KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, a Mass Assignment vulnerability in the DocumentStore creation endpoint allows authenticated users to control the primary key (id) and internal state fields of DocumentStore entities. Because…
DataBuff ai-apm-web through 0.1.10 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge admin session tokens by using the hardcoded HMAC secret in JwtTokenService. Attackers can sign a payload of admin and a future expiry with the default dev-secret to…
An unvalidated runtime configuration value in Apache CouchDB 3.5.2 and below on all platforms allows a CouchDB server admin to run arbitrary shell commands as the CouchDB operating system user. Users are recommended to upgrade to version 3.5.3, which fixes this issue.
PMB 7.4.6 contains a SQL injection vulnerability in the id parameter of the storage module (categ=storage) of the opac_css/ajax.php endpoint that allows remote attackers to manipulate database queries. Attackers can exploit the unsanitized 'id' parameter by injecting conditional sleep statements…
Adobe Campaign Classic (ACC) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially gaining elevated access or control over the victim's account or session. Exploitation of this…
The ‘/ws/apitribuna/setVisita’ endpoint is vulnerable to SQL injection through the id_video and id_ambito parameters. The application does not validate or sanitize these inputs before including them in SQL queries. This allows a remote attacker to inject SQL syntax and disrupt the execution of…
Obejście autoryzacji w Dify umożliwia edytorom dostęp do konfiguracji aplikacji bez uprawnień.
W JTL Shop występuje luka w postaci wstrzyknięcia szablonów, umożliwiająca atakującym dostęp do wrażliwych danych.
Błąd w analizie w picklescan umożliwia omijanie skanowania złośliwych plików pickle.
Zagrożenie w exceljs umożliwia atakującym modyfikację Object.prototype przez złośliwe notatki.
An OS command injection vulnerability exists in the boa formWizard newPass functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this…
nest-admin before 1.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge administrator tokens by using a hardcoded JWT_SECRET committed in .env.production. Attackers can sign tokens with the known secret that JwtStrategy and RbacGuard trust,…
lwIP SMTP client does not check the size of inputs, potentially allowing a buffer overflow.
AVideo before 29.0 contains an incomplete fix for CVE-2026-45578 where execAsync() re-wraps escaped commands in double-quoted sh -c, allowing command substitution via $() and backticks. Attackers can inject arbitrary OS commands through the Live plugin on_publish.php endpoint despite…
A heap-based out-of-bounds write in the BoltReadHandler function (src/bolt/bolt_api.c) in FalkorDB before 4.20.0 allows a remote unauthenticated attacker to cause a denial of service and possibly execute arbitrary code by sending a Bolt RESET message with an attacker-chosen chunk size to the Bolt…
DJI drones transmit DUML (DJI Universal Markup Language) protocol messages over BLE (Bluetooth Low Energy) without encryption. When a client attempts to connect to the drone over Wi-Fi, or when the drone is switched to QuickTransfer mode, the DJI Fly application exchanges DUML messages with the…
Luka w WMPro umożliwia zdalnym atakującym przesyłanie i wykonywanie złośliwego kodu.
Luka w BPMFlowWebkit umożliwia zdalne przesyłanie i wykonywanie złośliwego kodu.
Wstrzyknięcie HTML w Discourse umożliwia zdalne wykonanie kodu JavaScript w przeglądarkach użytkowników.
The object name of a dynamically created BACnet File Object is interpreted as a file path without sufficient validation. Because relative paths are not limited to the intended directory, an unauthenticated remote attacker can traverse outside of it and read or overwrite arbitrary files on the…
@hulumi/policies versions before 1.3.2 contain an evidence validation bypass vulnerability in Cloudflare and deployment-governance validators that allows attackers to suppress violations by submitting unrelated compliant evidence. Attackers can use evidence from different zones, hostnames,…
openssl_encrypt before 1.4.9 fails to sanitize the email field of imported identity documents, allowing attackers to inject ANSI escape sequences that forge the fingerprint verification line displayed to users. Attackers can deliver a crafted identity bundle through normal contact-exchange flows…
justhtml before 1.16.0 contains multiple HTML sanitization bypass issues that can allow active/dangerous content (e.g., script or style) to survive sanitization, potentially leading to cross-site scripting. The issues primarily affect advanced usage rather than the default JustHTML(...,…
justhtml before 1.15.0 contains multiple security issues in URL sanitization helpers (clean_url_value/clean_url_in_js_string), HTML serialization, Markdown passthrough (html_passthrough=True), and several custom sanitization-policy edge cases. Depending on configuration, an attacker can bypass…
Wstrzyknięcie SQL w ManageEngine Password Manager Pro i PAM360 umożliwia nieautoryzowany dostęp do danych.
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Flowise is a drag & drop user interface to build a customized large language model flow. | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, a Mass Assignment vulnerability in the DocumentStore creation endpoint allows authenticated users to control the primary key (id) and internal state fields of DocumentStore entities. Because… |
W tym tygodniu | 8,8 | 3,11 % | ||
| DataBuff ai-apm-web through 0.1.10 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge admin… | DataBuff ai-apm-web through 0.1.10 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge admin session tokens by using the hardcoded HMAC secret in JwtTokenService. Attackers can sign a payload of admin and a future expiry with the default dev-secret to… |
W tym tygodniu | 9,3 | 0,61 % | ||
| An unvalidated runtime configuration value in Apache CouchDB 3.5.2 and below on all platforms allows a CouchDB server admin to run… | An unvalidated runtime configuration value in Apache CouchDB 3.5.2 and below on all platforms allows a CouchDB server admin to run arbitrary shell commands as the CouchDB operating system user. Users are recommended to upgrade to version 3.5.3, which fixes this issue. |
W tym tygodniu | 9,3 | 0,61 % | ||
| PMB 7.4.6 contains a SQL injection vulnerability in the id parameter of the storage module (categ=storage) of the opac_css/ajax.php… | PMB 7.4.6 contains a SQL injection vulnerability in the id parameter of the storage module (categ=storage) of the opac_css/ajax.php endpoint that allows remote attackers to manipulate database queries. Attackers can exploit the unsanitized 'id' parameter by injecting conditional sleep statements… |
Pilne działanie | 9,3 | 0,61 % | ||
| Adobe Campaign Classic (ACC) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. | Adobe Campaign Classic (ACC) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially gaining elevated access or control over the victim's account or session. Exploitation of this… |
W tym tygodniu | 9,3 | 0,61 % | ||
| The ‘/ws/apitribuna/setVisita’ endpoint is vulnerable to SQL injection through the id_video and id_ambito parameters. | The ‘/ws/apitribuna/setVisita’ endpoint is vulnerable to SQL injection through the id_video and id_ambito parameters. The application does not validate or sanitize these inputs before including them in SQL queries. This allows a remote attacker to inject SQL syntax and disrupt the execution of… |
W tym tygodniu | 9,3 | 0,61 % | ||
| Obejście autoryzacji w Dify umożliwia edytorom dostęp do konfiguracji aplikacji bez uprawnień. | Obejście autoryzacji w Dify umożliwia edytorom dostęp do konfiguracji aplikacji bez uprawnień. |
Pilne działanie | 9,3 | 0,61 % | ||
| W JTL Shop występuje luka w postaci wstrzyknięcia szablonów, umożliwiająca atakującym dostęp do wrażliwych danych. | W JTL Shop występuje luka w postaci wstrzyknięcia szablonów, umożliwiająca atakującym dostęp do wrażliwych danych. |
W tym tygodniu | 9,3 | 0,6 % | ||
| Błąd w analizie w picklescan umożliwia omijanie skanowania złośliwych plików pickle. | Błąd w analizie w picklescan umożliwia omijanie skanowania złośliwych plików pickle. |
W tym tygodniu | 9,3 | 0,6 % | ||
| Zagrożenie w exceljs umożliwia atakującym modyfikację Object.prototype przez złośliwe notatki. | Zagrożenie w exceljs umożliwia atakującym modyfikację Object.prototype przez złośliwe notatki. |
W tym tygodniu | 9,3 | 0,6 % | ||
| An OS command injection vulnerability exists in the boa formWizard newPass functionality of X2000R (version(s):… | An OS command injection vulnerability exists in the boa formWizard newPass functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this… |
W tym tygodniu | 9,1 | 1,6 % | ||
| nest-admin before 1.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge administrator… | nest-admin before 1.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge administrator tokens by using a hardcoded JWT_SECRET committed in .env.production. Attackers can sign tokens with the known secret that JwtStrategy and RbacGuard trust,… |
W tym tygodniu | 9,3 | 0,6 % | ||
| lwIP SMTP client does not check the size of inputs, potentially allowing a buffer overflow. | lwIP SMTP client does not check the size of inputs, potentially allowing a buffer overflow. |
W tym tygodniu | 9,3 | 0,6 % | ||
| AVideo before 29.0 contains an incomplete fix for CVE-2026-45578 where execAsync() re-wraps escaped commands in double-quoted sh -c,… | AVideo before 29.0 contains an incomplete fix for CVE-2026-45578 where execAsync() re-wraps escaped commands in double-quoted sh -c, allowing command substitution via $() and backticks. Attackers can inject arbitrary OS commands through the Live plugin on_publish.php endpoint despite… |
W tym tygodniu | 9,3 | 0,6 % | ||
| A heap-based out-of-bounds write in the BoltReadHandler function (src/bolt/bolt_api.c) in FalkorDB before 4.20.0 allows a remote… | A heap-based out-of-bounds write in the BoltReadHandler function (src/bolt/bolt_api.c) in FalkorDB before 4.20.0 allows a remote unauthenticated attacker to cause a denial of service and possibly execute arbitrary code by sending a Bolt RESET message with an attacker-chosen chunk size to the Bolt… |
W tym tygodniu | 9,3 | 0,6 % | ||
| DJI drones transmit DUML (DJI Universal Markup Language) protocol messages over BLE (Bluetooth Low Energy) without encryption. | DJI drones transmit DUML (DJI Universal Markup Language) protocol messages over BLE (Bluetooth Low Energy) without encryption. When a client attempts to connect to the drone over Wi-Fi, or when the drone is switched to QuickTransfer mode, the DJI Fly application exchanges DUML messages with the… |
W tym tygodniu | 9,4 | 0,09 % | ||
| Luka w WMPro umożliwia zdalnym atakującym przesyłanie i wykonywanie złośliwego kodu. | Luka w WMPro umożliwia zdalnym atakującym przesyłanie i wykonywanie złośliwego kodu. |
W tym tygodniu | 9,3 | 0,59 % | ||
| Luka w BPMFlowWebkit umożliwia zdalne przesyłanie i wykonywanie złośliwego kodu. | Luka w BPMFlowWebkit umożliwia zdalne przesyłanie i wykonywanie złośliwego kodu. |
W tym tygodniu | 9,3 | 0,59 % | ||
| Wstrzyknięcie HTML w Discourse umożliwia zdalne wykonanie kodu JavaScript w przeglądarkach użytkowników. | Wstrzyknięcie HTML w Discourse umożliwia zdalne wykonanie kodu JavaScript w przeglądarkach użytkowników. |
W tym tygodniu | 9,3 | 0,59 % | ||
| The object name of a dynamically created BACnet File Object is interpreted as a file path without sufficient validation. | The object name of a dynamically created BACnet File Object is interpreted as a file path without sufficient validation. Because relative paths are not limited to the intended directory, an unauthenticated remote attacker can traverse outside of it and read or overwrite arbitrary files on the… |
W tym tygodniu | 9,3 | 0,59 % | ||
| @hulumi/policies versions before 1.3.2 contain an evidence validation bypass vulnerability in Cloudflare and deployment-governance… | @hulumi/policies versions before 1.3.2 contain an evidence validation bypass vulnerability in Cloudflare and deployment-governance validators that allows attackers to suppress violations by submitting unrelated compliant evidence. Attackers can use evidence from different zones, hostnames,… |
W tym tygodniu | 9,3 | 0,59 % | ||
| openssl_encrypt before 1.4.9 fails to sanitize the email field of imported identity documents, allowing attackers to inject ANSI escape… | openssl_encrypt before 1.4.9 fails to sanitize the email field of imported identity documents, allowing attackers to inject ANSI escape sequences that forge the fingerprint verification line displayed to users. Attackers can deliver a crafted identity bundle through normal contact-exchange flows… |
W tym tygodniu | 9,3 | 0,59 % | ||
| justhtml before 1.16.0 contains multiple HTML sanitization bypass issues that can allow active/dangerous content (e.g., script or style)… | justhtml before 1.16.0 contains multiple HTML sanitization bypass issues that can allow active/dangerous content (e.g., script or style) to survive sanitization, potentially leading to cross-site scripting. The issues primarily affect advanced usage rather than the default JustHTML(...,… |
W tym tygodniu | 9,3 | 0,59 % | ||
| justhtml before 1.15.0 contains multiple security issues in URL sanitization helpers (clean_url_value/clean_url_in_js_string), HTML… | justhtml before 1.15.0 contains multiple security issues in URL sanitization helpers (clean_url_value/clean_url_in_js_string), HTML serialization, Markdown passthrough (html_passthrough=True), and several custom sanitization-policy edge cases. Depending on configuration, an attacker can bypass… |
W tym tygodniu | 9,3 | 0,59 % | ||
| Wstrzyknięcie SQL w ManageEngine Password Manager Pro i PAM360 umożliwia nieautoryzowany dostęp do danych. | Wstrzyknięcie SQL w ManageEngine Password Manager Pro i PAM360 umożliwia nieautoryzowany dostęp do danych. |
Obserwuj | 8,8 | 3,09 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.