Podatności

The YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.7.7 via the putFile function. This is due to insufficient file type validation in the putFile function, as sanitize_file_name() does…

CVSS 8,8 · EPSS 0,58 % · rekomendacja wg zapisanej polityki

The DoubleScale | All-in-One CRM – Sales, Multi-Channel Marketing, Newsletter, Booking, Helpdesk, Automation, MCP & More plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.5.1 via the store_upload function. This is due to a fail-open extension…

CVSS 8,8 · EPSS 0,52 % · rekomendacja wg zapisanej polityki

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 8,8 · EPSS 0,46 % · rekomendacja wg zapisanej polityki

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 8,8 · EPSS 0,44 % · rekomendacja wg zapisanej polityki

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVSS 8,8 · EPSS 0,44 % · rekomendacja wg zapisanej polityki

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 8,8 · EPSS 0,44 % · rekomendacja wg zapisanej polityki

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 8,8 · EPSS 0,44 % · rekomendacja wg zapisanej polityki

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 8,8 · EPSS 0,44 % · rekomendacja wg zapisanej polityki

Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 8,8 · EPSS 0,44 % · rekomendacja wg zapisanej polityki

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 8,8 · EPSS 0,44 % · rekomendacja wg zapisanej polityki

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 8,8 · EPSS 0,44 % · rekomendacja wg zapisanej polityki

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 8,8 · EPSS 0,44 % · rekomendacja wg zapisanej polityki

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 8,8 · EPSS 0,44 % · rekomendacja wg zapisanej polityki

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 8,8 · EPSS 0,44 % · rekomendacja wg zapisanej polityki

Off-by-one error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 8,8 · EPSS 0,44 % · rekomendacja wg zapisanej polityki

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.

CVSS 8,8 · EPSS 0,44 % · rekomendacja wg zapisanej polityki

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 8,8 · EPSS 0,44 % · rekomendacja wg zapisanej polityki

The PilotPress plugin for WordPress is vulnerable to Privilege Escalation via Account Takeover in all versions up to, and including, 2.0.43. The vulnerability exists because the `update_cc_details()` AJAX handler forwards an attacker-supplied `username` parameter to ONTRAPORT via…

CVSS 8,8 · EPSS 0,37 % · rekomendacja wg zapisanej polityki

ThinkCMF through 8.0.1 contains an incorrect authorization vulnerability in RestAdminBaseController that allows restricted backend administrators to call every admin REST API endpoint because Auth::check() fails open when no admin_api rule exists. Attackers with a valid admin-type API token can…

CVSS 8,8 · EPSS 0,36 % · rekomendacja wg zapisanej polityki

The EnergizeLab AI Station (RK3562) firmware image ships with default root credentials and SSH enabled. An attacker with network access to the device can log in as root and take full control of it.

CVSS 8,8 · EPSS 0,35 % · rekomendacja wg zapisanej polityki