Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user…
Opis źródłowy NVD · ENCVSS 9,9 · EPSS 0,63 % · rekomendacja wg zapisanej polityki
A vulnerability was identified in UTT 进取 512W up to 3.1.7.7-171114. Affected is the function strcpy of the file /goform/formConfigFastDirectionW. The manipulation of the argument ssid leads to buffer overflow. The attack may be initiated remotely. The exploit is publicly available and might be…
Opis źródłowy NVD · ENCVSS 8,9 · EPSS 5,63 % · rekomendacja wg zapisanej polityki
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, ST_AsText can write beyond an allocated output buffer when converting deeply nested GeometryCollections because recursive WKT serialization does not account for…
Opis źródłowy NVD · ENCVSS 9,9 · EPSS 0,63 % · rekomendacja wg zapisanej polityki
AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 expose an unauthenticated backup upload endpoint at AudioCodes_files/ajaxBackupUploadFile.php in the F2MAdmin web interface. The script derives a backup folder path from application configuration, creates…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 1,12 % · rekomendacja wg zapisanej polityki
JeecgBoot v3.9.2 is vulnerable to Remote command execution. The CodeNode component of the AI Flow module supports Groovy script execution. While the `SecurityCheck` class employs a blacklist mechanism to intercept dangerous calls, the dynamic nature of Groovy allows this blacklist to be completely…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 1,12 % · rekomendacja wg zapisanej polityki
Nagios XI versions prior to 2012R1.3 contain a SQL injection vulnerability in the legacy Core Configuration Manager (CCM) interface. Authenticated users could manipulate SQL queries by supplying crafted input to specific CCM parameters, potentially allowing access to configuration data stored in…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 1,12 % · rekomendacja wg zapisanej polityki
Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,9 · EPSS 0,63 % · rekomendacja wg zapisanej polityki
A vulnerability was identified in UTT 进取 512W up to 3.1.7.7-171114. Affected is the function strcpy of the file /goform/formConfigFastDirectionW. The manipulation of the argument ssid leads to buffer overflow. The attack may be initiated remotely. The exploit is publicly available and might be…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 8,9 · EPSS 5,63 % · rekomendacja wg zapisanej polityki
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, ST_AsText can write beyond an allocated output buffer when converting deeply nested GeometryCollections because recursive WKT serialization does not account for…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,9 · EPSS 0,63 % · rekomendacja wg zapisanej polityki
AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 expose an unauthenticated backup upload endpoint at AudioCodes_files/ajaxBackupUploadFile.php in the F2MAdmin web interface. The script derives a backup folder path from application configuration, creates…
Opis źródłowy NVD · EN
Pilne działanie
CVSS 9,8 · EPSS 1,12 % · rekomendacja wg zapisanej polityki
JeecgBoot v3.9.2 is vulnerable to Remote command execution. The CodeNode component of the AI Flow module supports Groovy script execution. While the `SecurityCheck` class employs a blacklist mechanism to intercept dangerous calls, the dynamic nature of Groovy allows this blacklist to be completely…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 1,12 % · rekomendacja wg zapisanej polityki
Nagios XI versions prior to 2012R1.3 contain a SQL injection vulnerability in the legacy Core Configuration Manager (CCM) interface. Authenticated users could manipulate SQL queries by supplying crafted input to specific CCM parameters, potentially allowing access to configuration data stored in…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 1,12 % · rekomendacja wg zapisanej polityki