Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.
The…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,31 % · rekomendacja wg zapisanej polityki
Galette is a membership management web application for non profit organizations. Prior to version 1.2.0, while updating any existing account with a self forged POST request, one can gain higher privileges. Version 1.2.0 fixes the issue.
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,3 % · rekomendacja wg zapisanej polityki
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy Infrastructure Controller (APIC) engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,3 % · rekomendacja wg zapisanej polityki
A missing integrity verification vulnerability exists in the OnGuard agent of ClearPass Policy Manager. Successful exploitation could allow an unauthenticated, remote attacker to execute arbitrary code on the affected endpoint with the elevated privileges of the agent.
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,3 % · rekomendacja wg zapisanej polityki
In BluetoothCccHandlerCallbackImpl of bluetooth_ccc.cc, there is a possible use-after-free due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,3 % · rekomendacja wg zapisanej polityki
Wheels 1.1.8 through 4.1.1 allows SQL injection when caller-supplied quoted values are parsed again as SQL by dynamic finders (such as findOneByEmail), the query builder's where(property, value) and where(property, operator, value), string/UUID-key lookup paths (findByKey, updateByKey, deleteByKey…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,3 % · rekomendacja wg zapisanej polityki
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.
The…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,31 % · rekomendacja wg zapisanej polityki
Galette is a membership management web application for non profit organizations. Prior to version 1.2.0, while updating any existing account with a self forged POST request, one can gain higher privileges. Version 1.2.0 fixes the issue.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,3 % · rekomendacja wg zapisanej polityki
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy Infrastructure Controller (APIC) engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,3 % · rekomendacja wg zapisanej polityki
A missing integrity verification vulnerability exists in the OnGuard agent of ClearPass Policy Manager. Successful exploitation could allow an unauthenticated, remote attacker to execute arbitrary code on the affected endpoint with the elevated privileges of the agent.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,3 % · rekomendacja wg zapisanej polityki
In BluetoothCccHandlerCallbackImpl of bluetooth_ccc.cc, there is a possible use-after-free due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,3 % · rekomendacja wg zapisanej polityki
Wheels 1.1.8 through 4.1.1 allows SQL injection when caller-supplied quoted values are parsed again as SQL by dynamic finders (such as findOneByEmail), the query builder's where(property, value) and where(property, operator, value), string/UUID-key lookup paths (findByKey, updateByKey, deleteByKey…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,3 % · rekomendacja wg zapisanej polityki