Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Data publikacji: ostatnie 7 dni. Starsze wpisy dostępne w pełnym katalogu i widoku KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
SAP NetWeaver and SAP Web Dispatcher do not properly validate certain fields in specially crafted requests handled by an internal protocol component. An unauthenticated attacker could send a malicious request that triggers a memory-handling error, causing the affected process to crash. Successful…
Opis źródłowy NVD · ENCVSS 7,5 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not consistently record successful authentication events in audit logs, which could limit customers' ability to detect and investigate unauthorized access or credential misuse.
Opis źródłowy NVD · ENCVSS 7,5 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
Improper Control of Generation of Code ('Code Injection') vulnerability in VillaTheme Salevo woo-boost-sales allows Code Injection.This issue affects Salevo: from n/a through 1.3.0.
Opis źródłowy NVD · ENCVSS 7,5 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to improper handling of malformed frames, resulting in termination of the host process.
Opis źródłowy NVD · ENCVSS 7,5 · EPSS 0,31 % · rekomendacja wg zapisanej polityki
IBM Maximo Application Suite - IoT Component 9.2.0, 9.1.0, and 9.0.0 could allow a remote attacker to cause a denial of service due to uncontrolled recursion.
Opis źródłowy NVD · ENCVSS 7,5 · EPSS 0,31 % · rekomendacja wg zapisanej polityki
IBM Maximo Application Suite - IoT Component 9.2.0, 9.1.0, and 9.0.0 could allow a remote attacker to cause a denial of service due to an infinite parsing loop when processing certain inputs.
Opis źródłowy NVD · ENCVSS 7,5 · EPSS 0,31 % · rekomendacja wg zapisanej polityki
Insufficient Session Expiration vulnerability in Progress MOVEit Transfer.
This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.
Opis źródłowy NVD · ENCVSS 7,5 · EPSS 0,31 % · rekomendacja wg zapisanej polityki
CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user…
Opis źródłowy NVD · ENCVSS 7,5 · EPSS 0,3 % · rekomendacja wg zapisanej polityki
CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user…
Opis źródłowy NVD · ENCVSS 7,5 · EPSS 0,3 % · rekomendacja wg zapisanej polityki
CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user…
Opis źródłowy NVD · ENCVSS 7,5 · EPSS 0,3 % · rekomendacja wg zapisanej polityki
Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an authentication validation weakness that could allow an attacker to use a token that should not be accepted by the affected server, which could result in unauthorized access.
Opis źródłowy NVD · ENCVSS 7,5 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
Buffer Overflow vulnerability in madmurphy libconfini v.1.16.4 allows a remote attacker to cause a denial of service via an allocation-size mismatch between its bundled load_ini_buffer utility and strip_ini_cache()
Opis źródłowy NVD · ENCVSS 7,5 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
undici is an HTTP client library for Node.js. In versions 8.11.0 and 8.11.1, its experimental WebSocket client, which is enabled by default when HTTP/2 is allowed, mishandles a failed WebSocket handshake over HTTP/2: the request is already marked completed, so the abort becomes a no-op and the…
Opis źródłowy NVD · ENCVSS 7,5 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
GitPython before 3.2.0 contains a regular expression denial of service vulnerability in the _re_actor_epoch pattern used by parse_actor_and_date on author, committer, and tagger lines. Attackers can serve repositories with commit or tag objects containing long space-filled lines lacking a valid…
Opis źródłowy NVD · ENCVSS 7,5 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
Authentication Bypass by Spoofing vulnerability in Liquid Web / StellarWP GiveWP give allows Identity Spoofing.This issue affects GiveWP: from n/a through 4.16.8.1.
Opis źródłowy NVD · ENCVSS 7,5 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
CVSS
7,5
EPSS
0,27 %
Poprawka
Status poprawki nieustalony
Publikacja
Aktualizacja NVD
Podatności: opis, rekomendacja, CVSS, EPSS i daty źródłowe. Rekomendacja nie potwierdza podatności własnego zasobu.
SAP NetWeaver and SAP Web Dispatcher do not properly validate certain fields in specially crafted requests handled by an internal protocol component. An unauthenticated attacker could send a malicious request that triggers a memory-handling error, causing the affected process to crash. Successful…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,5 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not consistently record successful authentication events in audit logs, which could limit customers' ability to detect and investigate unauthorized access or credential misuse.
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,5 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
Improper Control of Generation of Code ('Code Injection') vulnerability in VillaTheme Salevo woo-boost-sales allows Code Injection.This issue affects Salevo: from n/a through 1.3.0.
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,5 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to improper handling of malformed frames, resulting in termination of the host process.
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,5 · EPSS 0,31 % · rekomendacja wg zapisanej polityki
IBM Maximo Application Suite - IoT Component 9.2.0, 9.1.0, and 9.0.0 could allow a remote attacker to cause a denial of service due to uncontrolled recursion.
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,5 · EPSS 0,31 % · rekomendacja wg zapisanej polityki
IBM Maximo Application Suite - IoT Component 9.2.0, 9.1.0, and 9.0.0 could allow a remote attacker to cause a denial of service due to an infinite parsing loop when processing certain inputs.
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,5 · EPSS 0,31 % · rekomendacja wg zapisanej polityki
Insufficient Session Expiration vulnerability in Progress MOVEit Transfer.
This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,5 · EPSS 0,31 % · rekomendacja wg zapisanej polityki
CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,5 · EPSS 0,3 % · rekomendacja wg zapisanej polityki
CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,5 · EPSS 0,3 % · rekomendacja wg zapisanej polityki
CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,5 · EPSS 0,3 % · rekomendacja wg zapisanej polityki
Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an authentication validation weakness that could allow an attacker to use a token that should not be accepted by the affected server, which could result in unauthorized access.
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,5 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
Buffer Overflow vulnerability in madmurphy libconfini v.1.16.4 allows a remote attacker to cause a denial of service via an allocation-size mismatch between its bundled load_ini_buffer utility and strip_ini_cache()
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,5 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
undici is an HTTP client library for Node.js. In versions 8.11.0 and 8.11.1, its experimental WebSocket client, which is enabled by default when HTTP/2 is allowed, mishandles a failed WebSocket handshake over HTTP/2: the request is already marked completed, so the abort becomes a no-op and the…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,5 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
GitPython before 3.2.0 contains a regular expression denial of service vulnerability in the _re_actor_epoch pattern used by parse_actor_and_date on author, committer, and tagger lines. Attackers can serve repositories with commit or tag objects containing long space-filled lines lacking a valid…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,5 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
Authentication Bypass by Spoofing vulnerability in Liquid Web / StellarWP GiveWP give allows Identity Spoofing.This issue affects GiveWP: from n/a through 4.16.8.1.
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,5 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
7,5
0,27 %
Publikacja
Aktualizacja NVD
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
NVD · publikacjePrzetwarzanie niepełne
NVD · aktualizacjePrzetwarzanie niepełne
CISA KEVOstatnie przetworzenie zakończone
FIRST EPSSOstatnie przetworzenie zakończoneData modelu znajduje się przy rekordzie.