Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
The front-end interface /superdiamond/preview/{projectCode}/{module}/{type} of super-diamond-server <= 1.3.3 is vulnerable to SQL injection. The module parameter is directly concatenated into the SQL IN clause through StringUtils.split() and string concatenation without being parameterized and…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in UMAI Vision Traffic Analysis System allows SQL Injection.
This issue affects Traffic Analysis System: from 30 before 34.
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Tahoe 26.6. An app may be able to cause unexpected system termination.
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
Memory safety bugs present in Firefox ESR 115.37, Firefox ESR 140.12 and Firefox 152. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 153, Firefox…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Turkmesh Communication Services Inc. Turkhotspot 5651 Loglama allows SQL Injection.
This issue affects Turkhotspot 5651 Loglama: from 5.1.2 before 5.1.3.
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
Fiber Utils is a collection of common functions created for Fiber. In versions 2.0.0-rc.3 and below, when the system's cryptographic random number generator (crypto/rand) fails, both functions silently fall back to returning predictable UUID values, including the zero UUID…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
A race condition was addressed with improved state handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination.
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
A race condition was addressed with improved state handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, watchOS 26.6. An app may be able to cause unexpected system termination or write kernel memory.
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
A flaw has been found in campcodes Online Student Enrollment System 1.0. This impacts an unknown function of the file /admin/register.php. Executing a manipulation of the argument photo can lead to unrestricted upload. The attack can be launched remotely. The exploit has been published and may be…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
The CE21 Suite plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.3.1 via the log file. This makes it possible for unauthenticated attackers to extract sensitive data including authentication credentials, which can be used to log in as…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
Gitea's OAuth2 and OpenID Connect sign-in paths do not require a WebAuthn challenge when WebAuthn is the account's only configured second factor. A party able to authenticate through the affected external identity flow can obtain a full session without the passkey verification enforced during…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
Vulnerabilities have been identified in the affected interface of ClearPass Policy Manager that could potentially allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain unauthorized access to the affected…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,46 % · rekomendacja wg zapisanej polityki
A vulnerability was identified in Campcodes Retro Basketball Shoes Online Store 1.0. Affected by this issue is some unknown functionality of the file /admin/admin_index.php. Such manipulation of the argument Username leads to sql injection. The attack can be launched remotely. The exploit is…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,46 % · rekomendacja wg zapisanej polityki
CVSS
9,8
EPSS
0,46 %
Poprawka
Status poprawki nieustalony
Publikacja
Aktualizacja NVD
Podatności: opis, rekomendacja, CVSS, EPSS i daty źródłowe. Rekomendacja nie potwierdza podatności własnego zasobu.
The front-end interface /superdiamond/preview/{projectCode}/{module}/{type} of super-diamond-server <= 1.3.3 is vulnerable to SQL injection. The module parameter is directly concatenated into the SQL IN clause through StringUtils.split() and string concatenation without being parameterized and…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in UMAI Vision Traffic Analysis System allows SQL Injection.
This issue affects Traffic Analysis System: from 30 before 34.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Tahoe 26.6. An app may be able to cause unexpected system termination.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
Memory safety bugs present in Firefox ESR 115.37, Firefox ESR 140.12 and Firefox 152. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 153, Firefox…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Turkmesh Communication Services Inc. Turkhotspot 5651 Loglama allows SQL Injection.
This issue affects Turkhotspot 5651 Loglama: from 5.1.2 before 5.1.3.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
Fiber Utils is a collection of common functions created for Fiber. In versions 2.0.0-rc.3 and below, when the system's cryptographic random number generator (crypto/rand) fails, both functions silently fall back to returning predictable UUID values, including the zero UUID…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
A race condition was addressed with improved state handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
A race condition was addressed with improved state handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, watchOS 26.6. An app may be able to cause unexpected system termination or write kernel memory.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
A flaw has been found in campcodes Online Student Enrollment System 1.0. This impacts an unknown function of the file /admin/register.php. Executing a manipulation of the argument photo can lead to unrestricted upload. The attack can be launched remotely. The exploit has been published and may be…
Opis źródłowy NVD · EN
Pilne działanie
CVSS 9,8 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
The CE21 Suite plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.3.1 via the log file. This makes it possible for unauthenticated attackers to extract sensitive data including authentication credentials, which can be used to log in as…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
Gitea's OAuth2 and OpenID Connect sign-in paths do not require a WebAuthn challenge when WebAuthn is the account's only configured second factor. A party able to authenticate through the affected external identity flow can obtain a full session without the passkey verification enforced during…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
Vulnerabilities have been identified in the affected interface of ClearPass Policy Manager that could potentially allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain unauthorized access to the affected…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,46 % · rekomendacja wg zapisanej polityki
A vulnerability was identified in Campcodes Retro Basketball Shoes Online Store 1.0. Affected by this issue is some unknown functionality of the file /admin/admin_index.php. Such manipulation of the argument Username leads to sql injection. The attack can be launched remotely. The exploit is…
Opis źródłowy NVD · EN
Pilne działanie
CVSS 9,8 · EPSS 0,46 % · rekomendacja wg zapisanej polityki
9,8
0,46 %
Publikacja
Aktualizacja NVD
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
NVD · publikacjeOpóźnione lub nieustalone
NVD · aktualizacjeOpóźnione lub nieustalone
CISA KEVOstatnie przetworzenie zakończone
FIRST EPSSOstatnie przetworzenie zakończoneData modelu znajduje się przy rekordzie.