Podatności

Gitea's OAuth2 and OpenID Connect sign-in paths do not require a WebAuthn challenge when WebAuthn is the account's only configured second factor. A party able to authenticate through the affected external identity flow can obtain a full session without the passkey verification enforced during…

CVSS 9,8 · EPSS 0,47 % · rekomendacja wg zapisanej polityki

Vulnerabilities have been identified in the affected interface of ClearPass Policy Manager that could potentially allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain unauthorized access to the affected…

CVSS 9,8 · EPSS 0,46 % · rekomendacja wg zapisanej polityki

SGLang contains an arbitrary code execution vulnerability caused by the ZMQ message decoder unconditionally deserializing PickleWrapper payloads via pickle.loads() in _maybe_unwrap_pickle without type allowlisting or authentication; this vulnerability persists via the msgpack path even when…

CVSS 9,8 · EPSS 0,46 % · rekomendacja wg zapisanej polityki

Plane is an open-source project management tool. Prior to 1.4.0, the deployments/aio/community/ and deployments/cli/community/ manifests provide fixed, publicly known SECRET_KEY and LIVE_SERVER_SECRET_KEY defaults that remain active when operators do not override them. The top-level setup.sh…

CVSS 9,8 · EPSS 0,46 % · rekomendacja wg zapisanej polityki

Subscriber Privilege Escalation in AIWU <= 1.5.9 versions.

CVSS 9,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki

Unauthenticated Privilege Escalation in Taskbot <= 6.6 versions.

CVSS 9,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki

The WPCOM Member plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.7.27 via the `uuid` and `code` parameters of the social-login callback handler registered on the `init` hook. The vulnerability exists because the `login` function's social-login…

CVSS 9,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki

A vulnerability in the MPLS Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to execute arbitrary code with&nbsp;root privileges or cause a…

CVSS 9,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki

The Ultimate Multisite WordPress plugin before 2.17.0 does not require authentication before a logged-out checkout is linked to, and logged in as, an existing WordPress account matching the submitted email address, and its duplicate-account check normalizes that address differently from the…

CVSS 9,8 · EPSS 0,44 % · rekomendacja wg zapisanej polityki

An authenticated path traversal vulnerability exists in ClearPass Policy Manager. Successful exploitation could allow an attacker to read and modify certain files on the underlying operating system.

CVSS 9,8 · EPSS 0,43 % · rekomendacja wg zapisanej polityki

The management portal's diagnostic ping tool of Fanvil x7a firmware version 2.6.0.1182 does not handle user supplied input securely. The lack of secure user input handling allows any unauthenticated attacker to inject commands and run code in the underlying Android operating system.

CVSS 9,8 · EPSS 0,43 % · rekomendacja wg zapisanej polityki

Homer is open source telecom observability software. Prior to version 11.0.283, both JWT middleware functions (`JWTMiddleware` and `JWTMiddlewareV4`) immediately return `next(c)` when `jwtSecret == ""`. The JWT secret defaults to an empty string. On a default installation, all protected API…

CVSS 9,8 · EPSS 0,42 % · rekomendacja wg zapisanej polityki

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in rtCamp Inc. rtMedia for WordPress, BuddyPress and bbPress buddypress-media allows Path Traversal.This issue affects rtMedia for WordPress, BuddyPress and bbPress: from n/a through 4.7.13.

CVSS 9,8 · EPSS 0,42 % · rekomendacja wg zapisanej polityki

openapi-typescript-codegen through 0.31.0 contains a code injection vulnerability that allows attackers controlling an OpenAPI document to inject JavaScript by supplying unescaped values interpolated into single-quoted string literals. Attackers can embed a single quote in path keys, parameter…

CVSS 9,8 · EPSS 0,42 % · rekomendacja wg zapisanej polityki

PHPNuxBill through 2025.3.20 contains an unauthenticated SQL injection vulnerability in the radius.php FreeRADIUS REST endpoint that interpolates request parameters into whereRaw() queries. Attackers can send crafted username, macAddr or nasid parameters to the accounting or authenticate actions…

CVSS 9,8 · EPSS 0,41 % · rekomendacja wg zapisanej polityki

IBM Guardium Data Protection 12.2, and 12.2.2 could allow a remote attacker to execute arbitrary management operations due to missing authentication for critical function.

CVSS 9,8 · EPSS 0,41 % · rekomendacja wg zapisanej polityki

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to a buffer overflow, caused by improper bounds checking. A local user could overflow the buffer and execute arbitrary code on the system.

CVSS 9,8 · EPSS 0,41 % · rekomendacja wg zapisanej polityki

IBM Guardium Data Protection 12.1 and 12.2.2 are vulnerable to missing authentication in the edge-controller component. An unauthenticated remote attacker could exploit this vulnerability to execute arbitrary container images and gain control of managed edge clusters.

CVSS 9,8 · EPSS 0,4 % · rekomendacja wg zapisanej polityki

In Splunk Enterprise versions below 10.4.3 and 10.2.7, an unauthenticated user with network access to the Patroni Representational State Transfer (REST) Application Programming Interface (API) on a search head cluster member could execute attacker-controlled operating-system commands. The…

CVSS 9,8 · EPSS 0,4 % · rekomendacja wg zapisanej polityki

IBM Guardium Data Protection 12.0, 12.1 is vulnerable to a heap-based buffer overflow in the S-TAP TrafficTap TDS login reassembly functionality. An unauthenticated remote attacker can send crafted TDS login fragments that exceed the fixed-size reassembly buffer, potentially resulting in denial of…

CVSS 9,8 · EPSS 0,4 % · rekomendacja wg zapisanej polityki

Plane is an open-source project management tool. Prior to 1.4.0, Plane's signup flow creates a logged-in User row for any submitted email without an out-of-band ownership check, while User.email is unique=True. The authenticated user can call GET /api/users/me/workspaces/invitations/, which…

CVSS 9,8 · EPSS 0,39 % · rekomendacja wg zapisanej polityki

GouGuOA v6.0.5 and before is vulnerable to SQL Injection in /home/message/rubbish via the keywords parameter.

CVSS 9,8 · EPSS 0,39 % · rekomendacja wg zapisanej polityki

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to obtain administrative access due to failure to reject empty passwords during LDAP authentication.

CVSS 9,8 · EPSS 0,39 % · rekomendacja wg zapisanej polityki

WookTeam v1.6.6 and before is vulnerable to RCE in the project task export interface /api/project/task/export. The data parameter is base64-decoded and passed directly into the string2array() function in app/Module/Base.php, which executes eval("\$array = $data;") whenever the decoded string…

CVSS 9,8 · EPSS 0,39 % · rekomendacja wg zapisanej polityki

Unauthenticated PHP Object Injection in Kalles <= 1.1.7.1 versions.

CVSS 9,8 · EPSS 0,39 % · rekomendacja wg zapisanej polityki