Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
In the Linux kernel, the following vulnerability has been resolved:
ipvs: do not propagate one-packet flag to synced conns
Synced connections can be created before their destination exists. When
the destination is later added, ip_vs_bind_dest() copies connection flags
from the destination into…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
In Apache StreamPark versions 2.0.0 through 2.1.7, a security vulnerability involving a hard-coded encryption key exists. This vulnerability occurs because the system uses a fixed, immutable key for encryption instead of dynamically generating or securely configuring the key. Attackers may obtain…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
A security vulnerability has been detected in SourceCodester Survey Application System 1.0. This affects an unknown function of the file /view_survey.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly and…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
A vulnerability was identified in code-projects Nero Social Networking Site 1.0. Affected by this vulnerability is an unknown functionality of the file /addfriend.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit is publicly…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
A security flaw has been discovered in code-projects Nero Social Networking Site 1.0. Affected by this issue is some unknown functionality of the file /deletemessage.php. Performing manipulation of the argument message_id results in sql injection. It is possible to initiate the attack remotely.…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
A weakness has been identified in code-projects Nero Social Networking Site 1.0. This affects an unknown part of the file /friendprofile.php. Executing manipulation of the argument ID can lead to sql injection. It is possible to launch the attack remotely. The exploit has been made available to…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
A vulnerability was determined in code-projects Nero Social Networking Site 1.0. Affected is an unknown function of the file /acceptoffres.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
A vulnerability was identified in projectworlds Advanced Library Management System 1.0. Impacted is an unknown function of the file /index.php. Such manipulation of the argument keywords leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used.
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
A vulnerability was found in SourceCodester Best House Rental Management System 1.0. This impacts the function login2 of the file /admin_class.php. Performing manipulation of the argument Username results in sql injection. The attack is possible to be carried out remotely. The exploit has been…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
smb: client: Fix use-after-free in cifs_try_adding_channels()
cifs_try_adding_channels() takes a temporary reference to an interface
before dropping iface_lock. If cifs_ses_add_channel() fails, it drops
that reference and then…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
The Elated Membership plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.2. This is due to the plugin not properly logging in a user with the data that was previously verified through the 'eltdf_membership_check_facebook_user' and the…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to a heap-based buffer overflow, caused by improper bounds checking. An unauthenticated remote attacker could overflow the buffer and execute arbitrary…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
WeGIA is a web manager for charitable institutions. Prior to 3.8.6, the unauthenticated web/html/socio/sistema/cadastro_cobranca.php endpoint accepts POST input through extract($_REQUEST) and directly incorporates valor, valor_pago, id_pessoa, id_socio, and id_sociotipo into UPDATE, INSERT, and…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
WeGIA is a web manager for charitable institutions. Prior to 3.8.6, the unauthenticated web/html/socio/sistema/cadastro_cobrancas_geracao.php endpoint accepts form-encoded POST data through extract($_REQUEST) and interpolates codigo, descricao, data_emissao, data_vencimento, data_pagamento, valor,…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
The Advanced IP Blocker plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 8.13.13 The vulnerability exists because `handle_login_action()` performs no server-side check — via transient, session marker, or equivalent — that a requester completed…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry
svcauth_gss_decode_credbody() writes the caller's
rpc_gss_wire_cred field by field and assigns gc_ctx.len only on
the success tail. The caller storage is…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
A vulnerability has been found in code-projects Student Information System 2.0. This issue affects some unknown processing of the file /register.php. The manipulation leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
A flaw has been found in code-projects Student Information System 2.0. This vulnerability affects unknown code of the file /index.php. Executing manipulation of the argument Username can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used.
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
A vulnerability was detected in code-projects Student Information System 2.0. This affects an unknown part of the file /searchquery.php. Performing manipulation of the argument s results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used.
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
CVSS
9,8
EPSS
0,47 %
Poprawka
Status poprawki nieustalony
Publikacja
Aktualizacja NVD
Podatności: opis, rekomendacja, CVSS, EPSS i daty źródłowe. Rekomendacja nie potwierdza podatności własnego zasobu.
In the Linux kernel, the following vulnerability has been resolved:
ipvs: do not propagate one-packet flag to synced conns
Synced connections can be created before their destination exists. When
the destination is later added, ip_vs_bind_dest() copies connection flags
from the destination into…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
In Apache StreamPark versions 2.0.0 through 2.1.7, a security vulnerability involving a hard-coded encryption key exists. This vulnerability occurs because the system uses a fixed, immutable key for encryption instead of dynamically generating or securely configuring the key. Attackers may obtain…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
A security vulnerability has been detected in SourceCodester Survey Application System 1.0. This affects an unknown function of the file /view_survey.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly and…
Opis źródłowy NVD · EN
Pilne działanie
CVSS 9,8 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
A vulnerability was identified in code-projects Nero Social Networking Site 1.0. Affected by this vulnerability is an unknown functionality of the file /addfriend.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit is publicly…
Opis źródłowy NVD · EN
Pilne działanie
CVSS 9,8 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
A security flaw has been discovered in code-projects Nero Social Networking Site 1.0. Affected by this issue is some unknown functionality of the file /deletemessage.php. Performing manipulation of the argument message_id results in sql injection. It is possible to initiate the attack remotely.…
Opis źródłowy NVD · EN
Pilne działanie
CVSS 9,8 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
A weakness has been identified in code-projects Nero Social Networking Site 1.0. This affects an unknown part of the file /friendprofile.php. Executing manipulation of the argument ID can lead to sql injection. It is possible to launch the attack remotely. The exploit has been made available to…
Opis źródłowy NVD · EN
Pilne działanie
CVSS 9,8 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
A vulnerability was determined in code-projects Nero Social Networking Site 1.0. Affected is an unknown function of the file /acceptoffres.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and…
Opis źródłowy NVD · EN
Pilne działanie
CVSS 9,8 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
A vulnerability was identified in projectworlds Advanced Library Management System 1.0. Impacted is an unknown function of the file /index.php. Such manipulation of the argument keywords leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used.
Opis źródłowy NVD · EN
Pilne działanie
CVSS 9,8 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
A vulnerability was found in SourceCodester Best House Rental Management System 1.0. This impacts the function login2 of the file /admin_class.php. Performing manipulation of the argument Username results in sql injection. The attack is possible to be carried out remotely. The exploit has been…
Opis źródłowy NVD · EN
Pilne działanie
CVSS 9,8 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
smb: client: Fix use-after-free in cifs_try_adding_channels()
cifs_try_adding_channels() takes a temporary reference to an interface
before dropping iface_lock. If cifs_ses_add_channel() fails, it drops
that reference and then…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
The Elated Membership plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.2. This is due to the plugin not properly logging in a user with the data that was previously verified through the 'eltdf_membership_check_facebook_user' and the…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to a heap-based buffer overflow, caused by improper bounds checking. An unauthenticated remote attacker could overflow the buffer and execute arbitrary…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
WeGIA is a web manager for charitable institutions. Prior to 3.8.6, the unauthenticated web/html/socio/sistema/cadastro_cobranca.php endpoint accepts POST input through extract($_REQUEST) and directly incorporates valor, valor_pago, id_pessoa, id_socio, and id_sociotipo into UPDATE, INSERT, and…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
WeGIA is a web manager for charitable institutions. Prior to 3.8.6, the unauthenticated web/html/socio/sistema/cadastro_cobrancas_geracao.php endpoint accepts form-encoded POST data through extract($_REQUEST) and interpolates codigo, descricao, data_emissao, data_vencimento, data_pagamento, valor,…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
The Advanced IP Blocker plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 8.13.13 The vulnerability exists because `handle_login_action()` performs no server-side check — via transient, session marker, or equivalent — that a requester completed…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry
svcauth_gss_decode_credbody() writes the caller's
rpc_gss_wire_cred field by field and assigns gc_ctx.len only on
the success tail. The caller storage is…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
A vulnerability has been found in code-projects Student Information System 2.0. This issue affects some unknown processing of the file /register.php. The manipulation leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be…
Opis źródłowy NVD · EN
Pilne działanie
CVSS 9,8 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
A flaw has been found in code-projects Student Information System 2.0. This vulnerability affects unknown code of the file /index.php. Executing manipulation of the argument Username can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used.
Opis źródłowy NVD · EN
Pilne działanie
CVSS 9,8 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
A vulnerability was detected in code-projects Student Information System 2.0. This affects an unknown part of the file /searchquery.php. Performing manipulation of the argument s results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used.
Opis źródłowy NVD · EN
Pilne działanie
CVSS 9,8 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
9,8
0,47 %
Publikacja
Aktualizacja NVD
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
NVD · publikacjeOpóźnione lub nieustalone
NVD · aktualizacjeOpóźnione lub nieustalone
CISA KEVOstatnie przetworzenie zakończone
FIRST EPSSOstatnie przetworzenie zakończoneData modelu znajduje się przy rekordzie.