Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice hostname functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to…
Opis źródłowy NVD · ENCVSS 9,1 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
A stack-based buffer overflow vulnerability exists in the boa formParentControl deviceName functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to…
Opis źródłowy NVD · ENCVSS 9,1 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
A stack-based buffer overflow vulnerability exists in the boa formParentControl url functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger…
Opis źródłowy NVD · ENCVSS 9,1 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice macstr functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger…
Opis źródłowy NVD · ENCVSS 9,1 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger…
Opis źródłowy NVD · ENCVSS 9,1 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
DB-GPT 0.8.0 contains directory traversal in skill_upload (packages/dbgpt-app/src/dbgpt_app/openapi/api_v1/agentic_data_api.py:40). A remote attacker can use the validated exploitation path to write files outside the intended workspace or storage boundary.
Opis źródłowy NVD · ENCVSS 9,1 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
sctp: validate embedded address parameter length
sctp_verify_asconf() and sctp_verify_param() only validate ADD_IP, DEL_IP,
and SET_PRIMARY parameters against a fixed minimum size of sizeof(struct
sctp_addip_param) +…
Opis źródłowy NVD · ENCVSS 9,1 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
net: ife: require ETH_HLEN to be pullable in ife_decode()
ife decode may return after making only the outer IFE header and
metadata pullable. The caller then passes the decapsulated packet to
eth_type_trans(), which expects the…
Opis źródłowy NVD · ENCVSS 9,1 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
Nextcloud MCP Server is a production-ready MCP server that connects AI assistants to a Nextcloud instance. Prior to 0.117.2, the POST /webhooks/nextcloud endpoint in nextcloud_mcp_server/vector/webhook_receiver.py has no authentication by default because WEBHOOK_SECRET defaults to None and startup…
Opis źródłowy NVD · ENCVSS 9,1 · EPSS 0,73 % · rekomendacja wg zapisanej polityki
Fluent Bit in_http, in_splunk, and in_elasticsearch input plugins fail to sanitize tag_key inputs. An attacker with network access or the ability to write records into Splunk or Elasticsearch can supply tag_key values containing special characters such as newlines or ../ that are treated as valid…
Opis źródłowy NVD · ENCVSS 9,1 · EPSS 0,73 % · rekomendacja wg zapisanej polityki
: Session Fixation / Session Reuse across Users vulnerability in Apache Jackrabbit.
Jackrabbit WebDAV server attaches a cached authenticated session on any Lock-Token/TransactionId/SubscriptionId/If-header field token match with
no credential check.
This issue affects Apache Jackrabbit:…
Opis źródłowy NVD · ENCVSS 9,1 · EPSS 0,73 % · rekomendacja wg zapisanej polityki
Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery (SSRF). A server-side request forgery (SSRF) weakness in Kiteworks Email Protection Gateway could allow a remote, unauthenticated attacker to induce the gateway to issue crafted requests to…
Opis źródłowy NVD · ENCVSS 9,1 · EPSS 0,72 % · rekomendacja wg zapisanej polityki
Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery (SSRF). A server-side request forgery (SSRF) weakness in Kiteworks Email Protection Gateway could allow a remote, unauthenticated attacker to induce the gateway to issue crafted requests to…
Opis źródłowy NVD · ENCVSS 9,1 · EPSS 0,72 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read
In qla2x00_status_entry(), the FWI2 status path advances sense_data and
shrinks par_sense_len by rsp_info_len:
if (IS_FWI2_CAPABLE(ha)) {
sense_data +=…
Opis źródłowy NVD · ENCVSS 9,1 · EPSS 0,71 % · rekomendacja wg zapisanej polityki
A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice hostname functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,1 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
A stack-based buffer overflow vulnerability exists in the boa formParentControl deviceName functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,1 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
A stack-based buffer overflow vulnerability exists in the boa formParentControl url functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,1 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice macstr functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,1 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,1 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
DB-GPT 0.8.0 contains directory traversal in skill_upload (packages/dbgpt-app/src/dbgpt_app/openapi/api_v1/agentic_data_api.py:40). A remote attacker can use the validated exploitation path to write files outside the intended workspace or storage boundary.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,1 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
sctp: validate embedded address parameter length
sctp_verify_asconf() and sctp_verify_param() only validate ADD_IP, DEL_IP,
and SET_PRIMARY parameters against a fixed minimum size of sizeof(struct
sctp_addip_param) +…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,1 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
net: ife: require ETH_HLEN to be pullable in ife_decode()
ife decode may return after making only the outer IFE header and
metadata pullable. The caller then passes the decapsulated packet to
eth_type_trans(), which expects the…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,1 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
Nextcloud MCP Server is a production-ready MCP server that connects AI assistants to a Nextcloud instance. Prior to 0.117.2, the POST /webhooks/nextcloud endpoint in nextcloud_mcp_server/vector/webhook_receiver.py has no authentication by default because WEBHOOK_SECRET defaults to None and startup…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,1 · EPSS 0,73 % · rekomendacja wg zapisanej polityki
Fluent Bit in_http, in_splunk, and in_elasticsearch input plugins fail to sanitize tag_key inputs. An attacker with network access or the ability to write records into Splunk or Elasticsearch can supply tag_key values containing special characters such as newlines or ../ that are treated as valid…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,1 · EPSS 0,73 % · rekomendacja wg zapisanej polityki
: Session Fixation / Session Reuse across Users vulnerability in Apache Jackrabbit.
Jackrabbit WebDAV server attaches a cached authenticated session on any Lock-Token/TransactionId/SubscriptionId/If-header field token match with
no credential check.
This issue affects Apache Jackrabbit:…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,1 · EPSS 0,73 % · rekomendacja wg zapisanej polityki
Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery (SSRF). A server-side request forgery (SSRF) weakness in Kiteworks Email Protection Gateway could allow a remote, unauthenticated attacker to induce the gateway to issue crafted requests to…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,1 · EPSS 0,72 % · rekomendacja wg zapisanej polityki
Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery (SSRF). A server-side request forgery (SSRF) weakness in Kiteworks Email Protection Gateway could allow a remote, unauthenticated attacker to induce the gateway to issue crafted requests to…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,1 · EPSS 0,72 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read
In qla2x00_status_entry(), the FWI2 status path advances sense_data and
shrinks par_sense_len by rsp_info_len:
if (IS_FWI2_CAPABLE(ha)) {
sense_data +=…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,1 · EPSS 0,71 % · rekomendacja wg zapisanej polityki