Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
An unauthenticated remote attacker can bypass authentication and gain full access to administrative API endpoints in Nutanix Prism Element by including a crafted internal management HTTP header. The vulnerability is caused by a misconfiguration in the application's authentication…
Opis źródłowy NVD · ENCVSS 9,3 · EPSS 1,28 % · rekomendacja wg zapisanej polityki
LMDeploy deserializes disaggregated-serving peer messages with pickle. The handle_zmq_recv coroutine in lmdeploy/pytorch/disagg/conn/engine_conn.py reads peer-to-peer cache-free requests with recv_pyobj(), which deserializes the received bytes with pickle.loads(), and the isinstance check against…
Opis źródłowy NVD · ENCVSS 9,3 · EPSS 1,27 % · rekomendacja wg zapisanej polityki
WolfStack before 25.9.2 contains a hard-coded cluster-authentication secret compiled into every build and published as a constant in src/auth/mod.rs, allowing remote unauthenticated attackers to bypass authentication by supplying this value in the X-WolfStack-Secret header to the require_auth()…
Opis źródłowy NVD · ENCVSS 9,3 · EPSS 1,24 % · rekomendacja wg zapisanej polityki
A vulnerability was determined in Netcore NR268 1.7.121109. Affected is the function user_ok of the component CGI Execution. This manipulation causes improper authentication. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted…
Opis źródłowy NVD · ENCVSS 9,3 · EPSS 1,23 % · rekomendacja wg zapisanej polityki
In Znuny through 7.3.6, an attacker can bypass specific standard login procedures and gain unauthorized access to sensitive system functions by manipulating a specific HTTP request header. Because the application incorrectly trusts this header, an attacker can impersonate any user, including…
Opis źródłowy NVD · ENCVSS 9,5 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
Ollama is vulnerable to path traversal in the `/api/pull` endpoint due to insufficient validation of layer digests by the `digestToPath` function. An unauthenticated remote attacker can specify a path traversal sequence as a layer digest, causing a malicious binary to be written outside the model…
Opis źródłowy NVD · ENalert CERT.pl · CVSS 9,4 · EPSS 0,71 % · rekomendacja wg zapisanej polityki
An unauthenticated remote attacker can bypass authentication and gain full access to administrative API endpoints in Nutanix Prism Element by including a crafted internal management HTTP header. The vulnerability is caused by a misconfiguration in the application's authentication…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,3 · EPSS 1,28 % · rekomendacja wg zapisanej polityki
LMDeploy deserializes disaggregated-serving peer messages with pickle. The handle_zmq_recv coroutine in lmdeploy/pytorch/disagg/conn/engine_conn.py reads peer-to-peer cache-free requests with recv_pyobj(), which deserializes the received bytes with pickle.loads(), and the isinstance check against…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,3 · EPSS 1,27 % · rekomendacja wg zapisanej polityki
WolfStack before 25.9.2 contains a hard-coded cluster-authentication secret compiled into every build and published as a constant in src/auth/mod.rs, allowing remote unauthenticated attackers to bypass authentication by supplying this value in the X-WolfStack-Secret header to the require_auth()…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,3 · EPSS 1,24 % · rekomendacja wg zapisanej polityki
A vulnerability was determined in Netcore NR268 1.7.121109. Affected is the function user_ok of the component CGI Execution. This manipulation causes improper authentication. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,3 · EPSS 1,23 % · rekomendacja wg zapisanej polityki
In Znuny through 7.3.6, an attacker can bypass specific standard login procedures and gain unauthorized access to sensitive system functions by manipulating a specific HTTP request header. Because the application incorrectly trusts this header, an attacker can impersonate any user, including…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,5 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
Ollama is vulnerable to path traversal in the `/api/pull` endpoint due to insufficient validation of layer digests by the `digestToPath` function. An unauthenticated remote attacker can specify a path traversal sequence as a layer digest, causing a malicious binary to be written outside the model…
Opis źródłowy NVD · EN
Pilne działanie
alert CERT.pl · CVSS 9,4 · EPSS 0,71 % · rekomendacja wg zapisanej polityki