KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Insufficient Session Expiration vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.
Unauthenticated PHP Object Injection in Qwery <= 3.6.1 versions.
Unauthenticated PHP Object Injection in Photolia <= 1.0.3 versions.
Deserialization of Untrusted Data vulnerability in VillaTheme AFFI – Affiliate Marketing for WooCommerce affi-affiliate-marketing-for-woo allows Object Injection.This issue affects AFFI – Affiliate Marketing for WooCommerce: from n/a through 1.0.10.
Wykorzystanie błędu use-after-free w Firefox umożliwia ucieczkę z piaskownicy procesu podrzędnego.
Gitea Actions decided whether a fork pull request run needed approval based on the user who triggered the event rather than the pull request author. For `pull_request` activity triggered by a maintainer during ordinary triage, such as adding a label, the run was created without requiring approval,…
Unauthenticated PHP Object Injection in GDPR Framework By Data443 <= 2.5.0 versions.
Niewłaściwa walidacja URL w IBM Application Gateway Operator umożliwia atak SSRF.
Integer overflow in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
Integer overflow in the Audio/Video component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.
Wtyczka Mentoring dla WordPressa pozwala na eskalację uprawnień do konta administratora.
Błąd zapisu pamięci poza granicami w DVP-12SE11T może prowadzić do zdalnego wykonania kodu.
Wstrzyknięcie SQL w SourceCodester Baby Care System umożliwia zdalne wykonanie ataku.
As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), has conducted a comprehensive internal security review. This review resulted in software hardening releases…
Błąd w serwerze HTTP Undertow pozwala na przetwarzanie złośliwych nagłówków Host, co może prowadzić do złośliwego przechwytywania sesji i ataków na…
Unauthenticated PHP Object Injection in Anesta <= 1.5.3 versions.
Unauthenticated Privilege Escalation in Tonda Membership <= 1.0.1 versions.
Deserialization of Untrusted Data vulnerability in Axiomthemes Balance balance allows Object Injection.This issue affects Balance: from n/a through 1.12.0.
Deserialization of Untrusted Data vulnerability in ThemeREX Group IPharm ipharm allows Object Injection.This issue affects IPharm: from n/a through 1.2.4.
Deserialization of Untrusted Data vulnerability in ThemeREX Group Hygia hygia allows Object Injection.This issue affects Hygia: from n/a through 1.21.0.
Deserialization of Untrusted Data vulnerability in ThemeREX Group Hogwords hogwords allows Object Injection.This issue affects Hogwords: from n/a through 1.2.7.
Deserialization of Untrusted Data vulnerability in ThemeREX Group Greeny greeny allows Object Injection.This issue affects Greeny: from n/a through 2.10.0.
Deserialization of Untrusted Data vulnerability in ThemeREX Group Edema edema allows Object Injection.This issue affects Edema: from n/a through 1.2.2.2.
Deserialization of Untrusted Data vulnerability in Liquid Web / StellarWP The Events Calendar allows Object Injection. This issue affects The Events Calendar: from n/a through 6.17.4.
As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by…
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Insufficient Session Expiration vulnerability in Progress MOVEit Transfer. | Insufficient Session Expiration vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4. |
W tym tygodniu | 9,8 | 0,34 % | ||
| Unauthenticated PHP Object Injection in Qwery <= 3.6.1 versions. | Unauthenticated PHP Object Injection in Qwery <= 3.6.1 versions. |
W tym tygodniu | 9,8 | 0,34 % | ||
| Unauthenticated PHP Object Injection in Photolia <= 1.0.3 versions. | Unauthenticated PHP Object Injection in Photolia <= 1.0.3 versions. |
W tym tygodniu | 9,8 | 0,34 % | ||
| Deserialization of Untrusted Data vulnerability in VillaTheme AFFI – Affiliate Marketing for WooCommerce affi-affiliate-marketing-for-woo… | Deserialization of Untrusted Data vulnerability in VillaTheme AFFI – Affiliate Marketing for WooCommerce affi-affiliate-marketing-for-woo allows Object Injection.This issue affects AFFI – Affiliate Marketing for WooCommerce: from n/a through 1.0.10. |
W tym tygodniu | 9,8 | 0,34 % | ||
| Wykorzystanie błędu use-after-free w Firefox umożliwia ucieczkę z piaskownicy procesu podrzędnego. | Wykorzystanie błędu use-after-free w Firefox umożliwia ucieczkę z piaskownicy procesu podrzędnego. |
W tym tygodniu | 9,8 | 0,34 % | ||
| Gitea Actions decided whether a fork pull request run needed approval based on the user who triggered the event rather than the pull… | Gitea Actions decided whether a fork pull request run needed approval based on the user who triggered the event rather than the pull request author. For `pull_request` activity triggered by a maintainer during ordinary triage, such as adding a label, the run was created without requiring approval,… |
Pilne działanie | 9,8 | 0,34 % | ||
| Unauthenticated PHP Object Injection in GDPR Framework By Data443 <= 2.5.0 versions. | Unauthenticated PHP Object Injection in GDPR Framework By Data443 <= 2.5.0 versions. |
W tym tygodniu | 9,8 | 0,34 % | ||
| Niewłaściwa walidacja URL w IBM Application Gateway Operator umożliwia atak SSRF. | Niewłaściwa walidacja URL w IBM Application Gateway Operator umożliwia atak SSRF. |
W tym tygodniu | 9,8 | 0,34 % | ||
| Integer overflow in the Graphics: ImageLib component. | Integer overflow in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. |
W tym tygodniu | 9,8 | 0,34 % | ||
| Integer overflow in the Audio/Video component. | Integer overflow in the Audio/Video component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. |
W tym tygodniu | 9,8 | 0,34 % | ||
| Wtyczka Mentoring dla WordPressa pozwala na eskalację uprawnień do konta administratora. | Wtyczka Mentoring dla WordPressa pozwala na eskalację uprawnień do konta administratora. |
W tym tygodniu | 9,8 | 0,34 % | ||
| Błąd zapisu pamięci poza granicami w DVP-12SE11T może prowadzić do zdalnego wykonania kodu. | Błąd zapisu pamięci poza granicami w DVP-12SE11T może prowadzić do zdalnego wykonania kodu. |
W tym tygodniu | 9,8 | 0,34 % | ||
| Wstrzyknięcie SQL w SourceCodester Baby Care System umożliwia zdalne wykonanie ataku. | Wstrzyknięcie SQL w SourceCodester Baby Care System umożliwia zdalne wykonanie ataku. |
Pilne działanie | 9,8 | 0,34 % | ||
| As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco License On-Prem, formerly… | As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), has conducted a comprehensive internal security review. This review resulted in software hardening releases… |
W tym tygodniu | 9,8 | 0,33 % | ||
| Błąd w serwerze HTTP Undertow pozwala na przetwarzanie złośliwych nagłówków Host, co może prowadzić do złośliwego przechwytywania sesji i… | Błąd w serwerze HTTP Undertow pozwala na przetwarzanie złośliwych nagłówków Host, co może prowadzić do złośliwego przechwytywania sesji i ataków na… |
W tym tygodniu | 9,6 | 1,33 % | ||
| Unauthenticated PHP Object Injection in Anesta <= 1.5.3 versions. | Unauthenticated PHP Object Injection in Anesta <= 1.5.3 versions. |
W tym tygodniu | 9,8 | 0,33 % | ||
| Unauthenticated Privilege Escalation in Tonda Membership <= 1.0.1 versions. | Unauthenticated Privilege Escalation in Tonda Membership <= 1.0.1 versions. |
W tym tygodniu | 9,8 | 0,33 % | ||
| Deserialization of Untrusted Data vulnerability in Axiomthemes Balance balance allows Object Injection.This issue affects Balance: from… | Deserialization of Untrusted Data vulnerability in Axiomthemes Balance balance allows Object Injection.This issue affects Balance: from n/a through 1.12.0. |
W tym tygodniu | 9,8 | 0,33 % | ||
| Deserialization of Untrusted Data vulnerability in ThemeREX Group IPharm ipharm allows Object Injection.This issue affects IPharm: from… | Deserialization of Untrusted Data vulnerability in ThemeREX Group IPharm ipharm allows Object Injection.This issue affects IPharm: from n/a through 1.2.4. |
W tym tygodniu | 9,8 | 0,33 % | ||
| Deserialization of Untrusted Data vulnerability in ThemeREX Group Hygia hygia allows Object Injection.This issue affects Hygia: from n/a… | Deserialization of Untrusted Data vulnerability in ThemeREX Group Hygia hygia allows Object Injection.This issue affects Hygia: from n/a through 1.21.0. |
W tym tygodniu | 9,8 | 0,33 % | ||
| Deserialization of Untrusted Data vulnerability in ThemeREX Group Hogwords hogwords allows Object Injection.This issue affects Hogwords:… | Deserialization of Untrusted Data vulnerability in ThemeREX Group Hogwords hogwords allows Object Injection.This issue affects Hogwords: from n/a through 1.2.7. |
W tym tygodniu | 9,8 | 0,33 % | ||
| Deserialization of Untrusted Data vulnerability in ThemeREX Group Greeny greeny allows Object Injection.This issue affects Greeny: from… | Deserialization of Untrusted Data vulnerability in ThemeREX Group Greeny greeny allows Object Injection.This issue affects Greeny: from n/a through 2.10.0. |
W tym tygodniu | 9,8 | 0,33 % | ||
| Deserialization of Untrusted Data vulnerability in ThemeREX Group Edema edema allows Object Injection.This issue affects Edema: from n/a… | Deserialization of Untrusted Data vulnerability in ThemeREX Group Edema edema allows Object Injection.This issue affects Edema: from n/a through 1.2.2.2. |
W tym tygodniu | 9,8 | 0,33 % | ||
| Deserialization of Untrusted Data vulnerability in Liquid Web / StellarWP The Events Calendar allows Object Injection. | Deserialization of Untrusted Data vulnerability in Liquid Web / StellarWP The Events Calendar allows Object Injection. This issue affects The Events Calendar: from n/a through 6.17.4. |
W tym tygodniu | 9,8 | 0,33 % | ||
| As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security… | As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by… |
W tym tygodniu | 9,8 | 0,33 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.