Unauthenticated PHP Object Injection in Photolia <= 1.0.3 versions.
Unauthenticated PHP Object Injection in Photolia <= 1.0.3 versions.
- CVSS
- 9,8
- EPSS
- 0,34 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
KATALOG INFORMACJI
Podatności
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Data publikacji: ostatnie 7 dni. Starsze wpisy dostępne w pełnym katalogu i widoku KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Filtry katalogu · zakres, producent, rekomendacja
Deserialization of Untrusted Data vulnerability in VillaTheme AFFI – Affiliate Marketing for WooCommerce affi-affiliate-marketing-for-woo…
Deserialization of Untrusted Data vulnerability in VillaTheme AFFI – Affiliate Marketing for WooCommerce affi-affiliate-marketing-for-woo allows Object Injection.This issue affects AFFI – Affiliate Marketing for WooCommerce: from n/a through 1.0.10.
- CVSS
- 9,8
- EPSS
- 0,34 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Gitea Actions decided whether a fork pull request run needed approval based on the user who triggered the event rather than the pull…
Gitea Actions decided whether a fork pull request run needed approval based on the user who triggered the event rather than the pull request author. For `pull_request` activity triggered by a maintainer during ordinary triage, such as adding a label, the run was created without requiring approval,…
- CVSS
- 9,8
- EPSS
- 0,34 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Unauthenticated PHP Object Injection in GDPR Framework By Data443 <= 2.5.0 versions.
Unauthenticated PHP Object Injection in GDPR Framework By Data443 <= 2.5.0 versions.
- CVSS
- 9,8
- EPSS
- 0,34 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco License On-Prem, formerly…
As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), has conducted a comprehensive internal security review. This review resulted in software hardening releases…
- CVSS
- 9,8
- EPSS
- 0,33 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Unauthenticated PHP Object Injection in Anesta <= 1.5.3 versions.
Unauthenticated PHP Object Injection in Anesta <= 1.5.3 versions.
- CVSS
- 9,8
- EPSS
- 0,33 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Unauthenticated Privilege Escalation in Tonda Membership <= 1.0.1 versions.
Unauthenticated Privilege Escalation in Tonda Membership <= 1.0.1 versions.
- CVSS
- 9,8
- EPSS
- 0,33 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Deserialization of Untrusted Data vulnerability in Axiomthemes Balance balance allows Object Injection.This issue affects Balance: from…
Deserialization of Untrusted Data vulnerability in Axiomthemes Balance balance allows Object Injection.This issue affects Balance: from n/a through 1.12.0.
- CVSS
- 9,8
- EPSS
- 0,33 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Deserialization of Untrusted Data vulnerability in ThemeREX Group IPharm ipharm allows Object Injection.This issue affects IPharm: from…
Deserialization of Untrusted Data vulnerability in ThemeREX Group IPharm ipharm allows Object Injection.This issue affects IPharm: from n/a through 1.2.4.
- CVSS
- 9,8
- EPSS
- 0,33 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Deserialization of Untrusted Data vulnerability in ThemeREX Group Hygia hygia allows Object Injection.This issue affects Hygia: from n/a…
Deserialization of Untrusted Data vulnerability in ThemeREX Group Hygia hygia allows Object Injection.This issue affects Hygia: from n/a through 1.21.0.
- CVSS
- 9,8
- EPSS
- 0,33 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Deserialization of Untrusted Data vulnerability in ThemeREX Group Hogwords hogwords allows Object Injection.This issue affects Hogwords:…
Deserialization of Untrusted Data vulnerability in ThemeREX Group Hogwords hogwords allows Object Injection.This issue affects Hogwords: from n/a through 1.2.7.
- CVSS
- 9,8
- EPSS
- 0,33 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Deserialization of Untrusted Data vulnerability in ThemeREX Group Greeny greeny allows Object Injection.This issue affects Greeny: from…
Deserialization of Untrusted Data vulnerability in ThemeREX Group Greeny greeny allows Object Injection.This issue affects Greeny: from n/a through 2.10.0.
- CVSS
- 9,8
- EPSS
- 0,33 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Deserialization of Untrusted Data vulnerability in ThemeREX Group Edema edema allows Object Injection.This issue affects Edema: from n/a…
Deserialization of Untrusted Data vulnerability in ThemeREX Group Edema edema allows Object Injection.This issue affects Edema: from n/a through 1.2.2.2.
- CVSS
- 9,8
- EPSS
- 0,33 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Deserialization of Untrusted Data vulnerability in Liquid Web / StellarWP The Events Calendar allows Object Injection.
Deserialization of Untrusted Data vulnerability in Liquid Web / StellarWP The Events Calendar allows Object Injection. This issue affects The Events Calendar: from n/a through 6.17.4.
- CVSS
- 9,8
- EPSS
- 0,33 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Improper Neutralization.
Improper Neutralization. Splunk addressed multiple internally identified vulnerabilities in Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15. The vulnerabilities are grouped by Common Weakness Enumeration (CWE), with one Common Vulnerabilities and Exposures (CVE) identifier assigned…
- CVSS
- 9,8
- EPSS
- 0,33 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy Infrastructure Controller…
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy Infrastructure Controller (APIC) engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple…
- CVSS
- 9,8
- EPSS
- 0,33 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
A missing integrity verification vulnerability in the client agent software of HPE Networking ClearPass Policy Manager could allow an…
A missing integrity verification vulnerability in the client agent software of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote attacker to introduce untrusted code. Successful exploitation could allow an attacker to execute arbitrary code on the affected client system.
- CVSS
- 9,8
- EPSS
- 0,32 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Unauthenticated PHP Object Injection in Buzz Stone | Magazine & Viral Blog WordPress Theme <= 1.0.2 versions.
Unauthenticated PHP Object Injection in Buzz Stone | Magazine & Viral Blog WordPress Theme <= 1.0.2 versions.
- CVSS
- 9,8
- EPSS
- 0,32 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Deserialization of Untrusted Data vulnerability in Axiomthemes Veto veto allows Object Injection.This issue affects Veto: from n/a through…
Deserialization of Untrusted Data vulnerability in Axiomthemes Veto veto allows Object Injection.This issue affects Veto: from n/a through 1.6.0.
- CVSS
- 9,8
- EPSS
- 0,32 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Deserialization of Untrusted Data vulnerability in ThemeREX Group Travesia travesia allows Object Injection.This issue affects Travesia:…
Deserialization of Untrusted Data vulnerability in ThemeREX Group Travesia travesia allows Object Injection.This issue affects Travesia: from n/a through 1.1.16.
- CVSS
- 9,8
- EPSS
- 0,32 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Deserialization of Untrusted Data vulnerability in ThemeREX Group Booklovers booklovers allows Object Injection.This issue affects…
Deserialization of Untrusted Data vulnerability in ThemeREX Group Booklovers booklovers allows Object Injection.This issue affects Booklovers: from n/a through 2.13.0.
- CVSS
- 9,8
- EPSS
- 0,32 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Deserialization of Untrusted Data vulnerability in ThemeREX Group Gutentype gutentype allows Object Injection.This issue affects…
Deserialization of Untrusted Data vulnerability in ThemeREX Group Gutentype gutentype allows Object Injection.This issue affects Gutentype: from n/a through 2.1.12.
- CVSS
- 9,8
- EPSS
- 0,32 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
In JetBrains Exposed before 1.5.1 sQL injection was possible via unescaped string arguments of several SQL functions
In JetBrains Exposed before 1.5.1 sQL injection was possible via unescaped string arguments of several SQL functions
- CVSS
- 9,8
- EPSS
- 0,32 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute unauthorized SQL statements due to SQL injection.
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute unauthorized SQL statements due to SQL injection.
- CVSS
- 9,8
- EPSS
- 0,32 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Unauthenticated PHP Object Injection in Original <= 1.9.0 versions.
Unauthenticated PHP Object Injection in Original <= 1.9.0 versions.
- CVSS
- 9,8
- EPSS
- 0,31 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Unauthenticated PHP Object Injection in Photolia <= 1.0.3 versions. | Unauthenticated PHP Object Injection in Photolia <= 1.0.3 versions. |
W tym tygodniu | 9,8 | 0,34 % | ||
| Deserialization of Untrusted Data vulnerability in VillaTheme AFFI – Affiliate Marketing for WooCommerce affi-affiliate-marketing-for-woo… | Deserialization of Untrusted Data vulnerability in VillaTheme AFFI – Affiliate Marketing for WooCommerce affi-affiliate-marketing-for-woo allows Object Injection.This issue affects AFFI – Affiliate Marketing for WooCommerce: from n/a through 1.0.10. |
W tym tygodniu | 9,8 | 0,34 % | ||
| Gitea Actions decided whether a fork pull request run needed approval based on the user who triggered the event rather than the pull… | Gitea Actions decided whether a fork pull request run needed approval based on the user who triggered the event rather than the pull request author. For `pull_request` activity triggered by a maintainer during ordinary triage, such as adding a label, the run was created without requiring approval,… |
W tym tygodniu | 9,8 | 0,34 % | ||
| Unauthenticated PHP Object Injection in GDPR Framework By Data443 <= 2.5.0 versions. | Unauthenticated PHP Object Injection in GDPR Framework By Data443 <= 2.5.0 versions. |
W tym tygodniu | 9,8 | 0,34 % | ||
| As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco License On-Prem, formerly… | As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), has conducted a comprehensive internal security review. This review resulted in software hardening releases… |
W tym tygodniu | 9,8 | 0,33 % | ||
| Unauthenticated PHP Object Injection in Anesta <= 1.5.3 versions. | Unauthenticated PHP Object Injection in Anesta <= 1.5.3 versions. |
W tym tygodniu | 9,8 | 0,33 % | ||
| Unauthenticated Privilege Escalation in Tonda Membership <= 1.0.1 versions. | Unauthenticated Privilege Escalation in Tonda Membership <= 1.0.1 versions. |
W tym tygodniu | 9,8 | 0,33 % | ||
| Deserialization of Untrusted Data vulnerability in Axiomthemes Balance balance allows Object Injection.This issue affects Balance: from… | Deserialization of Untrusted Data vulnerability in Axiomthemes Balance balance allows Object Injection.This issue affects Balance: from n/a through 1.12.0. |
W tym tygodniu | 9,8 | 0,33 % | ||
| Deserialization of Untrusted Data vulnerability in ThemeREX Group IPharm ipharm allows Object Injection.This issue affects IPharm: from… | Deserialization of Untrusted Data vulnerability in ThemeREX Group IPharm ipharm allows Object Injection.This issue affects IPharm: from n/a through 1.2.4. |
W tym tygodniu | 9,8 | 0,33 % | ||
| Deserialization of Untrusted Data vulnerability in ThemeREX Group Hygia hygia allows Object Injection.This issue affects Hygia: from n/a… | Deserialization of Untrusted Data vulnerability in ThemeREX Group Hygia hygia allows Object Injection.This issue affects Hygia: from n/a through 1.21.0. |
W tym tygodniu | 9,8 | 0,33 % | ||
| Deserialization of Untrusted Data vulnerability in ThemeREX Group Hogwords hogwords allows Object Injection.This issue affects Hogwords:… | Deserialization of Untrusted Data vulnerability in ThemeREX Group Hogwords hogwords allows Object Injection.This issue affects Hogwords: from n/a through 1.2.7. |
W tym tygodniu | 9,8 | 0,33 % | ||
| Deserialization of Untrusted Data vulnerability in ThemeREX Group Greeny greeny allows Object Injection.This issue affects Greeny: from… | Deserialization of Untrusted Data vulnerability in ThemeREX Group Greeny greeny allows Object Injection.This issue affects Greeny: from n/a through 2.10.0. |
W tym tygodniu | 9,8 | 0,33 % | ||
| Deserialization of Untrusted Data vulnerability in ThemeREX Group Edema edema allows Object Injection.This issue affects Edema: from n/a… | Deserialization of Untrusted Data vulnerability in ThemeREX Group Edema edema allows Object Injection.This issue affects Edema: from n/a through 1.2.2.2. |
W tym tygodniu | 9,8 | 0,33 % | ||
| Deserialization of Untrusted Data vulnerability in Liquid Web / StellarWP The Events Calendar allows Object Injection. | Deserialization of Untrusted Data vulnerability in Liquid Web / StellarWP The Events Calendar allows Object Injection. This issue affects The Events Calendar: from n/a through 6.17.4. |
W tym tygodniu | 9,8 | 0,33 % | ||
| Improper Neutralization. | Improper Neutralization. Splunk addressed multiple internally identified vulnerabilities in Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15. The vulnerabilities are grouped by Common Weakness Enumeration (CWE), with one Common Vulnerabilities and Exposures (CVE) identifier assigned… |
W tym tygodniu | 9,8 | 0,33 % | ||
| As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy Infrastructure Controller… | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy Infrastructure Controller (APIC) engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple… |
W tym tygodniu | 9,8 | 0,33 % | ||
| A missing integrity verification vulnerability in the client agent software of HPE Networking ClearPass Policy Manager could allow an… | A missing integrity verification vulnerability in the client agent software of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote attacker to introduce untrusted code. Successful exploitation could allow an attacker to execute arbitrary code on the affected client system. |
W tym tygodniu | 9,8 | 0,32 % | ||
| Unauthenticated PHP Object Injection in Buzz Stone | Magazine & Viral Blog WordPress Theme <= 1.0.2 versions. | Unauthenticated PHP Object Injection in Buzz Stone | Magazine & Viral Blog WordPress Theme <= 1.0.2 versions. |
W tym tygodniu | 9,8 | 0,32 % | ||
| Deserialization of Untrusted Data vulnerability in Axiomthemes Veto veto allows Object Injection.This issue affects Veto: from n/a through… | Deserialization of Untrusted Data vulnerability in Axiomthemes Veto veto allows Object Injection.This issue affects Veto: from n/a through 1.6.0. |
W tym tygodniu | 9,8 | 0,32 % | ||
| Deserialization of Untrusted Data vulnerability in ThemeREX Group Travesia travesia allows Object Injection.This issue affects Travesia:… | Deserialization of Untrusted Data vulnerability in ThemeREX Group Travesia travesia allows Object Injection.This issue affects Travesia: from n/a through 1.1.16. |
W tym tygodniu | 9,8 | 0,32 % | ||
| Deserialization of Untrusted Data vulnerability in ThemeREX Group Booklovers booklovers allows Object Injection.This issue affects… | Deserialization of Untrusted Data vulnerability in ThemeREX Group Booklovers booklovers allows Object Injection.This issue affects Booklovers: from n/a through 2.13.0. |
W tym tygodniu | 9,8 | 0,32 % | ||
| Deserialization of Untrusted Data vulnerability in ThemeREX Group Gutentype gutentype allows Object Injection.This issue affects… | Deserialization of Untrusted Data vulnerability in ThemeREX Group Gutentype gutentype allows Object Injection.This issue affects Gutentype: from n/a through 2.1.12. |
W tym tygodniu | 9,8 | 0,32 % | ||
| In JetBrains Exposed before 1.5.1 sQL injection was possible via unescaped string arguments of several SQL functions | In JetBrains Exposed before 1.5.1 sQL injection was possible via unescaped string arguments of several SQL functions |
W tym tygodniu | 9,8 | 0,32 % | ||
| IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute unauthorized SQL statements due to SQL injection. | IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute unauthorized SQL statements due to SQL injection. |
W tym tygodniu | 9,8 | 0,32 % | ||
| Unauthenticated PHP Object Injection in Original <= 1.9.0 versions. | Unauthenticated PHP Object Injection in Original <= 1.9.0 versions. |
W tym tygodniu | 9,8 | 0,31 % |
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
NVD · publikacjeOstatnie przetworzenie zakończone
NVD · aktualizacjeOstatnie przetworzenie zakończone
CISA KEVOstatnie przetworzenie zakończone
FIRST EPSSOstatnie przetworzenie zakończoneData modelu znajduje się przy rekordzie.