KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Niezabezpieczony dostęp do vm2 w Node.js umożliwia wykonanie dowolnych poleceń na hoście.
LibreNMS before 26.9.0 contains an LDAP filter injection in ldap-authorization and ad-authorization modes because usernames are inserted unescaped into LDAP search filters and authentication only checks user existence. When REMOTE_USER is not forwarded, unauthenticated attackers can send a…
An attacker could take over a Looker account in a Looker instance configured with OIDC authentication, due to email address string normalization.Looker-hosted and Self-hosted were found to be vulnerable. This issue has already been mitigated for Looker-hosted. Self-hosted instances must be…
SGLang 0.5.10 through 0.5.22 contains a code injection vulnerability in _evaluate_filter() that allows remote attackers to execute Python code by escaping the eval() sandbox through re.search __globals__. Attackers can send a crafted filter expression to the unauthenticated /dumper/configure…
cc-connect through 1.5.0 contains a missing authentication vulnerability in the MAX platform adapter webhook mode in platform/max/max.go that accepts unauthenticated updates when no webhook_secret is configured. Remote attackers reaching the webhook listener on port 8080 can forge updates with an…
Wersja rsync przed 3.5.0 ma lukę w przechodzeniu ścieżek, co pozwala na zapis plików poza modułem.
A stack-based buffer overflow vulnerability exists in the batchupg functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
A heap-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this…
A stack-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this…
A stack-based buffer overflow vulnerability exists in the Mcli functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
A stack-based buffer overflow vulnerability exists in the boa formIpQos mac functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this…
Wstrzyknięcie skryptu w aplikacji umożliwia atakującemu wykonanie kodu w przeglądarce ofiary.
PingTools Network Utilities 4.64 contains an OS command injection vulnerability in the Host field of a Watcher ICMP service. The application appends the attacker-controlled Host value to a ping command, serializes the command as a single string, and executes it through sh -c. A local attacker who…
Błąd Use-After-Free w Squid umożliwia zdalne wywołanie ataku Denial of Service.
OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR600W allowing attackers to execute arbitrary commands via a crafted POST request to the run_tcpdump in file /usr/lib/lua/luci/controller/admin/common_tcpdump.lua.
Błąd w Scriban umożliwia dostęp do wcześniej autoryzowanych szablonów przez atakujących.
Wystawiona niebezpieczna metoda w Azure Confidential Ledger pozwala autoryzowanemu atakującemu na zdalne wykonanie kodu.
Pillow is a Python imaging library. From 2.6.0 until 13.0.0, Pillow is vulnerable to argument injection when invoking Ghostscript for EPS input. EpsImagePlugin.Ghostscript passes a caller-controlled input filename after -f without converting it to a safe absolute path, so a name beginning with a…
Błąd Use-After-Free w Squid umożliwia zdalne przeprowadzenie ataku Denial of Service.
Obejście wygasania tokenów resetowania haseł w Flarum pozwala na zmianę haseł przez nieautoryzowanych użytkowników.
Keep (commit 91c75e0) contains a server-side request forgery vulnerability that allows unauthenticated attackers to make the backend issue arbitrary HTTP requests by supplying attacker-controlled host values to the unprotected healthcheck endpoint. Attackers can send a crafted JSON payload with a…
A denial-of-service issue exists in 5380/5480/5580 controllers boot firmware lower than version 1.072. This vulnerability could potentially allow a malicious user to write invalid file data to the controller, causing the device to enter a major non-recoverable fault (MNRF).
A denial-of-service issue exists in 5380/5480/5580 controllers. This vulnerability could potentially allow a malicious user to write invalid file data to the controller, causing the device to enter a major non-recoverable fault (MNRF).
A denial-of-service issue exists in 5370/5570 controllers. This vulnerability could potentially allow a remote user to load an invalid project, causing the device to enter a major non-recoverable fault (MNRF).
Zapis wrażliwych danych do plików logów naraża na ujawnienie haseł i danych kart.
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Niezabezpieczony dostęp do vm2 w Node.js umożliwia wykonanie dowolnych poleceń na hoście. | Niezabezpieczony dostęp do vm2 w Node.js umożliwia wykonanie dowolnych poleceń na hoście. |
Pilne działanie | 9,1 | 0,96 % | ||
| LibreNMS before 26.9.0 contains an LDAP filter injection in ldap-authorization and ad-authorization modes because usernames are inserted… | LibreNMS before 26.9.0 contains an LDAP filter injection in ldap-authorization and ad-authorization modes because usernames are inserted unescaped into LDAP search filters and authentication only checks user existence. When REMOTE_USER is not forwarded, unauthenticated attackers can send a… |
W tym tygodniu | 9,2 | 0,46 % | ||
| An attacker could take over a Looker account in a Looker instance configured with OIDC authentication, due to email address string… | An attacker could take over a Looker account in a Looker instance configured with OIDC authentication, due to email address string normalization.Looker-hosted and Self-hosted were found to be vulnerable. This issue has already been mitigated for Looker-hosted. Self-hosted instances must be… |
W tym tygodniu | 9,2 | 0,46 % | ||
| SGLang 0.5.10 through 0.5.22 contains a code injection vulnerability in _evaluate_filter() that allows remote attackers to execute Python… | SGLang 0.5.10 through 0.5.22 contains a code injection vulnerability in _evaluate_filter() that allows remote attackers to execute Python code by escaping the eval() sandbox through re.search __globals__. Attackers can send a crafted filter expression to the unauthenticated /dumper/configure… |
W tym tygodniu | 9,2 | 0,45 % | ||
| cc-connect through 1.5.0 contains a missing authentication vulnerability in the MAX platform adapter webhook mode in platform/max/max.go… | cc-connect through 1.5.0 contains a missing authentication vulnerability in the MAX platform adapter webhook mode in platform/max/max.go that accepts unauthenticated updates when no webhook_secret is configured. Remote attackers reaching the webhook listener on port 8080 can forge updates with an… |
W tym tygodniu | 9,2 | 0,45 % | ||
| Wersja rsync przed 3.5.0 ma lukę w przechodzeniu ścieżek, co pozwala na zapis plików poza modułem. | Wersja rsync przed 3.5.0 ma lukę w przechodzeniu ścieżek, co pozwala na zapis plików poza modułem. |
W tym tygodniu | 9,2 | 0,45 % | ||
| A stack-based buffer overflow vulnerability exists in the batchupg functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421… | A stack-based buffer overflow vulnerability exists in the batchupg functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability. |
W tym tygodniu | 9,1 | 0,95 % | ||
| A heap-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (version(s):… | A heap-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this… |
W tym tygodniu | 9,1 | 0,95 % | ||
| A stack-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (version(s):… | A stack-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this… |
W tym tygodniu | 9,1 | 0,95 % | ||
| A stack-based buffer overflow vulnerability exists in the Mcli functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.132… | A stack-based buffer overflow vulnerability exists in the Mcli functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability. |
W tym tygodniu | 9,1 | 0,95 % | ||
| A stack-based buffer overflow vulnerability exists in the boa formIpQos mac functionality of X2000R (version(s):… | A stack-based buffer overflow vulnerability exists in the boa formIpQos mac functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this… |
W tym tygodniu | 9,1 | 0,95 % | ||
| Wstrzyknięcie skryptu w aplikacji umożliwia atakującemu wykonanie kodu w przeglądarce ofiary. | Wstrzyknięcie skryptu w aplikacji umożliwia atakującemu wykonanie kodu w przeglądarce ofiary. |
W tym tygodniu | 9,2 | 0,44 % | ||
| PingTools Network Utilities 4.64 contains an OS command injection vulnerability in the Host field of a Watcher ICMP service. | PingTools Network Utilities 4.64 contains an OS command injection vulnerability in the Host field of a Watcher ICMP service. The application appends the attacker-controlled Host value to a ping command, serializes the command as a single string, and executes it through sh -c. A local attacker who… |
Obserwuj | 8,6 | 3,44 % | ||
| Błąd Use-After-Free w Squid umożliwia zdalne wywołanie ataku Denial of Service. | Błąd Use-After-Free w Squid umożliwia zdalne wywołanie ataku Denial of Service. |
Obserwuj | 7,5 | 8,94 % | ||
| OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR600W allowing attackers to execute arbitrary commands via a crafted POST request… | OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR600W allowing attackers to execute arbitrary commands via a crafted POST request to the run_tcpdump in file /usr/lib/lua/luci/controller/admin/common_tcpdump.lua. |
Obserwuj | 8,8 | 2,44 % | ||
| Błąd w Scriban umożliwia dostęp do wcześniej autoryzowanych szablonów przez atakujących. | Błąd w Scriban umożliwia dostęp do wcześniej autoryzowanych szablonów przez atakujących. |
W tym tygodniu | 9,2 | 0,43 % | ||
| Wystawiona niebezpieczna metoda w Azure Confidential Ledger pozwala autoryzowanemu atakującemu na zdalne wykonanie kodu. | Wystawiona niebezpieczna metoda w Azure Confidential Ledger pozwala autoryzowanemu atakującemu na zdalne wykonanie kodu. |
W tym tygodniu | 9,1 | 0,93 % | ||
| Pillow is a Python imaging library. | Pillow is a Python imaging library. From 2.6.0 until 13.0.0, Pillow is vulnerable to argument injection when invoking Ghostscript for EPS input. EpsImagePlugin.Ghostscript passes a caller-controlled input filename after -f without converting it to a safe absolute path, so a name beginning with a… |
W tym tygodniu | 9,2 | 0,43 % | ||
| Błąd Use-After-Free w Squid umożliwia zdalne przeprowadzenie ataku Denial of Service. | Błąd Use-After-Free w Squid umożliwia zdalne przeprowadzenie ataku Denial of Service. |
Obserwuj | 7,5 | 8,93 % | ||
| Obejście wygasania tokenów resetowania haseł w Flarum pozwala na zmianę haseł przez nieautoryzowanych użytkowników. | Obejście wygasania tokenów resetowania haseł w Flarum pozwala na zmianę haseł przez nieautoryzowanych użytkowników. |
W tym tygodniu | 9,2 | 0,43 % | ||
| Keep (commit 91c75e0) contains a server-side request forgery vulnerability that allows unauthenticated attackers to make the backend issue… | Keep (commit 91c75e0) contains a server-side request forgery vulnerability that allows unauthenticated attackers to make the backend issue arbitrary HTTP requests by supplying attacker-controlled host values to the unprotected healthcheck endpoint. Attackers can send a crafted JSON payload with a… |
W tym tygodniu | 9,2 | 0,43 % | ||
| A denial-of-service issue exists in 5380/5480/5580 controllers boot firmware lower than version 1.072. | A denial-of-service issue exists in 5380/5480/5580 controllers boot firmware lower than version 1.072. This vulnerability could potentially allow a malicious user to write invalid file data to the controller, causing the device to enter a major non-recoverable fault (MNRF). |
W tym tygodniu | 9,2 | 0,43 % | ||
| A denial-of-service issue exists in 5380/5480/5580 controllers. | A denial-of-service issue exists in 5380/5480/5580 controllers. This vulnerability could potentially allow a malicious user to write invalid file data to the controller, causing the device to enter a major non-recoverable fault (MNRF). |
W tym tygodniu | 9,2 | 0,43 % | ||
| A denial-of-service issue exists in 5370/5570 controllers. | A denial-of-service issue exists in 5370/5570 controllers. This vulnerability could potentially allow a remote user to load an invalid project, causing the device to enter a major non-recoverable fault (MNRF). |
W tym tygodniu | 9,2 | 0,43 % | ||
| Zapis wrażliwych danych do plików logów naraża na ujawnienie haseł i danych kart. | Zapis wrażliwych danych do plików logów naraża na ujawnienie haseł i danych kart. |
W tym tygodniu | 9,2 | 0,43 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.