KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
dns_unpack_name() caches the buffer tailroom once and reuses it while appending DNS labels. As the buffer grows, the cached size becomes incorrect, and the final null terminator can be written past the buffer. With assertions disabled (default), a malicious DNS response can trigger an…
Wstrzyknięcie SQL w CodeAstro Membership Management System umożliwia nieautoryzowany dostęp do danych.
Obejście uwierzytelnienia w Ajenti 2.1.36 umożliwia zdalne wykonanie dowolnych poleceń.
IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to obtain administrative access due to failure to reject empty passwords during LDAP authentication.
Przepełnienie bufora w ksmbd umożliwia zapis poza przydzieloną pamięcią, co może prowadzić do awarii.
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() sip_help_tcp() stores the size change of each NAT-rewritten SIP message in s16 diff and accumulates it in s16 tdiff, but a single message can grow by…
Incorrect boundary conditions in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
Brak blokady w funkcji gfs2_logd w jądrze Linuxa może prowadzić do wyścigu w logowaniu.
IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.
WookTeam v1.6.6 and before is vulnerable to RCE in the project task export interface /api/project/task/export. The data parameter is base64-decoded and passed directly into the string2array() function in app/Module/Base.php, which executes eval("\$array = $data;") whenever the decoded string…
Mitigation bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
Mitigation bypass in the PDF Viewer component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.
Błąd w DBI::SQL::Nano powoduje zwracanie błędnych wyników w zapytaniach SQL.
Wstrzyknięcie SQL w Refugee Food Management System umożliwia zdalne ataki.
Wstrzyknięcie SQL w College Notes Uploading System umożliwia zdalne ataki.
Wstrzyknięcie SQL w Refugee Food Management System umożliwia zdalne ataki.
Wstrzyknięcie SQL w Refugee Food Management System umożliwia zdalne wykonanie ataku.
A security flaw has been discovered in itsourcecode Student Management System 1.0. This affects an unknown part of the file /record.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be…
A vulnerability has been found in itsourcecode Student Managemen System 1.0. Affected by this issue is some unknown functionality of the file /advisers.php. Such manipulation of the argument sy leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the…
A vulnerability was determined in itsourcecode Student Management System 1.0. Impacted is an unknown function of the file /addrecord.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be…
Wstrzyknięcie SQL w Online Cake Ordering System umożliwia zdalne ataki.
A vulnerability was detected in itsourcecode Online Cake Ordering System 1.0. Affected by this issue is some unknown functionality of the file /cakeshop/supplier.php. Performing manipulation of the argument supplier results in sql injection. The attack can be initiated remotely. The exploit is now…
A weakness has been identified in code-projects Computer Book Store 1.0. Affected is an unknown function of the file /admin_delete.php. This manipulation of the argument bookisbn causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available to the public…
A vulnerability was determined in itsourcecode Student Management System 1.0. The impacted element is an unknown function of the file /update_subject.php. Executing manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been publicly…
A vulnerability was detected in itsourcecode Student Management System 1.0. Impacted is an unknown function of the file /uprec.php. Performing manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit is now public and may be used.
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| dns_unpack_name() caches the buffer tailroom once and reuses it while appending DNS labels. | dns_unpack_name() caches the buffer tailroom once and reuses it while appending DNS labels. As the buffer grows, the cached size becomes incorrect, and the final null terminator can be written past the buffer. With assertions disabled (default), a malicious DNS response can trigger an… |
Pilne działanie | 9,8 | 0,39 % | ||
| Wstrzyknięcie SQL w CodeAstro Membership Management System umożliwia nieautoryzowany dostęp do danych. | Wstrzyknięcie SQL w CodeAstro Membership Management System umożliwia nieautoryzowany dostęp do danych. |
Pilne działanie | 9,8 | 0,39 % | ||
| Obejście uwierzytelnienia w Ajenti 2.1.36 umożliwia zdalne wykonanie dowolnych poleceń. | Obejście uwierzytelnienia w Ajenti 2.1.36 umożliwia zdalne wykonanie dowolnych poleceń. |
W tym tygodniu | 9,8 | 0,39 % | ||
| IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could… | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to obtain administrative access due to failure to reject empty passwords during LDAP authentication. |
W tym tygodniu | 9,8 | 0,39 % | ||
| Przepełnienie bufora w ksmbd umożliwia zapis poza przydzieloną pamięcią, co może prowadzić do awarii. | Przepełnienie bufora w ksmbd umożliwia zapis poza przydzieloną pamięcią, co może prowadzić do awarii. |
W tym tygodniu | 9,8 | 0,39 % | ||
| In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in… | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() sip_help_tcp() stores the size change of each NAT-rewritten SIP message in s16 diff and accumulates it in s16 tdiff, but a single message can grow by… |
W tym tygodniu | 9,8 | 0,39 % | ||
| Incorrect boundary conditions in the JavaScript: WebAssembly component. | Incorrect boundary conditions in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13. |
W tym tygodniu | 9,8 | 0,39 % | ||
| Brak blokady w funkcji gfs2_logd w jądrze Linuxa może prowadzić do wyścigu w logowaniu. | Brak blokady w funkcji gfs2_logd w jądrze Linuxa może prowadzić do wyścigu w logowaniu. |
W tym tygodniu | 9,8 | 0,39 % | ||
| IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization… | IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command. |
W tym tygodniu | 9,8 | 0,39 % | ||
| WookTeam v1.6.6 and before is vulnerable to RCE in the project task export interface /api/project/task/export. | WookTeam v1.6.6 and before is vulnerable to RCE in the project task export interface /api/project/task/export. The data parameter is base64-decoded and passed directly into the string2array() function in app/Module/Base.php, which executes eval("\$array = $data;") whenever the decoded string… |
W tym tygodniu | 9,8 | 0,39 % | ||
| Mitigation bypass in the DOM: Networking component. | Mitigation bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13. |
W tym tygodniu | 9,8 | 0,39 % | ||
| Mitigation bypass in the PDF Viewer component. | Mitigation bypass in the PDF Viewer component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13. |
W tym tygodniu | 9,8 | 0,39 % | ||
| Błąd w DBI::SQL::Nano powoduje zwracanie błędnych wyników w zapytaniach SQL. | Błąd w DBI::SQL::Nano powoduje zwracanie błędnych wyników w zapytaniach SQL. |
W tym tygodniu | 9,8 | 0,39 % | ||
| Wstrzyknięcie SQL w Refugee Food Management System umożliwia zdalne ataki. | Wstrzyknięcie SQL w Refugee Food Management System umożliwia zdalne ataki. |
Pilne działanie | 9,8 | 0,39 % | ||
| Wstrzyknięcie SQL w College Notes Uploading System umożliwia zdalne ataki. | Wstrzyknięcie SQL w College Notes Uploading System umożliwia zdalne ataki. |
Pilne działanie | 9,8 | 0,39 % | ||
| Wstrzyknięcie SQL w Refugee Food Management System umożliwia zdalne ataki. | Wstrzyknięcie SQL w Refugee Food Management System umożliwia zdalne ataki. |
Pilne działanie | 9,8 | 0,39 % | ||
| Wstrzyknięcie SQL w Refugee Food Management System umożliwia zdalne wykonanie ataku. | Wstrzyknięcie SQL w Refugee Food Management System umożliwia zdalne wykonanie ataku. |
Pilne działanie | 9,8 | 0,39 % | ||
| A security flaw has been discovered in itsourcecode Student Management System 1.0. | A security flaw has been discovered in itsourcecode Student Management System 1.0. This affects an unknown part of the file /record.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be… |
Pilne działanie | 9,8 | 0,39 % | ||
| A vulnerability has been found in itsourcecode Student Managemen System 1.0. | A vulnerability has been found in itsourcecode Student Managemen System 1.0. Affected by this issue is some unknown functionality of the file /advisers.php. Such manipulation of the argument sy leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the… |
Pilne działanie | 9,8 | 0,39 % | ||
| A vulnerability was determined in itsourcecode Student Management System 1.0. | A vulnerability was determined in itsourcecode Student Management System 1.0. Impacted is an unknown function of the file /addrecord.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be… |
Pilne działanie | 9,8 | 0,39 % | ||
| Wstrzyknięcie SQL w Online Cake Ordering System umożliwia zdalne ataki. | Wstrzyknięcie SQL w Online Cake Ordering System umożliwia zdalne ataki. |
Pilne działanie | 9,8 | 0,39 % | ||
| A vulnerability was detected in itsourcecode Online Cake Ordering System 1.0. | A vulnerability was detected in itsourcecode Online Cake Ordering System 1.0. Affected by this issue is some unknown functionality of the file /cakeshop/supplier.php. Performing manipulation of the argument supplier results in sql injection. The attack can be initiated remotely. The exploit is now… |
Pilne działanie | 9,8 | 0,39 % | ||
| A weakness has been identified in code-projects Computer Book Store 1.0. | A weakness has been identified in code-projects Computer Book Store 1.0. Affected is an unknown function of the file /admin_delete.php. This manipulation of the argument bookisbn causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available to the public… |
Pilne działanie | 9,8 | 0,39 % | ||
| A vulnerability was determined in itsourcecode Student Management System 1.0. | A vulnerability was determined in itsourcecode Student Management System 1.0. The impacted element is an unknown function of the file /update_subject.php. Executing manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been publicly… |
Pilne działanie | 9,8 | 0,39 % | ||
| A vulnerability was detected in itsourcecode Student Management System 1.0. | A vulnerability was detected in itsourcecode Student Management System 1.0. Impacted is an unknown function of the file /uprec.php. Performing manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit is now public and may be used. |
Pilne działanie | 9,8 | 0,39 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.