Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Kan 0.5.5 through 0.6.0 contains an unauthenticated server-side request forgery vulnerability in the /api/download/attatchment route due to an incomplete fix for CVE-2026-32255. When S3_ENDPOINT is unset, attackers can pass arbitrary url query parameters to fetch() to read internal services,…
Opis źródłowy NVD · ENCVSS 9,2 · EPSS 0,43 % · rekomendacja wg zapisanej polityki
Dayforce ESS Excelity is vulnerable to Path Traversal in file download functionality. An unauthenticated attacker can sent GET request with file path parameter set to any path including an absolute
local file path.
This issue was fixed in version V4.
Opis źródłowy NVD · ENCVSS 9,2 · EPSS 0,42 % · rekomendacja wg zapisanej polityki
ZITADEL 3.0.0 before 4.19.2 contains an authentication bypass vulnerability in the Login V2 UI that allows unauthenticated attackers to obtain other users' session tokens by forging unsigned session cookies. Attackers can guess time-ordered session IDs around a victim's sign-in and supply them…
Opis źródłowy NVD · ENCVSS 9,2 · EPSS 0,42 % · rekomendacja wg zapisanej polityki
llama.cpp before b11393 contains a use-after-free and double free vulnerability in common_chat_peg_mapper::map that allows unauthenticated remote attackers to corrupt heap memory via a dangling current_tool pointer. Attackers can submit a chat_parser in a POST /completion request emitting a…
Opis źródłowy NVD · ENCVSS 9,2 · EPSS 0,42 % · rekomendacja wg zapisanej polityki
Joomla Extension - joomshaper.com - cross-customer order and personal information disclosure in Easy Store extension 1.0.0-2.0.1 - Improper access checks allow logged in users to retreive order and customer information of any order in the system.
Opis źródłowy NVD · ENCVSS 9,2 · EPSS 0,42 % · rekomendacja wg zapisanej polityki
Handlebars provides the power necessary to let users build semantic templates. From 3.0.0 until 4.7.10, Handlebars lookupProperty returns Function.prototype.constructor before applying the prototype-access deny list because constructor is an own property of Function.prototype. When an attacker can…
Opis źródłowy NVD · ENCVSS 9,2 · EPSS 0,41 % · rekomendacja wg zapisanej polityki
Cassandra Web 0.5.0 contains a directory traversal vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating path traversal parameters. Attackers can exploit the disabled Rack::Protection module to read sensitive system files like /etc/passwd and retrieve Apache…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 2,91 % · rekomendacja wg zapisanej polityki
IBM Guardium Data Protection 12.2 is affected by a command injection vulnerability in the GIM bundle import functionality. An authenticated attacker can provide a crafted GIM bundle that causes attacker-controlled arguments to be passed to the tar command, resulting in arbitrary command execution…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 2,41 % · rekomendacja wg zapisanej polityki
SiYuan's development branch (endpoint introduced by commit 9b8e8956f, not present in v3.7.3 or master, patched in v3.7.4) contains a missing-authorization vulnerability in the /api/av/getAttributeViewSearchTarget endpoint. The route is registered with CheckAuth only and performs no authorization…
Opis źródłowy NVD · ENCVSS 9,2 · EPSS 0,41 % · rekomendacja wg zapisanej polityki
SiYuan versions before v3.7.4 fail to filter embedded block content by publish access in the getBlockDOMWithEmbed and getBlockDOMsWithEmbed endpoints. Attackers can request published blocks containing embed queries to read content from password-protected, hidden, or forbidden documents without…
Opis źródłowy NVD · ENCVSS 9,2 · EPSS 0,41 % · rekomendacja wg zapisanej polityki
An Use of Externally-Controlled Format String vulnerability in the ipfd daemon of Juniper Networks Junos OS on SRX Series allows an unauthenticated network-based attacker to execute code with root privileges via a compromised or impersonated configured HTTPS feed server.
Opis źródłowy NVD · ENCVSS 9,2 · EPSS 0,41 % · rekomendacja wg zapisanej polityki
OpenBMB StaffDeck through 0.5.6 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge administrator session tokens using the hard-coded default app_secret. Attackers can sign an HMAC-SHA256 token for the seeded 'admin' user in 'tenant_demo' to gain full…
Opis źródłowy NVD · ENCVSS 9,2 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
The EnergizeLab Eilik and EilikO AI skill upload endpoint, served by the FastAPI AI inference and profiling services, does not require authentication and does not constrain uploaded file paths. An unauthenticated remote attacker can use path traversal to write arbitrary files, and thereby tamper…
Opis źródłowy NVD · ENCVSS 9,1 · EPSS 0,9 % · rekomendacja wg zapisanej polityki
Kan 0.5.5 through 0.6.0 contains an unauthenticated server-side request forgery vulnerability in the /api/download/attatchment route due to an incomplete fix for CVE-2026-32255. When S3_ENDPOINT is unset, attackers can pass arbitrary url query parameters to fetch() to read internal services,…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,2 · EPSS 0,43 % · rekomendacja wg zapisanej polityki
Dayforce ESS Excelity is vulnerable to Path Traversal in file download functionality. An unauthenticated attacker can sent GET request with file path parameter set to any path including an absolute
local file path.
This issue was fixed in version V4.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,2 · EPSS 0,42 % · rekomendacja wg zapisanej polityki
ZITADEL 3.0.0 before 4.19.2 contains an authentication bypass vulnerability in the Login V2 UI that allows unauthenticated attackers to obtain other users' session tokens by forging unsigned session cookies. Attackers can guess time-ordered session IDs around a victim's sign-in and supply them…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,2 · EPSS 0,42 % · rekomendacja wg zapisanej polityki
llama.cpp before b11393 contains a use-after-free and double free vulnerability in common_chat_peg_mapper::map that allows unauthenticated remote attackers to corrupt heap memory via a dangling current_tool pointer. Attackers can submit a chat_parser in a POST /completion request emitting a…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,2 · EPSS 0,42 % · rekomendacja wg zapisanej polityki
Joomla Extension - joomshaper.com - cross-customer order and personal information disclosure in Easy Store extension 1.0.0-2.0.1 - Improper access checks allow logged in users to retreive order and customer information of any order in the system.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,2 · EPSS 0,42 % · rekomendacja wg zapisanej polityki
Handlebars provides the power necessary to let users build semantic templates. From 3.0.0 until 4.7.10, Handlebars lookupProperty returns Function.prototype.constructor before applying the prototype-access deny list because constructor is an own property of Function.prototype. When an attacker can…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,2 · EPSS 0,41 % · rekomendacja wg zapisanej polityki
Cassandra Web 0.5.0 contains a directory traversal vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating path traversal parameters. Attackers can exploit the disabled Rack::Protection module to read sensitive system files like /etc/passwd and retrieve Apache…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 2,91 % · rekomendacja wg zapisanej polityki
IBM Guardium Data Protection 12.2 is affected by a command injection vulnerability in the GIM bundle import functionality. An authenticated attacker can provide a crafted GIM bundle that causes attacker-controlled arguments to be passed to the tar command, resulting in arbitrary command execution…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 2,41 % · rekomendacja wg zapisanej polityki
SiYuan's development branch (endpoint introduced by commit 9b8e8956f, not present in v3.7.3 or master, patched in v3.7.4) contains a missing-authorization vulnerability in the /api/av/getAttributeViewSearchTarget endpoint. The route is registered with CheckAuth only and performs no authorization…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,2 · EPSS 0,41 % · rekomendacja wg zapisanej polityki
SiYuan versions before v3.7.4 fail to filter embedded block content by publish access in the getBlockDOMWithEmbed and getBlockDOMsWithEmbed endpoints. Attackers can request published blocks containing embed queries to read content from password-protected, hidden, or forbidden documents without…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,2 · EPSS 0,41 % · rekomendacja wg zapisanej polityki
An Use of Externally-Controlled Format String vulnerability in the ipfd daemon of Juniper Networks Junos OS on SRX Series allows an unauthenticated network-based attacker to execute code with root privileges via a compromised or impersonated configured HTTPS feed server.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,2 · EPSS 0,41 % · rekomendacja wg zapisanej polityki
OpenBMB StaffDeck through 0.5.6 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge administrator session tokens using the hard-coded default app_secret. Attackers can sign an HMAC-SHA256 token for the seeded 'admin' user in 'tenant_demo' to gain full…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,2 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
The EnergizeLab Eilik and EilikO AI skill upload endpoint, served by the FastAPI AI inference and profiling services, does not require authentication and does not constrain uploaded file paths. An unauthenticated remote attacker can use path traversal to write arbitrary files, and thereby tamper…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,1 · EPSS 0,9 % · rekomendacja wg zapisanej polityki