Podatności

A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and the root directive or access log format references the map's regex capture variables before referencing the map output variable. Alternatively, the same result could be achieved by using a…

CVSS 8,1 · rekomendacja wg zapisanej polityki

A vulnerability exists in NGINX Plus and NGINX Open Source when a location is configured that uses the alias directive together with rewrite and a set or return directive referencing the $request_filename variable. Alternatively, the same result could be achieved when the $request_filename…

CVSS 8,1 · rekomendacja wg zapisanej polityki

Beganovich snappdf from 1.1.0 before 6.1.0 contains an OS command injection vulnerability on Windows that allows attackers to run commands by influencing the rendered URL. Attackers can supply cmd.exe metacharacters such as & in the setUrl() value, which executeOnWindows() passes unescaped to PHP…

CVSS 8,1 · rekomendacja wg zapisanej polityki

Report One MyReport Updater through 2.1.1 exposes an unauthenticated gRPC service on TCP port 9095 that allows remote attackers to redirect the SYSTEM updater by invoking the UpdateConfigReferent method. Attackers can point the updater to a malicious reference server serving modified module…

CVSS 8,1 · rekomendacja wg zapisanej polityki

SmsForwarder through 3.5.0 contains a missing authentication vulnerability in its AndServer HTTP server that allows unauthenticated network attackers to invoke remote-control APIs. Attackers can call the default-enabled endpoints to read SMS, call logs and contacts, send SMS, and export or…

CVSS 8,1 · rekomendacja wg zapisanej polityki

NullHub through 2026.5.29 contains a missing authentication vulnerability that allows unauthenticated attackers to access the /api/* management API because the auth_token field defaults to null and is never assigned. Attackers sending requests without Authorization or Origin headers to…

CVSS 8,1 · rekomendacja wg zapisanej polityki

Gravitee API Management through 4.12.22 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to impersonate any user by forging JWTs signed with the shipped default jwt.secret. Attackers knowing an existing user ID can sign an HS256 token with that subject…

CVSS 8,1 · rekomendacja wg zapisanej polityki

Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.

CVSS 8,0 · EPSS 0,49 % · rekomendacja wg zapisanej polityki

Integer underflow (wrap or wraparound) in Windows Bluetooth A2DP driver allows an authorized attacker to elevate privileges over an adjacent network.

CVSS 8,0 · EPSS 0,49 % · rekomendacja wg zapisanej polityki

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB insufficiently validated counts, offsets, lengths, and field boundaries in FRM metadata while opening binary FRM files. An attacker able to place a…

CVSS 8,0 · EPSS 0,48 % · rekomendacja wg zapisanej polityki

Integer underflow (wrap or wraparound) in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges over an adjacent network.

CVSS 8,0 · EPSS 0,47 % · rekomendacja wg zapisanej polityki

Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.

CVSS 8,0 · EPSS 0,42 % · rekomendacja wg zapisanej polityki

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote authenticated attacker to execute arbitrary code due to a buffer overflow.

CVSS 8,0 · EPSS 0,38 % · rekomendacja wg zapisanej polityki

Vault and Vault Enterprise did not consistently verify that stored plugin catalog entries reference binaries within the configured plugin directory. When Vault uses Shamir seals and has an external plugin directory configured, a privileged operator able to restore an Integrated Storage (Raft)…

CVSS 8,0 · EPSS 0,34 % · rekomendacja wg zapisanej polityki

Origin validation error in Microsoft Power Apps allows an authorized attacker to execute code over a network.

CVSS 8,0 · EPSS 0,32 % · rekomendacja wg zapisanej polityki

The Adwised Web Push Notification WordPress plugin through 2.5.7 does not perform any capability or nonce check before allowing an authenticated user to overwrite its site-wide configuration, and does not escape those configuration values before printing them inside an inline script block on every…

CVSS 8,0 · EPSS 0,28 % · rekomendacja wg zapisanej polityki

Buffer overflow in a Zoom Phone feature of Zoom Workplace Clients may allow an unauthenticated user to conduct a escalation of privilege via network access.

CVSS 8,0 · EPSS 0,25 % · rekomendacja wg zapisanej polityki

Cross-site scripting in the webmail of Progressive Robot hMailServer 6.3.2 through 6.3.5 allows a remote attacker who can send a user an encrypted message to run script in the webmail's origin with that user's session. When the webmail decrypted an S/MIME message (from 6.3.2) or an OpenPGP message…

CVSS 8,0 · EPSS 0,25 % · rekomendacja wg zapisanej polityki

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain memory-safety defects in the JavaScript engine integration that could result in memory corruption, controlled process failure, or server instability.

CVSS 8,0 · EPSS 0,24 % · rekomendacja wg zapisanej polityki

IBM WebSphere Application Server 8.5, and 9.0 could allow an authenticated attacker to bypass authorization leading to administrative impersonation across the cell.

CVSS 8,0 · EPSS 0,18 % · rekomendacja wg zapisanej polityki

Nix before 2.35.3 and Lix before 2.95.4 allow privilege escalation via a repair operation because it could destroy and then replace a store path before content verification.

CVSS 8,0 · EPSS 0,15 % · rekomendacja wg zapisanej polityki

Rovr through 0.10.3 on Windows contains an OS command injection vulnerability that allows attackers to execute commands by crafting malicious file names. Attackers can deliver a file named with shell metacharacters like & alongside a payload, which runs with user privileges when the file is opened…

CVSS 7,8 · EPSS 1,15 % · rekomendacja wg zapisanej polityki

Improper neutralization of special elements used in a command ('command injection') in Windows Update allows an authorized attacker to elevate privileges locally.

CVSS 7,8 · EPSS 0,96 % · rekomendacja wg zapisanej polityki

HPE NonStop Middleware software has secret key handling and data deserialization vulnerability.

CVSS 7,9 · EPSS 0,36 % · rekomendacja wg zapisanej polityki

Improper neutralization of argument delimiters in a command ('argument injection') in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

CVSS 7,8 · EPSS 0,83 % · rekomendacja wg zapisanej polityki