Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
The ShopLentor – WooCommerce Builder for Elementor & Gutenberg +21 Modules – All in One Solution (formerly WooLentor) plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.2.5 via the 'load_template' function. This makes it possible for unauthenticated…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,82 % · rekomendacja wg zapisanej polityki
@vitejs/plugin-rs provides React Server Components (RSC) support for Vite. Versions 0.5.5 and below are vulnerable to arbitrary remote code execution on the development server through unsafe dynamic imports in server function APIs (loadServerAction, decodeReply, decodeAction) when integrated into…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,81 % · rekomendacja wg zapisanej polityki
SAP NetWeaver Visual Composer does not perform sufficient authorization checks in certain portal functionality. An attacker with low privileges could invoke internal operations on a preconfigured remote system. Depending on the remote connection configuration, this could lead to a full compromise…
Opis źródłowy NVD · ENCVSS 9,9 · EPSS 0,31 % · rekomendacja wg zapisanej polityki
NVIDIA Isaac Launchable contains a vulnerability where an attacker could cause an execution with unnecessary privileges. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, denial of service, information disclosure and data tampering.
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,81 % · rekomendacja wg zapisanej polityki
obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, tool dispatch does not compare the caller-controlled input.vault value with the vault bound to the caller, the JSON Web Token (JWT) has no vault claim, and the folder access-control list is…
Opis źródłowy NVD · ENCVSS 9,9 · EPSS 0,31 % · rekomendacja wg zapisanej polityki
A vulnerability has been found in UTT 进取 512W up to 1.7.7-171114. Affected by this issue is the function strcpy of the file /goform/formP2PLimitConfig. Such manipulation of the argument except leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,81 % · rekomendacja wg zapisanej polityki
A flaw has been found in UTT 进取 520W 1.7.7-180627. The impacted element is the function strcpy of the file /goform/formArpBindConfig. Executing manipulation of the argument pools can lead to buffer overflow. The attack may be performed from remote. The exploit has been published and may be used.…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,81 % · rekomendacja wg zapisanej polityki
A weakness has been identified in H3C Magic B0 up to 100R002. This impacts the function EditWlanMacList of the file /goform/aspForm. This manipulation of the argument param causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been made available to the public and…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,81 % · rekomendacja wg zapisanej polityki
The ShopLentor – WooCommerce Builder for Elementor & Gutenberg +21 Modules – All in One Solution (formerly WooLentor) plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.2.5 via the 'load_template' function. This makes it possible for unauthenticated…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,82 % · rekomendacja wg zapisanej polityki
@vitejs/plugin-rs provides React Server Components (RSC) support for Vite. Versions 0.5.5 and below are vulnerable to arbitrary remote code execution on the development server through unsafe dynamic imports in server function APIs (loadServerAction, decodeReply, decodeAction) when integrated into…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,81 % · rekomendacja wg zapisanej polityki
SAP NetWeaver Visual Composer does not perform sufficient authorization checks in certain portal functionality. An attacker with low privileges could invoke internal operations on a preconfigured remote system. Depending on the remote connection configuration, this could lead to a full compromise…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,9 · EPSS 0,31 % · rekomendacja wg zapisanej polityki
NVIDIA Isaac Launchable contains a vulnerability where an attacker could cause an execution with unnecessary privileges. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, denial of service, information disclosure and data tampering.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,81 % · rekomendacja wg zapisanej polityki
obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, tool dispatch does not compare the caller-controlled input.vault value with the vault bound to the caller, the JSON Web Token (JWT) has no vault claim, and the folder access-control list is…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,9 · EPSS 0,31 % · rekomendacja wg zapisanej polityki
A vulnerability has been found in UTT 进取 512W up to 1.7.7-171114. Affected by this issue is the function strcpy of the file /goform/formP2PLimitConfig. Such manipulation of the argument except leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to…
Opis źródłowy NVD · EN
Pilne działanie
CVSS 9,8 · EPSS 0,81 % · rekomendacja wg zapisanej polityki
A flaw has been found in UTT 进取 520W 1.7.7-180627. The impacted element is the function strcpy of the file /goform/formArpBindConfig. Executing manipulation of the argument pools can lead to buffer overflow. The attack may be performed from remote. The exploit has been published and may be used.…
Opis źródłowy NVD · EN
Pilne działanie
CVSS 9,8 · EPSS 0,81 % · rekomendacja wg zapisanej polityki
A weakness has been identified in H3C Magic B0 up to 100R002. This impacts the function EditWlanMacList of the file /goform/aspForm. This manipulation of the argument param causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been made available to the public and…
Opis źródłowy NVD · EN
Pilne działanie
CVSS 9,8 · EPSS 0,81 % · rekomendacja wg zapisanej polityki