Podatności

Incorrect permission assignment in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to read or overwrite the inter-process communication handles used between the TightVNC service and its desktop server process. The named shared memory segment in the Global\…

CVSS 7,8 · EPSS 0,1 % · rekomendacja wg zapisanej polityki

Incorrect default permissions in the Windows installer of Progressive Robot hMailServer 6.0.0 through 6.3.5 allow a local authenticated user to read the mail server's data. The installer created the data, log, temp, database and event folders and the hMailServer.INI configuration file with the…

CVSS 7,8 · EPSS 0,1 % · rekomendacja wg zapisanej polityki

IBM Guardium Data Protection 12.2 is vulnerable due to weak cryptographic protection and a hard-coded recovery key in the pkcrypto passkey component. A local attacker could exploit this vulnerability to recover the root password and gain root privileges.

CVSS 7,8 · EPSS 0,09 % · rekomendacja wg zapisanej polityki

IBM Guardium Data Protection 12.2 is vulnerable to a local privilege escalation in the cp_wrapper component. A low-privileged local user could exploit this vulnerability to gain root privileges and access or modify sensitive system files.

CVSS 7,8 · EPSS 0,09 % · rekomendacja wg zapisanej polityki

IBM Guardium Data Protection 12.2 is vulnerable to a signature verification bypass in the patch installer. An attacker with local access could exploit this vulnerability to execute arbitrary code with root privileges.

CVSS 7,8 · EPSS 0,07 % · rekomendacja wg zapisanej polityki

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

CVSS 7,7 · EPSS 0,53 % · rekomendacja wg zapisanej polityki

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

CVSS 7,7 · EPSS 0,53 % · rekomendacja wg zapisanej polityki

A flaw was found in DPDK lib/vhost. A TOCTOU double-fetch of control-queue descriptors allows a heap buffer overflow with attacker-controlled content in the VDUSE control-queue handler.

CVSS 7,8 · rekomendacja wg zapisanej polityki

A flaw was found in DPDK lib/vhost. A double-offset bug in vhost log mapping calculation can lead to incorrect memory access.

CVSS 7,8 · rekomendacja wg zapisanej polityki

A Heap-based Buffer Overflow vulnerability in eventd of Juniper Networks Junos OS and Junos OS Evolved on all platforms allows an unprivileged local attacker to cause a denial of service (DoS) or achieve privilege escalation to root via crafted IPC event messages.

CVSS 7,8 · rekomendacja wg zapisanej polityki

mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.7.14, in the default non-safe mode, mise loads .mise.toml [settings] from an untrusted local project before trust approval and strip_local_only_settings removes only fields marked global_only. The…

CVSS 7,8 · rekomendacja wg zapisanej polityki

@offactory/compress-fonts before 1.1.1 contains an OS command injection vulnerability that allows attackers to execute shell commands by supplying font files with crafted names. Font paths are interpolated unquoted into a FontForge command run through child_process.execSync, so shell…

CVSS 7,8 · rekomendacja wg zapisanej polityki

MyReport Updater through 2.1.1 contains a local privilege escalation vulnerability that allows low-privileged users to make the SYSTEM updater service install attacker-supplied archives into arbitrary directories. Attackers can use UpdaterManager.exe over gRPC to set a malicious reference server…

CVSS 7,8 · rekomendacja wg zapisanej polityki

Roo Code through 3.54.0 contains a command approval bypass vulnerability that allows attackers to run denied shell commands because parseCommandLine() treats ${ command; } substitutions as parameter expansions. Attackers using indirect prompt injection can embed denied commands inside an…

CVSS 7,7 · EPSS 0,49 % · rekomendacja wg zapisanej polityki

Adobe Experience Manager is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in arbitrary file system write. A low-privileged attacker could leverage this vulnerability to write files to unauthorized locations on the file…

CVSS 7,7 · EPSS 0,46 % · rekomendacja wg zapisanej polityki

A vulnerability has been identified in Industrial Edge App Publisher (All versions < V1.27.9). The application fails to properly sanitize or escape data received from the backend before rendering it in the user interface. Because the front end is integrated with Node.js, this vulnerability allows…

CVSS 7,7 · EPSS 0,45 % · rekomendacja wg zapisanej polityki

MONAI 0.4.0 before 1.6.1 contains a remote code execution vulnerability that allows on-path attackers to execute code by tampering with SENet pretrained weights fetched over plaintext HTTP. Attackers can substitute a crafted .pth file that load_state_dict_from_url unpickles without…

CVSS 7,7 · EPSS 0,45 % · rekomendacja wg zapisanej polityki

Subscriber Arbitrary File Deletion in PeepSo <= 9.0.5.4 versions.

CVSS 7,7 · EPSS 0,45 % · rekomendacja wg zapisanej polityki

Roo Code through 3.54.0 contains a command approval bypass vulnerability that allows attackers to auto-approve denied shell commands by abusing quote-masking regex in parseCommandLine(). Attackers can use indirect prompt injection with escaped or single-quoted double quotes to hide command…

CVSS 7,7 · EPSS 0,43 % · rekomendacja wg zapisanej polityki

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a remote authenticated attacker to obtain sensitive information due to improper authorization when using the CREATE WRAPPER command.

CVSS 7,7 · EPSS 0,42 % · rekomendacja wg zapisanej polityki

Subscriber Arbitrary File Deletion in FoodBakery <= 4.6 versions.

CVSS 7,7 · EPSS 0,4 % · rekomendacja wg zapisanej polityki

Continue CLI (@continuedev/cli) through 1.5.47 contains a permission bypass vulnerability that allows attackers to run unapproved commands by chaining them after allowed Bash prefix rules. Attackers can inject instructions into repository files or fetched pages so the agent appends commands after…

CVSS 7,7 · EPSS 0,4 % · rekomendacja wg zapisanej polityki

HortusFox (hortusfox-web) through 6.3 contains an unrestricted file upload vulnerability in PlantAttachmentModel that allows authenticated users to store files with client-supplied extensions under public/attachments/. Attackers can upload HTML or SVG files via /plants/attachments/add for stored…

CVSS 7,7 · EPSS 0,39 % · rekomendacja wg zapisanej polityki

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow an authenticated Query Console user to supply unsafe path values to a privileged filesystem helper, which could result in disclosure of arbitrary server files.

CVSS 7,7 · EPSS 0,39 % · rekomendacja wg zapisanej polityki

Epic Games Unreal Engine versions up to and including 5.8.0 ship with an insecure default configuration for the LaunchURL Blueprint node (UKismetSystemLibrary::LaunchURL). The URL scheme filter (FURLRequestFilter) is empty by default, which permits all URL schemes. On Windows, this results in a…

CVSS 7,7 · EPSS 0,39 % · rekomendacja wg zapisanej polityki