Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
MacCMS v10 through 2026.1000.4056 does not limit attempts on the six-digit password recovery code, allowing unauthenticated attackers to take over member accounts. Attackers knowing a victim's email or phone can request a code and brute-force findpass_reset to overwrite the member's password.
Opis źródłowy NVD · ENCVSS 9,1 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
Thirty bees through 1.7.0 contains an authentication bypass vulnerability in PasswordController::resolveCustomer() that allows unauthenticated attackers to reset registered customers' passwords using guest account tokens. Attackers can place a guest order with the victim's email, then use the…
Opis źródłowy NVD · ENCVSS 9,1 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
Dromara Skyeye through commit 003549ae5615bd114ba5bb8ddf6a8e8ead97c321 contains a server-side request forgery and missing authorization vulnerability in the OnlyOffice save callback editUploadOfficeFileById. Unauthenticated attackers can supply arbitrary url and key parameters to make the server…
Opis źródłowy NVD · ENCVSS 9,1 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
Off-by-one error in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially read memory inside the sandbox via a crafted Chrome extension. (Chromium security severity: Low)
Opis źródłowy NVD · ENCVSS 9,1 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
Mantis Bug Tracker (MantisBT) is an open source issue tracker. Due to incorrect use of loose (==) instead of strict (===) comparison in the authentication code in versions 2.27.1 and below.PHP type juggling will cause certain MD5 hashes matching scientific notation to be interpreted as numbers.…
Opis źródłowy NVD · ENCVSS 9,1 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
UrlUtil.getBaseUrl builds the absolute URLs in a response — download links, icons, asset and API URLs — from the X-Forwarded-Host, X-Forwarded-Proto and X-Forwarded-Prefix request headers, with no check on whether the sender was a trusted proxy, falling back to the client-supplied Host header.…
Opis źródłowy NVD · ENCVSS 9,1 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
An out-of-bounds read vulnerability exists in the JPEGBITSCodec::InternalCode functionality of Grassroot DICOM 3.024. A specially crafted DICOM file can lead to an information leak. An attacker can provide a malicious file to trigger this vulnerability.The function `null_convert` is called based…
Opis źródłowy NVD · ENCVSS 9,1 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
Oracle VM VirtualBox before 7.2.8 allows guest OS users to cause an out-of-bounds write in the host OS in pcnetReceiveNoSync in DevPCNet.cpp in the PCNet (Am79C970A) network device model.
Opis źródłowy NVD · ENCVSS 9,1 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
Omnispace Agora Project before 26.10.0 contains a predictable password-reset token vulnerability that allows unauthenticated attackers to take over user accounts by computing the reset token as sha1(login.password), a deterministic and reusable value. Attackers can derive or brute-force the reset…
Opis źródłowy NVD · ENCVSS 9,1 · EPSS 0,33 % · rekomendacja wg zapisanej polityki
Omnispace Agora Project before 26.10.0 contains a vulnerability where the persistent remember-me token is stored verbatim server-side, making the stored value identical to the bearer credential held in the user's cookie. Attackers who gain access to the stored token, such as through database or…
Opis źródłowy NVD · ENCVSS 9,1 · EPSS 0,33 % · rekomendacja wg zapisanej polityki
MacCMS v10 through 2026.1000.4056 does not limit attempts on the six-digit password recovery code, allowing unauthenticated attackers to take over member accounts. Attackers knowing a victim's email or phone can request a code and brute-force findpass_reset to overwrite the member's password.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,1 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
Thirty bees through 1.7.0 contains an authentication bypass vulnerability in PasswordController::resolveCustomer() that allows unauthenticated attackers to reset registered customers' passwords using guest account tokens. Attackers can place a guest order with the victim's email, then use the…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,1 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
Dromara Skyeye through commit 003549ae5615bd114ba5bb8ddf6a8e8ead97c321 contains a server-side request forgery and missing authorization vulnerability in the OnlyOffice save callback editUploadOfficeFileById. Unauthenticated attackers can supply arbitrary url and key parameters to make the server…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,1 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
Off-by-one error in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially read memory inside the sandbox via a crafted Chrome extension. (Chromium security severity: Low)
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,1 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
Mantis Bug Tracker (MantisBT) is an open source issue tracker. Due to incorrect use of loose (==) instead of strict (===) comparison in the authentication code in versions 2.27.1 and below.PHP type juggling will cause certain MD5 hashes matching scientific notation to be interpreted as numbers.…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,1 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
UrlUtil.getBaseUrl builds the absolute URLs in a response — download links, icons, asset and API URLs — from the X-Forwarded-Host, X-Forwarded-Proto and X-Forwarded-Prefix request headers, with no check on whether the sender was a trusted proxy, falling back to the client-supplied Host header.…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,1 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
An out-of-bounds read vulnerability exists in the JPEGBITSCodec::InternalCode functionality of Grassroot DICOM 3.024. A specially crafted DICOM file can lead to an information leak. An attacker can provide a malicious file to trigger this vulnerability.The function `null_convert` is called based…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,1 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
Oracle VM VirtualBox before 7.2.8 allows guest OS users to cause an out-of-bounds write in the host OS in pcnetReceiveNoSync in DevPCNet.cpp in the PCNet (Am79C970A) network device model.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,1 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
Omnispace Agora Project before 26.10.0 contains a predictable password-reset token vulnerability that allows unauthenticated attackers to take over user accounts by computing the reset token as sha1(login.password), a deterministic and reusable value. Attackers can derive or brute-force the reset…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,1 · EPSS 0,33 % · rekomendacja wg zapisanej polityki
Omnispace Agora Project before 26.10.0 contains a vulnerability where the persistent remember-me token is stored verbatim server-side, making the stored value identical to the bearer credential held in the user's cookie. Attackers who gain access to the stored token, such as through database or…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,1 · EPSS 0,33 % · rekomendacja wg zapisanej polityki