ Endpoint Investigator, OpenText™ Endpoint Forensics & Response, OpenText™ Information Assurance, and OpenText™ Endpoint Security contains a security vulnerability on the Agents that could allow unauthorized or unauthenticated…
Opis źródłowy NVD · ENCVSS 9,3 · EPSS 0,41 % · rekomendacja wg zapisanej polityki
The firmware update process for the basemodule of the charging controller only validates the
CRC32 checksum without cryptographic signature verification. This allows an unauthenticated remote attacker to install a modified firmware, resulting in full system compromise.
Opis źródłowy NVD · ENCVSS 9,3 · EPSS 0,41 % · rekomendacja wg zapisanej polityki
A Stack-based Buffer Overflow vulnerability in the kmd component of Juniper Networks Junos OS on MX Series allows an unauthenticated network attacker to execute code as root via specific IKE certificate-based packets.
This issue requires IKE to be enabled with an RSA-signature IKE policy to be…
Opis źródłowy NVD · ENCVSS 9,3 · EPSS 0,41 % · rekomendacja wg zapisanej polityki
The application contains an insecure 'redirectToUrl' mechanism that incorrectly processes the value of the 'redirectUrlParameter' parameter. The application interprets the entered string of characters as a Java expression, allowing an unauthenticated attacer to perform arbitrary code…
Opis źródłowy NVD · ENCVSS 9,3 · EPSS 0,41 % · rekomendacja wg zapisanej polityki
Improper Authentication vulnerability in GE Vernova Smallworld on Windows, Linux allows Authentication Abuse.This issue affects Smallworld: 5.3.3 and prior versions for Linux, and 5.3.4. and prior versions for Windows.
Opis źródłowy NVD · ENCVSS 9,3 · EPSS 0,41 % · rekomendacja wg zapisanej polityki
Metabase is an open source business intelligence and analytics platform. From 1.55.0 until 1.58.16, 1.59.13, 1.60.9, and 1.61.4, native queries and actions against an H2 data source are passed through without restricting host-facing built-in functions. A user authorized to run native queries or…
Opis źródłowy NVD · ENCVSS 9,3 · EPSS 0,41 % · rekomendacja wg zapisanej polityki
DJI drones contain an FTP service that uses hardcoded credentials shared across affected models and permits authenticated users to upload files without limits on file size, file count, or total storage consumed in **/blackbox/upgrade/**, as well as overwrite existing files in that directory. An…
Opis źródłowy NVD · ENCVSS 9,3 · EPSS 0,41 % · rekomendacja wg zapisanej polityki
Anheng Mingyu Operation and Maintenance Audit and Risk Control System up to 2023-08-10 contains a server-side request forgery (SSRF) vulnerability in the xmlrpc.sock handler. The product accepts specially crafted XML-RPC requests that can be used to instruct the server to connect to internal unix…
Opis źródłowy NVD · ENCVSS 9,3 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
x64dbg-MCP Server is a native Model Context Protocol (MCP) plugin for x64dbg that exposes the debugger's full functionality over HTTP. Prior to 1.1, x64dbg-MCP Server exposes all MCP debugger tools over HTTP and SSE without authentication while listening on 0.0.0.0 by default. Any unauthenticated…
Opis źródłowy NVD · ENCVSS 9,3 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
Grav Login OAuth plugin (grav-plugin-login-oauth) before 1.4.3 provisions OAuth accounts as ordinary Grav users with a deterministic <provider>.<id> username and an unsalted MD5 hash of the provider identifier as the password, without disabling password login. Unauthenticated remote attackers who…
Opis źródłowy NVD · ENCVSS 9,3 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in DiviNext Woo Essential allows SQL Injection.
This issue affects Woo Essential: from n/a through 4.3.0.
Opis źródłowy NVD · ENCVSS 9,3 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
The OpenText™ (EnCase SAFE Agents) component utilized by OpenText™ Endpoint Investigator, OpenText™ Endpoint Forensics & Response, OpenText™ Information Assurance, and OpenText™ Endpoint Security contains a security vulnerability on the Agents that could allow unauthorized or unauthenticated…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,3 · EPSS 0,41 % · rekomendacja wg zapisanej polityki
The firmware update process for the basemodule of the charging controller only validates the
CRC32 checksum without cryptographic signature verification. This allows an unauthenticated remote attacker to install a modified firmware, resulting in full system compromise.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,3 · EPSS 0,41 % · rekomendacja wg zapisanej polityki
A Stack-based Buffer Overflow vulnerability in the kmd component of Juniper Networks Junos OS on MX Series allows an unauthenticated network attacker to execute code as root via specific IKE certificate-based packets.
This issue requires IKE to be enabled with an RSA-signature IKE policy to be…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,3 · EPSS 0,41 % · rekomendacja wg zapisanej polityki
The application contains an insecure 'redirectToUrl' mechanism that incorrectly processes the value of the 'redirectUrlParameter' parameter. The application interprets the entered string of characters as a Java expression, allowing an unauthenticated attacer to perform arbitrary code…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,3 · EPSS 0,41 % · rekomendacja wg zapisanej polityki
Improper Authentication vulnerability in GE Vernova Smallworld on Windows, Linux allows Authentication Abuse.This issue affects Smallworld: 5.3.3 and prior versions for Linux, and 5.3.4. and prior versions for Windows.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,3 · EPSS 0,41 % · rekomendacja wg zapisanej polityki
Metabase is an open source business intelligence and analytics platform. From 1.55.0 until 1.58.16, 1.59.13, 1.60.9, and 1.61.4, native queries and actions against an H2 data source are passed through without restricting host-facing built-in functions. A user authorized to run native queries or…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,3 · EPSS 0,41 % · rekomendacja wg zapisanej polityki
DJI drones contain an FTP service that uses hardcoded credentials shared across affected models and permits authenticated users to upload files without limits on file size, file count, or total storage consumed in **/blackbox/upgrade/**, as well as overwrite existing files in that directory. An…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,3 · EPSS 0,41 % · rekomendacja wg zapisanej polityki
Anheng Mingyu Operation and Maintenance Audit and Risk Control System up to 2023-08-10 contains a server-side request forgery (SSRF) vulnerability in the xmlrpc.sock handler. The product accepts specially crafted XML-RPC requests that can be used to instruct the server to connect to internal unix…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,3 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
x64dbg-MCP Server is a native Model Context Protocol (MCP) plugin for x64dbg that exposes the debugger's full functionality over HTTP. Prior to 1.1, x64dbg-MCP Server exposes all MCP debugger tools over HTTP and SSE without authentication while listening on 0.0.0.0 by default. Any unauthenticated…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,3 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
Grav Login OAuth plugin (grav-plugin-login-oauth) before 1.4.3 provisions OAuth accounts as ordinary Grav users with a deterministic <provider>.<id> username and an unsalted MD5 hash of the provider identifier as the password, without disabling password login. Unauthenticated remote attackers who…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,3 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in DiviNext Woo Essential allows SQL Injection.
This issue affects Woo Essential: from n/a through 4.3.0.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,3 · EPSS 0,4 % · rekomendacja wg zapisanej polityki