Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Apache CXF's STSTokenValidator and Security Token Service (STS) cached validated security tokens under a non-cryptographic 32-bit hash of the token (Java Arrays.hashCode/hashCode()), and treated a cache hit as proof that the presented token had already been validated. An attacker could craft a…
Opis źródłowy NVD · ENCVSS 9,1 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
undici is an HTTP client library for Node.js. In versions 4.0.0 through 6.29.0, 7.0.0 through 7.30.0, and 8.0.0 through 8.12.1, its Agent dispatcher passes its constructor options through a JSON-based deep clone before forwarding them to each per-origin pool, and because JSON cannot represent…
Opis źródłowy NVD · ENCVSS 9,1 · EPSS 0,18 % · rekomendacja wg zapisanej polityki
Server-Side Request Forgery (SSRF) protection in the UrlImageConverter component of Apache Fesod (Incubating) fesod-sheet 2.0.2-incubating can be bypassed through DNS rebinding. When an application accepts an attacker-controlled image URL for spreadsheet writing, the converter checks the…
Opis źródłowy NVD · ENCVSS 9,1 · EPSS 0,18 % · rekomendacja wg zapisanej polityki
In Apache CXF, the Netty-based HTTP client transport (cxf-rt-transports-http-netty-client) did not verify that the hostname in the server’s TLS certificate matched the host being called. This applied over both HTTP/1.1 and HTTP/2, even when disableCNCheck was left at its default value of false.…
Opis źródłowy NVD · ENCVSS 9,1 · EPSS 0,18 % · rekomendacja wg zapisanej polityki
CCC Attestation SIG attested-tls-poc through commit 731ca82 fails to bind early attestation Evidence to the TLS connection, allowing attackers to relay valid Evidence from a genuine attester. Attackers holding an extracted attested TLS private key can forward the relying party's nonce to a genuine…
Opis źródłowy NVD · ENCVSS 9,1 · EPSS 0,18 % · rekomendacja wg zapisanej polityki
The gist RubyGem before 6.1.0 contains an improper certificate validation vulnerability that allows on-path attackers to intercept HTTPS traffic because http_connection in lib/gist.rb sets VERIFY_NONE. Attackers can present any certificate to read or modify GitHub API traffic, stealing OAuth…
Opis źródłowy NVD · ENCVSS 9,1 · EPSS 0,18 % · rekomendacja wg zapisanej polityki
A vulnerability was found in Tenda WH450 1.0.0.18. This affects an unknown function of the file /goform/PPTPDClient of the component HTTP Request Handler. Performing a manipulation of the argument Username results in stack-based buffer overflow. The attack can be initiated remotely. The exploit…
Opis źródłowy NVD · ENCVSS 8,9 · EPSS 1,18 % · rekomendacja wg zapisanej polityki
Same-origin policy bypass in the Networking: DNS component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
Opis źródłowy NVD · ENCVSS 9,1 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
The Remote API WordPress plugin through 0.2 does not authenticate a request before deserializing user-supplied input, allowing unauthenticated attackers to inject arbitrary PHP objects, which can lead to remote code execution when a suitable gadget chain is present through another installed Remote…
Opis źródłowy NVD · ENCVSS 9,0 · EPSS 0,67 % · rekomendacja wg zapisanej polityki
The FacturaONE para WooCommerce con VeriFactu WordPress plugin before 5.37 does not authenticate one of its request handlers, whose only protection is derived from a cryptographic key that is empty in the default, unconfigured state, allowing unauthenticated attackers to write an arbitrary file…
Opis źródłowy NVD · ENCVSS 9,0 · EPSS 0,67 % · rekomendacja wg zapisanej polityki
A remote code execution (RCE) vulnerability exists in fastjson 1.2.68 through 1.2.83. This vulnerability is exploitable under fastjson's stock default configuration — no AutoType enablement required, no classpath gadget required.
Opis źródłowy NVD · ENCVSS 9,0 · EPSS 0,66 % · rekomendacja wg zapisanej polityki
gopay before 1.5.119 disables TLS certificate verification in defaultClient() in pkg/xhttp/client.go, allowing man-in-the-middle attackers to impersonate payment provider APIs. Attackers can present any certificate to read merchant credentials, signatures and transaction data, and modify payment,…
Opis źródłowy NVD · ENCVSS 9,1 · EPSS 0,16 % · rekomendacja wg zapisanej polityki
Privasys Remote Attestation TLS Clients provides multi-language utilities for verifying attested TLS connections. Prior to 0.11.0, TEE attestation evidence in Privasys attested TLS is accepted without requiring an explicitly authorized platform identity. When a network attacker can forge evidence…
Opis źródłowy NVD · ENCVSS 9,1 · EPSS 0,16 % · rekomendacja wg zapisanej polityki
PyJWT is a Python implementation of JSON Web Token standards. Prior to 2.14.0, PyJWT PyJWKClient is affected because redirect destinations are not revalidated against the JWKS trust boundary. This occurs when a configured trusted JWKS endpoint returns an attacker-influenced redirect. As a result,…
Opis źródłowy NVD · ENCVSS 9,1 · EPSS 0,16 % · rekomendacja wg zapisanej polityki
NetEase Cloud Music client for Windows (cloudmusic.exe) versions 3.1.38 and 3.1.39.205426 contains a TLS certificate validation vulnerability that allows a network-adjacent attacker to intercept and decrypt HTTPS traffic by failing to validate the server certificate chain, verify the hostname, or…
Opis źródłowy NVD · ENCVSS 9,1 · EPSS 0,16 % · rekomendacja wg zapisanej polityki
CVSS
9,1
EPSS
0,16 %
Poprawka
Status poprawki nieustalony
Publikacja
Aktualizacja NVD
Podatności: opis, rekomendacja, CVSS, EPSS i daty źródłowe. Rekomendacja nie potwierdza podatności własnego zasobu.
Apache CXF's STSTokenValidator and Security Token Service (STS) cached validated security tokens under a non-cryptographic 32-bit hash of the token (Java Arrays.hashCode/hashCode()), and treated a cache hit as proof that the presented token had already been validated. An attacker could craft a…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,1 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
undici is an HTTP client library for Node.js. In versions 4.0.0 through 6.29.0, 7.0.0 through 7.30.0, and 8.0.0 through 8.12.1, its Agent dispatcher passes its constructor options through a JSON-based deep clone before forwarding them to each per-origin pool, and because JSON cannot represent…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,1 · EPSS 0,18 % · rekomendacja wg zapisanej polityki
Server-Side Request Forgery (SSRF) protection in the UrlImageConverter component of Apache Fesod (Incubating) fesod-sheet 2.0.2-incubating can be bypassed through DNS rebinding. When an application accepts an attacker-controlled image URL for spreadsheet writing, the converter checks the…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,1 · EPSS 0,18 % · rekomendacja wg zapisanej polityki
In Apache CXF, the Netty-based HTTP client transport (cxf-rt-transports-http-netty-client) did not verify that the hostname in the server’s TLS certificate matched the host being called. This applied over both HTTP/1.1 and HTTP/2, even when disableCNCheck was left at its default value of false.…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,1 · EPSS 0,18 % · rekomendacja wg zapisanej polityki
CCC Attestation SIG attested-tls-poc through commit 731ca82 fails to bind early attestation Evidence to the TLS connection, allowing attackers to relay valid Evidence from a genuine attester. Attackers holding an extracted attested TLS private key can forward the relying party's nonce to a genuine…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,1 · EPSS 0,18 % · rekomendacja wg zapisanej polityki
The gist RubyGem before 6.1.0 contains an improper certificate validation vulnerability that allows on-path attackers to intercept HTTPS traffic because http_connection in lib/gist.rb sets VERIFY_NONE. Attackers can present any certificate to read or modify GitHub API traffic, stealing OAuth…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,1 · EPSS 0,18 % · rekomendacja wg zapisanej polityki
A vulnerability was found in Tenda WH450 1.0.0.18. This affects an unknown function of the file /goform/PPTPDClient of the component HTTP Request Handler. Performing a manipulation of the argument Username results in stack-based buffer overflow. The attack can be initiated remotely. The exploit…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 8,9 · EPSS 1,18 % · rekomendacja wg zapisanej polityki
Same-origin policy bypass in the Networking: DNS component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,1 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
The Remote API WordPress plugin through 0.2 does not authenticate a request before deserializing user-supplied input, allowing unauthenticated attackers to inject arbitrary PHP objects, which can lead to remote code execution when a suitable gadget chain is present through another installed Remote…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,0 · EPSS 0,67 % · rekomendacja wg zapisanej polityki
The FacturaONE para WooCommerce con VeriFactu WordPress plugin before 5.37 does not authenticate one of its request handlers, whose only protection is derived from a cryptographic key that is empty in the default, unconfigured state, allowing unauthenticated attackers to write an arbitrary file…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,0 · EPSS 0,67 % · rekomendacja wg zapisanej polityki
A remote code execution (RCE) vulnerability exists in fastjson 1.2.68 through 1.2.83. This vulnerability is exploitable under fastjson's stock default configuration — no AutoType enablement required, no classpath gadget required.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,0 · EPSS 0,66 % · rekomendacja wg zapisanej polityki
gopay before 1.5.119 disables TLS certificate verification in defaultClient() in pkg/xhttp/client.go, allowing man-in-the-middle attackers to impersonate payment provider APIs. Attackers can present any certificate to read merchant credentials, signatures and transaction data, and modify payment,…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,1 · EPSS 0,16 % · rekomendacja wg zapisanej polityki
Privasys Remote Attestation TLS Clients provides multi-language utilities for verifying attested TLS connections. Prior to 0.11.0, TEE attestation evidence in Privasys attested TLS is accepted without requiring an explicitly authorized platform identity. When a network attacker can forge evidence…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,1 · EPSS 0,16 % · rekomendacja wg zapisanej polityki
PyJWT is a Python implementation of JSON Web Token standards. Prior to 2.14.0, PyJWT PyJWKClient is affected because redirect destinations are not revalidated against the JWKS trust boundary. This occurs when a configured trusted JWKS endpoint returns an attacker-influenced redirect. As a result,…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,1 · EPSS 0,16 % · rekomendacja wg zapisanej polityki
NetEase Cloud Music client for Windows (cloudmusic.exe) versions 3.1.38 and 3.1.39.205426 contains a TLS certificate validation vulnerability that allows a network-adjacent attacker to intercept and decrypt HTTPS traffic by failing to validate the server certificate chain, verify the hostname, or…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,1 · EPSS 0,16 % · rekomendacja wg zapisanej polityki
9,1
0,16 %
Publikacja
Aktualizacja NVD
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
NVD · publikacjeOpóźnione lub nieustalone
NVD · aktualizacjeOpóźnione lub nieustalone
CISA KEVOstatnie przetworzenie zakończone
FIRST EPSSOpóźnione lub nieustaloneData modelu znajduje się przy rekordzie.