KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Luka w WMPro umożliwia zdalnym atakującym przesyłanie i wykonywanie złośliwego kodu.
Luka w BPMFlowWebkit umożliwia zdalne przesyłanie i wykonywanie złośliwego kodu.
Wstrzyknięcie HTML w Discourse umożliwia zdalne wykonanie kodu JavaScript w przeglądarkach użytkowników.
The object name of a dynamically created BACnet File Object is interpreted as a file path without sufficient validation. Because relative paths are not limited to the intended directory, an unauthenticated remote attacker can traverse outside of it and read or overwrite arbitrary files on the…
@hulumi/policies versions before 1.3.2 contain an evidence validation bypass vulnerability in Cloudflare and deployment-governance validators that allows attackers to suppress violations by submitting unrelated compliant evidence. Attackers can use evidence from different zones, hostnames,…
openssl_encrypt before 1.4.9 fails to sanitize the email field of imported identity documents, allowing attackers to inject ANSI escape sequences that forge the fingerprint verification line displayed to users. Attackers can deliver a crafted identity bundle through normal contact-exchange flows…
justhtml before 1.16.0 contains multiple HTML sanitization bypass issues that can allow active/dangerous content (e.g., script or style) to survive sanitization, potentially leading to cross-site scripting. The issues primarily affect advanced usage rather than the default JustHTML(...,…
justhtml before 1.15.0 contains multiple security issues in URL sanitization helpers (clean_url_value/clean_url_in_js_string), HTML serialization, Markdown passthrough (html_passthrough=True), and several custom sanitization-policy edge cases. Depending on configuration, an attacker can bypass…
Wstrzyknięcie SQL w ManageEngine Password Manager Pro i PAM360 umożliwia nieautoryzowany dostęp do danych.
Atlas-Livre contains an improper access control vulnerability in the admin controllers under Espace_admin/controleur/ that allows unauthenticated attackers to bypass session-based authentication guards by sending raw HTTP requests that ignore redirects. Attackers can invoke destructive admin…
A vulnerability was detected in Wavlink WL-WN530BE1-A 251117. This vulnerability affects the function strcpy of the file /cgi-bin/ExportAllSettings.cgi of the component Settings Export CGI. Performing a manipulation of the argument HTTP_COOKIE/X-Cmd results in stack-based buffer overflow. It is…
Obejście listy zablokowanych adresów w Gotenberg pozwala na dostęp do wewnętrznych usług.
Wykonanie dowolnego kodu PHP w aplikacji przez publicznie dostępne punkty dokumentacji w Scramble.
Brak losowego komponentu w mechanizmie resetowania hasła w Chamilo LMS umożliwia zmianę hasła bez uwierzytelnienia.
Obejście uwierzytelnienia w WWBN AVideo pozwala na nieautoryzowane zarządzanie transmisjami na żywo.
WhaTicket Community through commit cf04795 contains an authentication bypass vulnerability that allows unauthenticated attackers to self-register as administrators via POST /auth/signup. Attackers can omit the profile field or set it to admin, gaining user management, settings, and access to all…
An Improper Authentication vulnerability in J-Web of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network attacker to bypass J-Web authentication and execute CGI content with elevated privileges via a crafted HTTP request.
TarsWeb decides whether a request comes from a trusted local caller using a client-controlled header. app.js sets Koa's proxy option to true without naming which upstream proxies may be trusted and without limiting the number of forwarded hops, so the request address Koa reports is taken from the…
Błąd w Filebrowser umożliwia nieautoryzowanym atakującym rejestrację kont z pełnymi uprawnieniami.
Encryption is missing on the configuration interface for Growatt ShineLan-X and MIC 3300TL-X. This allows an attacker with access to the network to intercept and potentially manipulate communication requests between the inverter and its cloud endpoint.
The Crayons plugin for SPIP before 3.5.0 contains a missing authorization vulnerability that allows unauthenticated attackers to modify arbitrary editable object fields by omitting the secu_ anti-forgery parameter in crayons_store.php, causing the authorization dispatcher to resolve an…
Błąd w JSONata umożliwia zdalne wykonanie kodu przez dostęp do prototypu obiektu.
Bypass vulnerability in the authentication method in the GTT Tax Information System application, related to the Active Directory (LDAP) login method. Authentication is performed through a local WebSocket, but the web application does not properly validate the authenticity or origin of the data…
A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP/EVPN peer to cause root code execution on Junos OS or an rpd crash on Junos OS Evolved via protocol-valid route advertisements for an…
A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a remote configured BGP peer to cause an rpd crash, or on Junos OS remote code-execution, via sending a flow-spec update which is selected for re-advertisement.
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Luka w WMPro umożliwia zdalnym atakującym przesyłanie i wykonywanie złośliwego kodu. | Luka w WMPro umożliwia zdalnym atakującym przesyłanie i wykonywanie złośliwego kodu. |
W tym tygodniu | 9,3 | 0,59 % | ||
| Luka w BPMFlowWebkit umożliwia zdalne przesyłanie i wykonywanie złośliwego kodu. | Luka w BPMFlowWebkit umożliwia zdalne przesyłanie i wykonywanie złośliwego kodu. |
W tym tygodniu | 9,3 | 0,59 % | ||
| Wstrzyknięcie HTML w Discourse umożliwia zdalne wykonanie kodu JavaScript w przeglądarkach użytkowników. | Wstrzyknięcie HTML w Discourse umożliwia zdalne wykonanie kodu JavaScript w przeglądarkach użytkowników. |
W tym tygodniu | 9,3 | 0,59 % | ||
| The object name of a dynamically created BACnet File Object is interpreted as a file path without sufficient validation. | The object name of a dynamically created BACnet File Object is interpreted as a file path without sufficient validation. Because relative paths are not limited to the intended directory, an unauthenticated remote attacker can traverse outside of it and read or overwrite arbitrary files on the… |
W tym tygodniu | 9,3 | 0,59 % | ||
| @hulumi/policies versions before 1.3.2 contain an evidence validation bypass vulnerability in Cloudflare and deployment-governance… | @hulumi/policies versions before 1.3.2 contain an evidence validation bypass vulnerability in Cloudflare and deployment-governance validators that allows attackers to suppress violations by submitting unrelated compliant evidence. Attackers can use evidence from different zones, hostnames,… |
W tym tygodniu | 9,3 | 0,59 % | ||
| openssl_encrypt before 1.4.9 fails to sanitize the email field of imported identity documents, allowing attackers to inject ANSI escape… | openssl_encrypt before 1.4.9 fails to sanitize the email field of imported identity documents, allowing attackers to inject ANSI escape sequences that forge the fingerprint verification line displayed to users. Attackers can deliver a crafted identity bundle through normal contact-exchange flows… |
W tym tygodniu | 9,3 | 0,59 % | ||
| justhtml before 1.16.0 contains multiple HTML sanitization bypass issues that can allow active/dangerous content (e.g., script or style)… | justhtml before 1.16.0 contains multiple HTML sanitization bypass issues that can allow active/dangerous content (e.g., script or style) to survive sanitization, potentially leading to cross-site scripting. The issues primarily affect advanced usage rather than the default JustHTML(...,… |
W tym tygodniu | 9,3 | 0,59 % | ||
| justhtml before 1.15.0 contains multiple security issues in URL sanitization helpers (clean_url_value/clean_url_in_js_string), HTML… | justhtml before 1.15.0 contains multiple security issues in URL sanitization helpers (clean_url_value/clean_url_in_js_string), HTML serialization, Markdown passthrough (html_passthrough=True), and several custom sanitization-policy edge cases. Depending on configuration, an attacker can bypass… |
W tym tygodniu | 9,3 | 0,59 % | ||
| Wstrzyknięcie SQL w ManageEngine Password Manager Pro i PAM360 umożliwia nieautoryzowany dostęp do danych. | Wstrzyknięcie SQL w ManageEngine Password Manager Pro i PAM360 umożliwia nieautoryzowany dostęp do danych. |
Obserwuj | 8,8 | 3,09 % | ||
| Atlas-Livre contains an improper access control vulnerability in the admin controllers under Espace_admin/controleur/ that allows… | Atlas-Livre contains an improper access control vulnerability in the admin controllers under Espace_admin/controleur/ that allows unauthenticated attackers to bypass session-based authentication guards by sending raw HTTP requests that ignore redirects. Attackers can invoke destructive admin… |
W tym tygodniu | 9,3 | 0,59 % | ||
| A vulnerability was detected in Wavlink WL-WN530BE1-A 251117. | A vulnerability was detected in Wavlink WL-WN530BE1-A 251117. This vulnerability affects the function strcpy of the file /cgi-bin/ExportAllSettings.cgi of the component Settings Export CGI. Performing a manipulation of the argument HTTP_COOKIE/X-Cmd results in stack-based buffer overflow. It is… |
W tym tygodniu | 9,3 | 0,58 % | ||
| Obejście listy zablokowanych adresów w Gotenberg pozwala na dostęp do wewnętrznych usług. | Obejście listy zablokowanych adresów w Gotenberg pozwala na dostęp do wewnętrznych usług. |
Pilne działanie | 9,4 | 0,08 % | ||
| Wykonanie dowolnego kodu PHP w aplikacji przez publicznie dostępne punkty dokumentacji w Scramble. | Wykonanie dowolnego kodu PHP w aplikacji przez publicznie dostępne punkty dokumentacji w Scramble. |
W tym tygodniu | 9,4 | 0,08 % | ||
| Brak losowego komponentu w mechanizmie resetowania hasła w Chamilo LMS umożliwia zmianę hasła bez uwierzytelnienia. | Brak losowego komponentu w mechanizmie resetowania hasła w Chamilo LMS umożliwia zmianę hasła bez uwierzytelnienia. |
W tym tygodniu | 9,4 | 0,08 % | ||
| Obejście uwierzytelnienia w WWBN AVideo pozwala na nieautoryzowane zarządzanie transmisjami na żywo. | Obejście uwierzytelnienia w WWBN AVideo pozwala na nieautoryzowane zarządzanie transmisjami na żywo. |
Pilne działanie | 9,4 | 0,08 % | ||
| WhaTicket Community through commit cf04795 contains an authentication bypass vulnerability that allows unauthenticated attackers to… | WhaTicket Community through commit cf04795 contains an authentication bypass vulnerability that allows unauthenticated attackers to self-register as administrators via POST /auth/signup. Attackers can omit the profile field or set it to admin, gaining user management, settings, and access to all… |
W tym tygodniu | 9,3 | 0,58 % | ||
| An Improper Authentication vulnerability in J-Web of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network… | An Improper Authentication vulnerability in J-Web of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network attacker to bypass J-Web authentication and execute CGI content with elevated privileges via a crafted HTTP request. |
W tym tygodniu | 9,3 | 0,58 % | ||
| TarsWeb decides whether a request comes from a trusted local caller using a client-controlled header. | TarsWeb decides whether a request comes from a trusted local caller using a client-controlled header. app.js sets Koa's proxy option to true without naming which upstream proxies may be trusted and without limiting the number of forwarded hops, so the request address Koa reports is taken from the… |
W tym tygodniu | 9,3 | 0,58 % | ||
| Błąd w Filebrowser umożliwia nieautoryzowanym atakującym rejestrację kont z pełnymi uprawnieniami. | Błąd w Filebrowser umożliwia nieautoryzowanym atakującym rejestrację kont z pełnymi uprawnieniami. |
W tym tygodniu | 9,3 | 0,57 % | ||
| Encryption is missing on the configuration interface for Growatt ShineLan-X and MIC 3300TL-X. | Encryption is missing on the configuration interface for Growatt ShineLan-X and MIC 3300TL-X. This allows an attacker with access to the network to intercept and potentially manipulate communication requests between the inverter and its cloud endpoint. |
W tym tygodniu | 9,4 | 0,07 % | ||
| The Crayons plugin for SPIP before 3.5.0 contains a missing authorization vulnerability that allows unauthenticated attackers to modify… | The Crayons plugin for SPIP before 3.5.0 contains a missing authorization vulnerability that allows unauthenticated attackers to modify arbitrary editable object fields by omitting the secu_ anti-forgery parameter in crayons_store.php, causing the authorization dispatcher to resolve an… |
W tym tygodniu | 9,3 | 0,57 % | ||
| Błąd w JSONata umożliwia zdalne wykonanie kodu przez dostęp do prototypu obiektu. | Błąd w JSONata umożliwia zdalne wykonanie kodu przez dostęp do prototypu obiektu. |
W tym tygodniu | 9,3 | 0,57 % | ||
| Bypass vulnerability in the authentication method in the GTT Tax Information System application, related to the Active Directory (LDAP)… | Bypass vulnerability in the authentication method in the GTT Tax Information System application, related to the Active Directory (LDAP) login method. Authentication is performed through a local WebSocket, but the web application does not properly validate the authenticity or origin of the data… |
W tym tygodniu | 9,3 | 0,57 % | ||
| A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows… | A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP/EVPN peer to cause root code execution on Junos OS or an rpd crash on Junos OS Evolved via protocol-valid route advertisements for an… |
W tym tygodniu | 9,3 | 0,57 % | ||
| A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows… | A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a remote configured BGP peer to cause an rpd crash, or on Junos OS remote code-execution, via sending a flow-spec update which is selected for re-advertisement. |
W tym tygodniu | 9,3 | 0,57 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.