Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
An Improper Authentication vulnerability in the J-Web management interface and its NETCONF session handling of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network attacker to obtain root-level device configuration access and take over the device via a reachable J-Web…
Opis źródłowy NVD · ENCVSS 9,3 · EPSS 0,49 % · rekomendacja wg zapisanej polityki
RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.8 and 4.3.2, set_token_auth/2 inserted a bearer token from the Authorization header or access_token cookie into OAuth bootstrap JavaScript without escaping, allowing attacker-controlled token content to execute JavaScript in the…
Opis źródłowy NVD · ENCVSS 9,3 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
SQL injection vulnerability in the ‘/ws/apiprensa/getVideoSubcanal’ endpoint due to improper handling of the id_video parameter. The application does not sanitize input before constructing SQL queries, which results in execution errors when malicious input is provided. The vulnerability exposes…
Opis źródłowy NVD · ENCVSS 9,3 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
The endpoint ‘/ws/apiprensa/getVideoNextPrev’ is vulnerable to SQL injection via the id_ambito parameter. Unsanitized input is directly incorporated into a MariaDB query, allowing attackers to inject SQL syntax that interrupts the query's execution. The vulnerability results in detailed database…
Opis źródłowy NVD · ENCVSS 9,3 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
BotSharp through 5.2.0 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to forge bearer tokens using the hard-coded Jwt:Key in WebStarter appsettings.json. Attackers can sign tokens with the committed HMAC secret and fixed botsharp issuer and audience to…
Opis źródłowy NVD · ENCVSS 9,3 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
Letta through 0.16.8 ships a compose.yaml that does not enable LETTA_SERVER_SECURE, so the password middleware is never added and all API routes are unauthenticated, and it exposes a superuser PostgreSQL port with default credentials. Remote attackers can execute arbitrary Python via POST…
Opis źródłowy NVD · ENCVSS 9,3 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
An Integer Underflow vulnerability in the kernel of Juniper Networks Junos OS with Extended Echo configured allows an unauthenticated, network-based attacker to cause a denial of service by a kernel crash.
Opis źródłowy NVD · ENCVSS 9,3 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
A Heap-based Buffer Overflow vulnerability in the SVR component of Juniper Networks Junos OS on SRX Series allows an unauthenticated network attacker to cause a denial of service and potentially compromise confidentiality and integrity via malformed IPv4 packets reaching an interface configured…
Opis źródłowy NVD · ENCVSS 9,3 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
The Kirki WordPress plugin before 6.0.12 does not validate a user-supplied URL before requesting it server-side, allowing unauthenticated attackers to make the site issue HTTP requests to arbitrary hosts (Server-Side Request Forgery).
Opis źródłowy NVD · ENCVSS 9,1 · EPSS 1,47 % · rekomendacja wg zapisanej polityki
The Survision LPR Camera system does not enforce password protection by default. This allows access to the configuration wizard immediately without a login prompt or credentials check.
Opis źródłowy NVD · ENCVSS 9,3 · EPSS 0,46 % · rekomendacja wg zapisanej polityki
EPSON WebConfig and Epson Web Control for SEIKO EPSON Projector Products do not restrict excessive authentication attempts. An administrative user's password may be identified through a brute force attack.
Opis źródłowy NVD · ENCVSS 9,3 · EPSS 0,46 % · rekomendacja wg zapisanej polityki
A Stack-based Buffer Overflow vulnerability in the BGP routing daemon of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP flowspec peer to cause routing-engine compromise or a routing-daemon denial of service via flowspec route re-advertisement when BGP update-threading is…
Opis źródłowy NVD · ENCVSS 9,3 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
An Improper Authentication vulnerability in the J-Web management interface and its NETCONF session handling of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network attacker to obtain root-level device configuration access and take over the device via a reachable J-Web…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,3 · EPSS 0,49 % · rekomendacja wg zapisanej polityki
RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.8 and 4.3.2, set_token_auth/2 inserted a bearer token from the Authorization header or access_token cookie into OAuth bootstrap JavaScript without escaping, allowing attacker-controlled token content to execute JavaScript in the…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,3 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
SQL injection vulnerability in the ‘/ws/apiprensa/getVideoSubcanal’ endpoint due to improper handling of the id_video parameter. The application does not sanitize input before constructing SQL queries, which results in execution errors when malicious input is provided. The vulnerability exposes…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,3 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
The endpoint ‘/ws/apiprensa/getVideoNextPrev’ is vulnerable to SQL injection via the id_ambito parameter. Unsanitized input is directly incorporated into a MariaDB query, allowing attackers to inject SQL syntax that interrupts the query's execution. The vulnerability results in detailed database…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,3 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
BotSharp through 5.2.0 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to forge bearer tokens using the hard-coded Jwt:Key in WebStarter appsettings.json. Attackers can sign tokens with the committed HMAC secret and fixed botsharp issuer and audience to…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,3 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
Letta through 0.16.8 ships a compose.yaml that does not enable LETTA_SERVER_SECURE, so the password middleware is never added and all API routes are unauthenticated, and it exposes a superuser PostgreSQL port with default credentials. Remote attackers can execute arbitrary Python via POST…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,3 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
An Integer Underflow vulnerability in the kernel of Juniper Networks Junos OS with Extended Echo configured allows an unauthenticated, network-based attacker to cause a denial of service by a kernel crash.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,3 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
A Heap-based Buffer Overflow vulnerability in the SVR component of Juniper Networks Junos OS on SRX Series allows an unauthenticated network attacker to cause a denial of service and potentially compromise confidentiality and integrity via malformed IPv4 packets reaching an interface configured…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,3 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
The Kirki WordPress plugin before 6.0.12 does not validate a user-supplied URL before requesting it server-side, allowing unauthenticated attackers to make the site issue HTTP requests to arbitrary hosts (Server-Side Request Forgery).
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,1 · EPSS 1,47 % · rekomendacja wg zapisanej polityki
The Survision LPR Camera system does not enforce password protection by default. This allows access to the configuration wizard immediately without a login prompt or credentials check.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,3 · EPSS 0,46 % · rekomendacja wg zapisanej polityki
EPSON WebConfig and Epson Web Control for SEIKO EPSON Projector Products do not restrict excessive authentication attempts. An administrative user's password may be identified through a brute force attack.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,3 · EPSS 0,46 % · rekomendacja wg zapisanej polityki
A Stack-based Buffer Overflow vulnerability in the BGP routing daemon of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP flowspec peer to cause routing-engine compromise or a routing-daemon denial of service via flowspec route re-advertisement when BGP update-threading is…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,3 · EPSS 0,45 % · rekomendacja wg zapisanej polityki