Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
In the Linux kernel, the following vulnerability has been resolved:
net/smc: fix socket use-after-free during link group termination
__smc_lgr_terminate() drops conns_lock after finding a connection in
lgr->conns_all, but before taking a reference on its socket. The connection
is embedded in the…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,5 % · rekomendacja wg zapisanej polityki
IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote unauthenticated attacker to execute arbitrary code on the system due to the deserialization of untrusted data.
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,5 % · rekomendacja wg zapisanej polityki
A type confusion issue was addressed with improved memory handling. This issue is fixed in macOS Tahoe 26.6, tvOS 26.6. An app may be able to cause unexpected system termination.
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,5 % · rekomendacja wg zapisanej polityki
The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious app may be able to corrupt memory of a system process.
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,5 % · rekomendacja wg zapisanej polityki
The WP Social Media Login WordPress plugin through 1.0.6 does not verify that a social login was actually completed with the identity provider before authenticating a visitor, allowing unauthenticated attackers to log in as any existing user, including administrators, by supplying that user's…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,5 % · rekomendacja wg zapisanej polityki
The SmilePass Selfie Login WordPress plugin through 1.0.2 does not perform any server-side verification of the identity it is asked to authenticate, allowing unauthenticated users to log in as any registered account, including administrators.
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,5 % · rekomendacja wg zapisanej polityki
The JSON Options WordPress plugin through 0.0.4 does not have any capability check or nonce verification on one of its actions, which runs on every request and is available to unauthenticated users, allowing them to update arbitrary WordPress options. This can be leveraged to enable user…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,5 % · rekomendacja wg zapisanej polityki
The TrueBooker WordPress plugin before 1.2.7 does not have proper authorisation checks in some of its AJAX actions, allowing unauthenticated users to change the email address of arbitrary users, including administrators, and subsequently take over their account via the password reset flow.
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,5 % · rekomendacja wg zapisanej polityki
The TabaPay Gateway WordPress plugin through 1.4.0 does not validate the payment callback before establishing a session for the account associated with the referenced order, allowing unauthenticated attackers to log in as any registered user, including an administrator.
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,5 % · rekomendacja wg zapisanej polityki
The Customer Email Verification for WooCommerce WordPress plugin before 3.2.6 does not correctly validate the email-verification activation code, relying on a loose comparison that an attacker can satisfy with a crafted value type, allowing unauthenticated users to verify and take over the account…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,5 % · rekomendacja wg zapisanej polityki
CVSS
9,8
EPSS
0,5 %
Poprawka
Status poprawki nieustalony
Publikacja
Aktualizacja NVD
Podatności: opis, rekomendacja, CVSS, EPSS i daty źródłowe. Rekomendacja nie potwierdza podatności własnego zasobu.
In the Linux kernel, the following vulnerability has been resolved:
net/smc: fix socket use-after-free during link group termination
__smc_lgr_terminate() drops conns_lock after finding a connection in
lgr->conns_all, but before taking a reference on its socket. The connection
is embedded in the…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,5 % · rekomendacja wg zapisanej polityki
IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote unauthenticated attacker to execute arbitrary code on the system due to the deserialization of untrusted data.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,5 % · rekomendacja wg zapisanej polityki
A type confusion issue was addressed with improved memory handling. This issue is fixed in macOS Tahoe 26.6, tvOS 26.6. An app may be able to cause unexpected system termination.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,5 % · rekomendacja wg zapisanej polityki
The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious app may be able to corrupt memory of a system process.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,5 % · rekomendacja wg zapisanej polityki
The WP Social Media Login WordPress plugin through 1.0.6 does not verify that a social login was actually completed with the identity provider before authenticating a visitor, allowing unauthenticated attackers to log in as any existing user, including administrators, by supplying that user's…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,5 % · rekomendacja wg zapisanej polityki
The SmilePass Selfie Login WordPress plugin through 1.0.2 does not perform any server-side verification of the identity it is asked to authenticate, allowing unauthenticated users to log in as any registered account, including administrators.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,5 % · rekomendacja wg zapisanej polityki
The JSON Options WordPress plugin through 0.0.4 does not have any capability check or nonce verification on one of its actions, which runs on every request and is available to unauthenticated users, allowing them to update arbitrary WordPress options. This can be leveraged to enable user…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,5 % · rekomendacja wg zapisanej polityki
The TrueBooker WordPress plugin before 1.2.7 does not have proper authorisation checks in some of its AJAX actions, allowing unauthenticated users to change the email address of arbitrary users, including administrators, and subsequently take over their account via the password reset flow.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,5 % · rekomendacja wg zapisanej polityki
The TabaPay Gateway WordPress plugin through 1.4.0 does not validate the payment callback before establishing a session for the account associated with the referenced order, allowing unauthenticated attackers to log in as any registered user, including an administrator.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,5 % · rekomendacja wg zapisanej polityki
The Customer Email Verification for WooCommerce WordPress plugin before 3.2.6 does not correctly validate the email-verification activation code, relying on a loose comparison that an attacker can satisfy with a crafted value type, allowing unauthenticated users to verify and take over the account…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,5 % · rekomendacja wg zapisanej polityki
9,8
0,5 %
Publikacja
Aktualizacja NVD
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
NVD · publikacjeOpóźnione lub nieustalone
NVD · aktualizacjeOpóźnione lub nieustalone
CISA KEVOstatnie przetworzenie zakończone
FIRST EPSSOstatnie przetworzenie zakończoneData modelu znajduje się przy rekordzie.