Podatności

MateCloud through 5.0.8 contains a missing authorization vulnerability that allows any authenticated user to manage object storage by calling the unprotected /api/v1/admin/storage endpoints in StorageController. Low-privilege or self-registered users can supply arbitrary bucket and objectName…

CVSS 8,1 · rekomendacja wg zapisanej polityki

Ikaros 1.2.0 through 1.2.5 contains an authentication bypass vulnerability that allows attackers with a valid password to skip TOTP verification by reusing the login temp token. Attackers can present the temp token from the jwt/apply endpoint as a bearer JWT, refresh it, or use HTTP Basic login to…

CVSS 8,1 · rekomendacja wg zapisanej polityki

Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace for Android before version 7.2.1 may allow an unauthenticated user to conduct an escalation of privilege via network access.

CVSS 8,1 · rekomendacja wg zapisanej polityki

IBM WebSphere Application Server 8.5, and 9.0 could allow a remote attacker to bypass authentication by exploiting a flaw in the CSIv2 inbound propagation handler.

CVSS 8,1 · rekomendacja wg zapisanej polityki

NVIDIA AIStore for Linux contains a path traversal vulnerability in the dSort archive extraction component where a remote attacker may cause an improper limitation of a pathname to a restricted directory by supplying crafted archive member names to a dSort job. A successful exploit may lead to…

CVSS 8,1 · rekomendacja wg zapisanej polityki

NVIDIA AIStore for Linux contains a path traversal vulnerability in the target-side object rename handler, where an unauthenticated remote attacker could cause an improper limitation of a pathname to a restricted directory by submitting a crafted rename destination directly to an AIStore target,…

CVSS 8,1 · rekomendacja wg zapisanej polityki

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB insufficiently validated counts, offsets, lengths, and field boundaries in FRM metadata while opening binary FRM files. An attacker able to place a…

CVSS 8,0 · EPSS 0,48 % · rekomendacja wg zapisanej polityki

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote authenticated attacker to execute arbitrary code due to a buffer overflow.

CVSS 8,0 · EPSS 0,38 % · rekomendacja wg zapisanej polityki

Vault and Vault Enterprise did not consistently verify that stored plugin catalog entries reference binaries within the configured plugin directory. When Vault uses Shamir seals and has an external plugin directory configured, a privileged operator able to restore an Integrated Storage (Raft)…

CVSS 8,0 · EPSS 0,34 % · rekomendacja wg zapisanej polityki

The Adwised Web Push Notification WordPress plugin through 2.5.7 does not perform any capability or nonce check before allowing an authenticated user to overwrite its site-wide configuration, and does not escape those configuration values before printing them inside an inline script block on every…

CVSS 8,0 · EPSS 0,28 % · rekomendacja wg zapisanej polityki

Cross-site scripting in the webmail of Progressive Robot hMailServer 6.3.2 through 6.3.5 allows a remote attacker who can send a user an encrypted message to run script in the webmail's origin with that user's session. When the webmail decrypted an S/MIME message (from 6.3.2) or an OpenPGP message…

CVSS 8,0 · EPSS 0,25 % · rekomendacja wg zapisanej polityki

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain memory-safety defects in the JavaScript engine integration that could result in memory corruption, controlled process failure, or server instability.

CVSS 8,0 · EPSS 0,24 % · rekomendacja wg zapisanej polityki

Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.

CVSS 8,0 · rekomendacja wg zapisanej polityki

Integer underflow (wrap or wraparound) in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges over an adjacent network.

CVSS 8,0 · rekomendacja wg zapisanej polityki

Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.

CVSS 8,0 · rekomendacja wg zapisanej polityki

Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges over a network.

CVSS 8,0 · rekomendacja wg zapisanej polityki

Integer underflow (wrap or wraparound) in Windows Bluetooth A2DP driver allows an authorized attacker to elevate privileges over an adjacent network.

CVSS 8,0 · rekomendacja wg zapisanej polityki

Origin validation error in Microsoft Power Apps allows an authorized attacker to execute code over a network.

CVSS 8,0 · rekomendacja wg zapisanej polityki

Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over an adjacent network.

CVSS 8,0 · rekomendacja wg zapisanej polityki

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network.

CVSS 8,0 · rekomendacja wg zapisanej polityki

Buffer overflow in a Zoom Phone feature of Zoom Workplace Clients may allow an unauthenticated user to conduct a escalation of privilege via network access.

CVSS 8,0 · rekomendacja wg zapisanej polityki

IBM WebSphere Application Server 8.5, and 9.0 could allow an authenticated attacker to bypass authorization leading to administrative impersonation across the cell.

CVSS 8,0 · rekomendacja wg zapisanej polityki

Rundeck before 6.2.0 contains an OS command injection vulnerability that allows authenticated users with job run permission to execute commands on Windows nodes by supplying crafted option values. Attackers can inject cmd.exe metacharacters such as && or | into free-text options, which…

CVSS 7,7 · EPSS 1,22 % · rekomendacja wg zapisanej polityki

GitAhead through 2.7.1 contains an OS command injection vulnerability in src/git/Filter.cpp that allows malicious repositories to execute commands by substituting crafted filenames into clean/smudge filter commands. Attackers can ship files named with $(command) selected via .gitattributes so…

CVSS 7,7 · EPSS 1,21 % · rekomendacja wg zapisanej polityki

GNU Emacs before 31.2 (and TRAMP through 2.8.2) allows OS command injection via a filename because tramp-user-regexp has an incomplete list of disallowed inputs. NOTE: this issue exists because of an incomplete fix for CVE-2026-79992.

CVSS 7,8 · EPSS 0,51 % · rekomendacja wg zapisanej polityki