KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Weblate is a web based localization tool. In versions prior to 5.15, it was possible to accept an invitation opened by a different user. Version 5.15. contains a patch. As a workaround, avoid leaving one's Weblate sessions with an invitation opened unattended.
The WP CarDealer plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.2.16. This is due to the 'WP_CarDealer_User::process_register' function not restricting what user roles a user can register with. This makes it possible for unauthenticated attackers…
The Tiger theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 101.2.1. This is due to the 'paypal-submit.php' file not restricting what user roles a user can register with. This makes it possible for unauthenticated attackers to supply the…
The Tiare Membership plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.2. This is due to the 'tiare_membership_init_rest_api_register' function not restricting what user roles a user can register with. This makes it possible for unauthenticated…
The FindAll Listing plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.0.5. This is due to the 'findall_listing_user_registration_additional_params' function not restricting what user roles a user can register with. This makes it possible for…
The EduKart Pro plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.0.3. This is due to the 'edukart_pro_register_user_front_end' function not restricting what user roles a user can register with. This makes it possible for unauthenticated attackers…
A vulnerability was identified in PowerJob up to 5.1.2. This vulnerability affects the function checkConnectivity of the file src/main/java/tech/powerjob/common/utils/net/PingPongUtils.java of the component Network Request Handler. The manipulation of the argument targetIp/targetPort leads to…
Server Version Disclosure.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .
Błąd inicjalizacji spinlocka w jądrze Linuxa może prowadzić do nieprzewidywalnych zachowań systemu.
Błąd w konwersji iova na va w jądrze Linuxa prowadzi do nieprawidłowego dostępu do pamięci.
Brak autoryzacji w Sfwebservice InWave Jobs umożliwia nieprawidłowe wykorzystanie kontroli dostępu.
Wstrzyknięcie SQL w itsourcecode Inventory Management System umożliwia zdalne wykonanie ataku.
Improper Authentication vulnerability in DIAEnergie allows Authentication Bypass. This issue affects DIAEnergie: before 1.11.00.022.
A security flaw has been discovered in Campcodes School Fees Payment Management System 1.0. This issue affects some unknown processing of the file /ajax.php?action=delete_course. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been…
Obejście weryfikacji w EasyMP Network Updater umożliwia nieautoryzowane aktualizacje projektora Epson.
Obejście uwierzytelnienia w Headless Single Sign On umożliwia nieautoryzowany dostęp.
Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Use of Hard-coded Credentials vulnerability in the CSM Authorization. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.
Obejście uwierzytelnienia w DVP-12SE11T umożliwia dostęp bez pełnego hasła.
Wstrzyknięcie SQL w Hospital Management System umożliwia nieautoryzowany dostęp do danych.
Błąd wyścigu w jądrze Linuxa w kontekście TLS umożliwia wykorzystanie po pamięci po zwolnieniu.
Unlimited upload vulnerability for dangerous file types in WinPlus v24.11.27 from Informática del Este. This vulnerability allows an attacker to upload a 'webshell' by sending a POST request to '/WinplusPortal/ws/sWinplus.svc/json/uploadfile'.
IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to bypass authentication and escalate privileges due to improper validation of sub-requests.
Insufficient Password Policy.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
Resource Lacking AuthN.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .
Privilege Escalation through SUID-bit Binary.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Weblate is a web based localization tool. | Weblate is a web based localization tool. In versions prior to 5.15, it was possible to accept an invitation opened by a different user. Version 5.15. contains a patch. As a workaround, avoid leaving one's Weblate sessions with an invitation opened unattended. |
W tym tygodniu | 9,8 | 0,35 % | ||
| The WP CarDealer plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.2.16. | The WP CarDealer plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.2.16. This is due to the 'WP_CarDealer_User::process_register' function not restricting what user roles a user can register with. This makes it possible for unauthenticated attackers… |
W tym tygodniu | 9,8 | 0,35 % | ||
| The Tiger theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 101.2.1. | The Tiger theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 101.2.1. This is due to the 'paypal-submit.php' file not restricting what user roles a user can register with. This makes it possible for unauthenticated attackers to supply the… |
W tym tygodniu | 9,8 | 0,35 % | ||
| The Tiare Membership plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.2. | The Tiare Membership plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.2. This is due to the 'tiare_membership_init_rest_api_register' function not restricting what user roles a user can register with. This makes it possible for unauthenticated… |
W tym tygodniu | 9,8 | 0,35 % | ||
| The FindAll Listing plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.0.5. | The FindAll Listing plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.0.5. This is due to the 'findall_listing_user_registration_additional_params' function not restricting what user roles a user can register with. This makes it possible for… |
W tym tygodniu | 9,8 | 0,35 % | ||
| The EduKart Pro plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.0.3. | The EduKart Pro plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.0.3. This is due to the 'edukart_pro_register_user_front_end' function not restricting what user roles a user can register with. This makes it possible for unauthenticated attackers… |
W tym tygodniu | 9,8 | 0,35 % | ||
| A vulnerability was identified in PowerJob up to 5.1.2. | A vulnerability was identified in PowerJob up to 5.1.2. This vulnerability affects the function checkConnectivity of the file src/main/java/tech/powerjob/common/utils/net/PingPongUtils.java of the component Network Request Handler. The manipulation of the argument targetIp/targetPort leads to… |
Pilne działanie | 9,8 | 0,35 % | ||
| Server Version Disclosure.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 . | Server Version Disclosure.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 . |
W tym tygodniu | 9,8 | 0,35 % | ||
| Błąd inicjalizacji spinlocka w jądrze Linuxa może prowadzić do nieprzewidywalnych zachowań systemu. | Błąd inicjalizacji spinlocka w jądrze Linuxa może prowadzić do nieprzewidywalnych zachowań systemu. |
W tym tygodniu | 9,8 | 0,35 % | ||
| Błąd w konwersji iova na va w jądrze Linuxa prowadzi do nieprawidłowego dostępu do pamięci. | Błąd w konwersji iova na va w jądrze Linuxa prowadzi do nieprawidłowego dostępu do pamięci. |
W tym tygodniu | 9,8 | 0,35 % | ||
| Brak autoryzacji w Sfwebservice InWave Jobs umożliwia nieprawidłowe wykorzystanie kontroli dostępu. | Brak autoryzacji w Sfwebservice InWave Jobs umożliwia nieprawidłowe wykorzystanie kontroli dostępu. |
W tym tygodniu | 9,8 | 0,35 % | ||
| Wstrzyknięcie SQL w itsourcecode Inventory Management System umożliwia zdalne wykonanie ataku. | Wstrzyknięcie SQL w itsourcecode Inventory Management System umożliwia zdalne wykonanie ataku. |
Pilne działanie | 9,8 | 0,35 % | ||
| Improper Authentication vulnerability in DIAEnergie allows Authentication Bypass. | Improper Authentication vulnerability in DIAEnergie allows Authentication Bypass. This issue affects DIAEnergie: before 1.11.00.022. |
W tym tygodniu | 9,8 | 0,35 % | ||
| A security flaw has been discovered in Campcodes School Fees Payment Management System 1.0. | A security flaw has been discovered in Campcodes School Fees Payment Management System 1.0. This issue affects some unknown processing of the file /ajax.php?action=delete_course. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been… |
Pilne działanie | 9,8 | 0,35 % | ||
| Obejście weryfikacji w EasyMP Network Updater umożliwia nieautoryzowane aktualizacje projektora Epson. | Obejście weryfikacji w EasyMP Network Updater umożliwia nieautoryzowane aktualizacje projektora Epson. |
W tym tygodniu | 9,8 | 0,35 % | ||
| Obejście uwierzytelnienia w Headless Single Sign On umożliwia nieautoryzowany dostęp. | Obejście uwierzytelnienia w Headless Single Sign On umożliwia nieautoryzowany dostęp. |
W tym tygodniu | 9,8 | 0,35 % | ||
| Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Use of Hard-coded Credentials vulnerability in the CSM… | Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Use of Hard-coded Credentials vulnerability in the CSM Authorization. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges. |
W tym tygodniu | 9,8 | 0,34 % | ||
| Obejście uwierzytelnienia w DVP-12SE11T umożliwia dostęp bez pełnego hasła. | Obejście uwierzytelnienia w DVP-12SE11T umożliwia dostęp bez pełnego hasła. |
W tym tygodniu | 9,8 | 0,34 % | ||
| Wstrzyknięcie SQL w Hospital Management System umożliwia nieautoryzowany dostęp do danych. | Wstrzyknięcie SQL w Hospital Management System umożliwia nieautoryzowany dostęp do danych. |
W tym tygodniu | 9,8 | 0,34 % | ||
| Błąd wyścigu w jądrze Linuxa w kontekście TLS umożliwia wykorzystanie po pamięci po zwolnieniu. | Błąd wyścigu w jądrze Linuxa w kontekście TLS umożliwia wykorzystanie po pamięci po zwolnieniu. |
W tym tygodniu | 9,8 | 0,34 % | ||
| Unlimited upload vulnerability for dangerous file types in WinPlus v24.11.27 from Informática del Este. | Unlimited upload vulnerability for dangerous file types in WinPlus v24.11.27 from Informática del Este. This vulnerability allows an attacker to upload a 'webshell' by sending a POST request to '/WinplusPortal/ws/sWinplus.svc/json/uploadfile'. |
W tym tygodniu | 9,8 | 0,34 % | ||
| IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to bypass authentication and escalate privileges due to improper… | IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to bypass authentication and escalate privileges due to improper validation of sub-requests. |
W tym tygodniu | 9,8 | 0,34 % | ||
| Insufficient Password Policy.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. | Insufficient Password Policy.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. |
W tym tygodniu | 9,8 | 0,34 % | ||
| Resource Lacking AuthN.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 . | Resource Lacking AuthN.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 . |
W tym tygodniu | 9,8 | 0,34 % | ||
| Privilege Escalation through SUID-bit Binary.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 . | Privilege Escalation through SUID-bit Binary.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 . |
W tym tygodniu | 9,8 | 0,34 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.