KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Błędy bezpieczeństwa pamięci w Firefox i Thunderbird mogą prowadzić do zdalnego wykonania kodu.
Przepełnienie bufora w Free Float FTP 1.0 umożliwia zdalne wykonanie dowolnego kodu przez wysłanie spreparowanego polecenia STOR.
Brak ograniczeń w Tenda W30E V2 umożliwia nieograniczone próby brute-force na hasła administratora.
Luka w cms_rest.php w SIGB PMB umożliwia zdalne wykonanie dowolnego kodu.
An SQL injection vulnerability has been reported to affect QuMagie. A remote attacker can exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following versions: QuMagie 2.7.0 and later
Improper privilege management in Actor in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)
Błąd w jądrze Linuxa prowadzi do przepełnienia wskaźnika i zablokowania wątku roboczego.
Brak uwierzytelnienia w Centreon Infra Monitoring umożliwia dostęp do funkcji bez ograniczeń.
Parse Server is an open source backend that can be deployed to any infrastructure that runs Node.js. In versions prior to 8.6.0-alpha.2, a GitHub CI workflow is triggered in a way that grants the GitHub Actions workflow elevated permissions, giving it access to GitHub secrets and write permissions…
Użycie po zwolnieniu w kliencie SMB w jądrze Linux może prowadzić do nieprzewidzianych błędów.
Joomla Extension - lomart.fr - Unauthenticated remote code installation in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29
An issue in Time4 Popcorn for Windows <= 6.2.1.18 and Time4Popcorn for MacOS <= 6.2.1.17 and Time4Popcorn for Android <= 3.5.0.173 allows a remote attacker to execute arbitrary code via the updater.exe for windows, PT.updd on MacOS components
A vulnerability was identified in code-projects Student File Management System 1.0. This affects an unknown function of the file /admin/delete_user.php. The manipulation of the argument user_id leads to sql injection. The attack is possible to be carried out remotely. The exploit is publicly…
A security flaw has been discovered in code-projects Student File Management System 1.0. This impacts an unknown function of the file /admin/delete_student.php. The manipulation of the argument stud_id results in sql injection. The attack may be performed from remote. The exploit has been released…
A flaw has been found in code-projects Student File Management System 1.0. The affected element is an unknown function of the file /admin/save_student.php. Executing manipulation of the argument stud_no can lead to sql injection. The attack may be launched remotely. The exploit has been published…
A security flaw has been discovered in code-projects Student File Management System 1.0. This vulnerability affects unknown code of the file /admin/save_user.php. The manipulation of the argument firstname results in sql injection. The attack can be executed remotely. The exploit has been released…
A weakness has been identified in code-projects Student File Management System 1.0. This issue affects some unknown processing of the file /admin/update_student.php. This manipulation of the argument stud_id causes sql injection. The attack is possible to be carried out remotely. The exploit has…
A vulnerability was found in itsourcecode COVID Tracking System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/?page=zone. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and…
A security flaw has been discovered in kidaze CourseSelectionSystem up to 42cd892b40a18d50bd4ed1905fa89f939173a464. The impacted element is an unknown function of the file /Profilers/SProfile/reg.php. Performing a manipulation of the argument USN results in sql injection. It is possible to…
A weakness has been identified in code-projects Class and Exam Timetable Management 1.0. Affected by this issue is some unknown functionality of the file /preview7.php. This manipulation of the argument course_year_section/semester causes sql injection. Remote exploitation of the attack is…
A flaw has been found in Campcodes Supplier Management System 1.0. Affected is an unknown function of the file /admin/add_distributor.php. This manipulation of the argument txtDistributorAddress causes sql injection. The attack can be initiated remotely. The exploit has been published and may be…
A Heap-based Buffer Overflow vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and prior that could allow an attacker to disclose information or execute arbitrary code.
Wstrzyknięcie SQL w itsourcecode Web-Based Internet Laboratory Management System umożliwia zdalne ataki.
Wstrzyknięcie SQL w itsourcecode Online Voting System umożliwia zdalne ataki.
A weakness has been identified in SourceCodester Patients Waiting Area Queue Management System 1.0. The impacted element is an unknown function of the file /php/api_patient_schedule.php. This manipulation of the argument appointmentID causes sql injection. The attack can be initiated remotely. The…
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Błędy bezpieczeństwa pamięci w Firefox i Thunderbird mogą prowadzić do zdalnego wykonania kodu. | Błędy bezpieczeństwa pamięci w Firefox i Thunderbird mogą prowadzić do zdalnego wykonania kodu. |
W tym tygodniu | 9,8 | 0,42 % | ||
| Przepełnienie bufora w Free Float FTP 1.0 umożliwia zdalne wykonanie dowolnego kodu przez wysłanie spreparowanego polecenia STOR. | Przepełnienie bufora w Free Float FTP 1.0 umożliwia zdalne wykonanie dowolnego kodu przez wysłanie spreparowanego polecenia STOR. |
Pilne działanie | 9,8 | 0,42 % | ||
| Brak ograniczeń w Tenda W30E V2 umożliwia nieograniczone próby brute-force na hasła administratora. | Brak ograniczeń w Tenda W30E V2 umożliwia nieograniczone próby brute-force na hasła administratora. |
W tym tygodniu | 9,8 | 0,42 % | ||
| Luka w cms_rest.php w SIGB PMB umożliwia zdalne wykonanie dowolnego kodu. | Luka w cms_rest.php w SIGB PMB umożliwia zdalne wykonanie dowolnego kodu. |
W tym tygodniu | 9,8 | 0,42 % | ||
| An SQL injection vulnerability has been reported to affect QuMagie. | An SQL injection vulnerability has been reported to affect QuMagie. A remote attacker can exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following versions: QuMagie 2.7.0 and later |
W tym tygodniu | 9,8 | 0,42 % | ||
| Improper privilege management in Actor in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to… | Improper privilege management in Actor in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low) |
W tym tygodniu | 9,8 | 0,42 % | ||
| Błąd w jądrze Linuxa prowadzi do przepełnienia wskaźnika i zablokowania wątku roboczego. | Błąd w jądrze Linuxa prowadzi do przepełnienia wskaźnika i zablokowania wątku roboczego. |
W tym tygodniu | 9,8 | 0,42 % | ||
| Brak uwierzytelnienia w Centreon Infra Monitoring umożliwia dostęp do funkcji bez ograniczeń. | Brak uwierzytelnienia w Centreon Infra Monitoring umożliwia dostęp do funkcji bez ograniczeń. |
W tym tygodniu | 9,8 | 0,42 % | ||
| Parse Server is an open source backend that can be deployed to any infrastructure that runs Node.js. | Parse Server is an open source backend that can be deployed to any infrastructure that runs Node.js. In versions prior to 8.6.0-alpha.2, a GitHub CI workflow is triggered in a way that grants the GitHub Actions workflow elevated permissions, giving it access to GitHub secrets and write permissions… |
W tym tygodniu | 9,8 | 0,42 % | ||
| Użycie po zwolnieniu w kliencie SMB w jądrze Linux może prowadzić do nieprzewidzianych błędów. | Użycie po zwolnieniu w kliencie SMB w jądrze Linux może prowadzić do nieprzewidzianych błędów. |
W tym tygodniu | 9,8 | 0,42 % | ||
| Joomla Extension - lomart.fr - Unauthenticated remote code installation in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29 | Joomla Extension - lomart.fr - Unauthenticated remote code installation in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29 |
W tym tygodniu | 9,8 | 0,42 % | ||
| An issue in Time4 Popcorn for Windows <= 6.2.1.18 and Time4Popcorn for MacOS <= 6.2.1.17 and Time4Popcorn for Android <= 3.5.0.173 allows… | An issue in Time4 Popcorn for Windows <= 6.2.1.18 and Time4Popcorn for MacOS <= 6.2.1.17 and Time4Popcorn for Android <= 3.5.0.173 allows a remote attacker to execute arbitrary code via the updater.exe for windows, PT.updd on MacOS components |
W tym tygodniu | 9,8 | 0,42 % | ||
| A vulnerability was identified in code-projects Student File Management System 1.0. | A vulnerability was identified in code-projects Student File Management System 1.0. This affects an unknown function of the file /admin/delete_user.php. The manipulation of the argument user_id leads to sql injection. The attack is possible to be carried out remotely. The exploit is publicly… |
Pilne działanie | 9,8 | 0,42 % | ||
| A security flaw has been discovered in code-projects Student File Management System 1.0. | A security flaw has been discovered in code-projects Student File Management System 1.0. This impacts an unknown function of the file /admin/delete_student.php. The manipulation of the argument stud_id results in sql injection. The attack may be performed from remote. The exploit has been released… |
Pilne działanie | 9,8 | 0,42 % | ||
| A flaw has been found in code-projects Student File Management System 1.0. | A flaw has been found in code-projects Student File Management System 1.0. The affected element is an unknown function of the file /admin/save_student.php. Executing manipulation of the argument stud_no can lead to sql injection. The attack may be launched remotely. The exploit has been published… |
Pilne działanie | 9,8 | 0,42 % | ||
| A security flaw has been discovered in code-projects Student File Management System 1.0. | A security flaw has been discovered in code-projects Student File Management System 1.0. This vulnerability affects unknown code of the file /admin/save_user.php. The manipulation of the argument firstname results in sql injection. The attack can be executed remotely. The exploit has been released… |
Pilne działanie | 9,8 | 0,42 % | ||
| A weakness has been identified in code-projects Student File Management System 1.0. | A weakness has been identified in code-projects Student File Management System 1.0. This issue affects some unknown processing of the file /admin/update_student.php. This manipulation of the argument stud_id causes sql injection. The attack is possible to be carried out remotely. The exploit has… |
Pilne działanie | 9,8 | 0,42 % | ||
| A vulnerability was found in itsourcecode COVID Tracking System 1.0. | A vulnerability was found in itsourcecode COVID Tracking System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/?page=zone. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and… |
Pilne działanie | 9,8 | 0,42 % | ||
| A security flaw has been discovered in kidaze CourseSelectionSystem up to 42cd892b40a18d50bd4ed1905fa89f939173a464. | A security flaw has been discovered in kidaze CourseSelectionSystem up to 42cd892b40a18d50bd4ed1905fa89f939173a464. The impacted element is an unknown function of the file /Profilers/SProfile/reg.php. Performing a manipulation of the argument USN results in sql injection. It is possible to… |
Pilne działanie | 9,8 | 0,42 % | ||
| A weakness has been identified in code-projects Class and Exam Timetable Management 1.0. | A weakness has been identified in code-projects Class and Exam Timetable Management 1.0. Affected by this issue is some unknown functionality of the file /preview7.php. This manipulation of the argument course_year_section/semester causes sql injection. Remote exploitation of the attack is… |
Pilne działanie | 9,8 | 0,42 % | ||
| A flaw has been found in Campcodes Supplier Management System 1.0. | A flaw has been found in Campcodes Supplier Management System 1.0. Affected is an unknown function of the file /admin/add_distributor.php. This manipulation of the argument txtDistributorAddress causes sql injection. The attack can be initiated remotely. The exploit has been published and may be… |
Pilne działanie | 9,8 | 0,42 % | ||
| A Heap-based Buffer Overflow vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions… | A Heap-based Buffer Overflow vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and prior that could allow an attacker to disclose information or execute arbitrary code. |
W tym tygodniu | 9,8 | 0,42 % | ||
| Wstrzyknięcie SQL w itsourcecode Web-Based Internet Laboratory Management System umożliwia zdalne ataki. | Wstrzyknięcie SQL w itsourcecode Web-Based Internet Laboratory Management System umożliwia zdalne ataki. |
Pilne działanie | 9,8 | 0,42 % | ||
| Wstrzyknięcie SQL w itsourcecode Online Voting System umożliwia zdalne ataki. | Wstrzyknięcie SQL w itsourcecode Online Voting System umożliwia zdalne ataki. |
Pilne działanie | 9,8 | 0,42 % | ||
| A weakness has been identified in SourceCodester Patients Waiting Area Queue Management System 1.0. | A weakness has been identified in SourceCodester Patients Waiting Area Queue Management System 1.0. The impacted element is an unknown function of the file /php/api_patient_schedule.php. This manipulation of the argument appointmentID causes sql injection. The attack can be initiated remotely. The… |
Pilne działanie | 9,8 | 0,42 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.