Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
The EasyCommerce – AI-Powered, Fast & Beautiful WordPress Ecommerce Plugin plugin for WordPress is vulnerable to Privilege Escalation in versions 0.9.0-beta2 to 1.8.2. This is due to the /easycommerce/v1/orders REST API endpoint not properly restricting the ability for users to select roles during…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,43 % · rekomendacja wg zapisanej polityki
A vulnerability has been found in projectworlds Advanced Library Management System 1.0. Affected by this issue is some unknown functionality of the file /borrow_book.php. Such manipulation of the argument roll_number leads to sql injection. The attack may be launched remotely. The exploit has been…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,43 % · rekomendacja wg zapisanej polityki
A flaw has been found in projectworlds Advanced Library Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /view_admin.php. This manipulation of the argument admin_id causes sql injection. The attack may be initiated remotely. The exploit has been…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,43 % · rekomendacja wg zapisanej polityki
The management portal's diagnostic ping tool of Fanvil x7a firmware version 2.6.0.1182 does not handle user supplied input securely. The lack of secure user input handling allows any unauthenticated attacker to inject commands and run code in the underlying Android operating system.
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,43 % · rekomendacja wg zapisanej polityki
Applications that deserialize execution contexts with Jackson2ExecutionContextStringSerializer are vulnerable to a deserialization attack if they use an untrusted data source for the job repository. The JobParameterDeserializer does not properly enforce the trusted-types allowlist, allowing an…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,43 % · rekomendacja wg zapisanej polityki
Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Essbase. Successful attacks of this vulnerability can result in takeover…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,42 % · rekomendacja wg zapisanej polityki
Homer is open source telecom observability software. Prior to version 11.0.283, both JWT middleware functions (`JWTMiddleware` and `JWTMiddlewareV4`) immediately return `next(c)` when `jwtSecret == ""`. The JWT secret defaults to an empty string. On a default installation, all protected API…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,42 % · rekomendacja wg zapisanej polityki
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in rtCamp Inc. rtMedia for WordPress, BuddyPress and bbPress buddypress-media allows Path Traversal.This issue affects rtMedia for WordPress, BuddyPress and bbPress: from n/a through 4.7.13.
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,42 % · rekomendacja wg zapisanej polityki
The EasyCommerce – AI-Powered, Fast & Beautiful WordPress Ecommerce Plugin plugin for WordPress is vulnerable to Privilege Escalation in versions 0.9.0-beta2 to 1.8.2. This is due to the /easycommerce/v1/orders REST API endpoint not properly restricting the ability for users to select roles during…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,43 % · rekomendacja wg zapisanej polityki
A vulnerability has been found in projectworlds Advanced Library Management System 1.0. Affected by this issue is some unknown functionality of the file /borrow_book.php. Such manipulation of the argument roll_number leads to sql injection. The attack may be launched remotely. The exploit has been…
Opis źródłowy NVD · EN
Pilne działanie
CVSS 9,8 · EPSS 0,43 % · rekomendacja wg zapisanej polityki
A flaw has been found in projectworlds Advanced Library Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /view_admin.php. This manipulation of the argument admin_id causes sql injection. The attack may be initiated remotely. The exploit has been…
Opis źródłowy NVD · EN
Pilne działanie
CVSS 9,8 · EPSS 0,43 % · rekomendacja wg zapisanej polityki
The management portal's diagnostic ping tool of Fanvil x7a firmware version 2.6.0.1182 does not handle user supplied input securely. The lack of secure user input handling allows any unauthenticated attacker to inject commands and run code in the underlying Android operating system.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,43 % · rekomendacja wg zapisanej polityki
Applications that deserialize execution contexts with Jackson2ExecutionContextStringSerializer are vulnerable to a deserialization attack if they use an untrusted data source for the job repository. The JobParameterDeserializer does not properly enforce the trusted-types allowlist, allowing an…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,43 % · rekomendacja wg zapisanej polityki
Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Essbase. Successful attacks of this vulnerability can result in takeover…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,42 % · rekomendacja wg zapisanej polityki
Homer is open source telecom observability software. Prior to version 11.0.283, both JWT middleware functions (`JWTMiddleware` and `JWTMiddlewareV4`) immediately return `next(c)` when `jwtSecret == ""`. The JWT secret defaults to an empty string. On a default installation, all protected API…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,42 % · rekomendacja wg zapisanej polityki
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in rtCamp Inc. rtMedia for WordPress, BuddyPress and bbPress buddypress-media allows Path Traversal.This issue affects rtMedia for WordPress, BuddyPress and bbPress: from n/a through 4.7.13.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,42 % · rekomendacja wg zapisanej polityki