Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Data publikacji: ostatnie 7 dni. Starsze wpisy dostępne w pełnym katalogu i widoku KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. Prior to version 2.4.0, POST /api/v1/estimates/{estimate}/convert-to-invoice in ConvertEstimateController authorizes only the caller's create-invoice ability and does…
Opis źródłowy NVD · ENCVSS 7,1 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the GET /sys/api/getDynamicDbSourceByCode endpoint of SystemApiController, which lacks Shiro permission or role annotations. Any authenticated low-privileged user can supply datasource codes in the dbSourceCode parameter to…
Opis źródłowy NVD · ENCVSS 7,1 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos on MX Series routers allows an unauthenticated network attacker to cause a denial of service via an eBGP route update when HFRR link protection is configured in a VRF.
Opis źródłowy NVD · ENCVSS 7,1 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
SurrealDB from 3.0.0 before 3.3.0 contains an authorization bypass vulnerability that allows authenticated record users to read records in other namespaces or databases by resolving record ids through FETCH. Attackers can switch to a foreign namespace/database and name a known record id in a…
Opis źródłowy NVD · ENCVSS 7,1 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
Open WebUI from 0.11.0 before 0.11.4 contains an information disclosure vulnerability that allows authenticated non-admin users with tool export permission to obtain tool source code shared with them read-only. Attackers can request GET /api/v1/tools/export to retrieve the full Python source of…
Opis źródłowy NVD · ENCVSS 7,1 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
A missing authorization check in Nexus Repository 3's NuGet Components API upload path allows an account holding only repository read and browse privileges to upload and persist NuGet symbol packages (.snupkg) to a hosted repository, bypassing the write-permission check enforced for ordinary…
Opis źródłowy NVD · ENCVSS 7,1 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
A NULL Pointer Dereference vulnerability in the rpd routing daemon of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated attacker to crash the routing daemon and cause a denial of service via an RSVP Path message.
Opis źródłowy NVD · ENCVSS 7,1 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
An Out-of-bounds Write vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated attacker to cause a routing-plane denial of service via Auto-RP mapping announcements received when Auto-RP mapping is enabled.
Opis źródłowy NVD · ENCVSS 7,1 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos EVO allows an adjacent unauthenticated attacker to cause a denial of service via LDP control traffic.
Opis źródłowy NVD · ENCVSS 7,1 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
An Integer Underflow (Wrap or Wraparound) vulnerability in the srxpfe of Juniper Networks Junos OS and Junos OS Evolved on the SRX Series allows an adjacent unauthenticated attacker to cause a forwarding-plane denial of service via an ICMP message associated with an SVR carrier session.
Opis źródłowy NVD · ENCVSS 7,1 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
Makunet maku-boot 4.3.0 through 5.0.0 contains a missing authorization vulnerability that allows authenticated users to read mail and SMS configurations by calling /sys/mail/config/list and /sys/sms/config/list without the required authority checks. Attackers can retrieve unmasked SMTP passwords…
Opis źródłowy NVD · ENCVSS 7,1 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
Frappe Framework before 15.117.0 and 16.x before 16.30.0 contains an arbitrary file read vulnerability in the handling of attributes in outgoing email HTML. Attackers who can supply outgoing email content can set an attribute value referencing a local file path to expose sensitive server files.
Opis źródłowy NVD · ENCVSS 7,1 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to read MCP server configurations because the queryById permission check is commented out. Attackers can obtain record ids from the unguarded /airag/app/queryById endpoint and retrieve MCP…
Opis źródłowy NVD · ENCVSS 7,1 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
An Improper Handling of Length Parameter Inconsistency vulnerability in the
l2ald
daemon of Juniper Networks Junos OS and Junos OS Evolved allows an attacker who can control or impersonate a configured MC-LAG ICCP peer to disclose process heap memory or cause a denial of service via a…
Opis źródłowy NVD · ENCVSS 7,1 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
PickMall lilishop through 4.4 contains an insecure direct object reference vulnerability that allows authenticated sellers to overwrite any store's product by supplying another store's goodsId to the goods update endpoint. Attackers can send PUT requests to /store/goods/goods/update/{goodsId} to…
Opis źródłowy NVD · ENCVSS 7,1 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
JetLinks Community through 2.10.0 contains a missing authorization vulnerability that allows users with only query access on transparent-codec to overwrite product codecs via POST /device/transparent-codec/{productId}. Because the endpoint lacks @SaveAction, attackers can save arbitrary codec…
Opis źródłowy NVD · ENCVSS 7,1 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
Frappe ERPNext before 15.106.0 and 16.x before 16.16.0 contains an SQL injection vulnerability in some endpoints due to missing input validation. Authenticated attackers can send specially crafted requests to inject SQL into database queries and extract sensitive information from the underlying…
Opis źródłowy NVD · ENCVSS 7,1 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
Frappe ERPNext before 15.102.0 and 16.x before 16.11.0 contains an SQL injection vulnerability in some endpoints due to missing input validation, allowing manipulation of database queries. Authenticated attackers can send specially crafted requests to the affected endpoints to extract sensitive…
Opis źródłowy NVD · ENCVSS 7,1 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
Frappe ERPNext before 15.106.0 and 16.x before 16.16.0 contains an SQL injection vulnerability in some endpoints due to missing input validation. Authenticated low-privileged attackers can send specially crafted requests to these endpoints to inject SQL and extract sensitive information from the…
Opis źródłowy NVD · ENCVSS 7,1 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
Frappe ERPNext before 15.106.0 and 16.x before 16.16.0 contains an SQL injection vulnerability in multiple endpoints caused by missing input validation. Authenticated attackers can send specially crafted requests to these endpoints to manipulate database queries and extract sensitive information…
Opis źródłowy NVD · ENCVSS 7,1 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
Frappe ERPNext before 15.110.0 and 16.x before 16.21.0 contains a SQL injection vulnerability in some endpoints caused by missing input validation. Authenticated attackers can send specially crafted requests to these endpoints to manipulate database queries and extract sensitive information from…
Opis źródłowy NVD · ENCVSS 7,1 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
Frappe ERPNext before 15.102.0 and 16.x before 16.8.0 contains an SQL injection vulnerability in some endpoints due to missing input validation, allowing manipulation of database queries. Authenticated attackers with low privileges can send specially crafted requests to the affected endpoints to…
Opis źródłowy NVD · ENCVSS 7,1 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
Frappe ERPNext before 16.34.2 contains an SQL injection vulnerability caused by missing input validation in multiple endpoints. Authenticated attackers with low privileges can send specially crafted requests to these endpoints to inject SQL and extract sensitive information from the database.
Opis źródłowy NVD · ENCVSS 7,1 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
Frappe ERPNext before 15.119.1 and 16.x before 16.32.0 contains an SQL injection vulnerability in some endpoints that lack input validation, allowing crafted input to alter database queries. Authenticated attackers with low privileges can send specially crafted requests to these endpoints to…
Opis źródłowy NVD · ENCVSS 7,1 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
CVSS
7,1
EPSS
0,28 %
Poprawka
Status poprawki nieustalony
Publikacja
Aktualizacja NVD
Podatności: opis, rekomendacja, CVSS, EPSS i daty źródłowe. Rekomendacja nie potwierdza podatności własnego zasobu.
InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. Prior to version 2.4.0, POST /api/v1/estimates/{estimate}/convert-to-invoice in ConvertEstimateController authorizes only the caller's create-invoice ability and does…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,1 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the GET /sys/api/getDynamicDbSourceByCode endpoint of SystemApiController, which lacks Shiro permission or role annotations. Any authenticated low-privileged user can supply datasource codes in the dbSourceCode parameter to…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,1 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos on MX Series routers allows an unauthenticated network attacker to cause a denial of service via an eBGP route update when HFRR link protection is configured in a VRF.
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,1 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
SurrealDB from 3.0.0 before 3.3.0 contains an authorization bypass vulnerability that allows authenticated record users to read records in other namespaces or databases by resolving record ids through FETCH. Attackers can switch to a foreign namespace/database and name a known record id in a…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,1 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
Open WebUI from 0.11.0 before 0.11.4 contains an information disclosure vulnerability that allows authenticated non-admin users with tool export permission to obtain tool source code shared with them read-only. Attackers can request GET /api/v1/tools/export to retrieve the full Python source of…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,1 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
A missing authorization check in Nexus Repository 3's NuGet Components API upload path allows an account holding only repository read and browse privileges to upload and persist NuGet symbol packages (.snupkg) to a hosted repository, bypassing the write-permission check enforced for ordinary…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,1 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
A NULL Pointer Dereference vulnerability in the rpd routing daemon of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated attacker to crash the routing daemon and cause a denial of service via an RSVP Path message.
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,1 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
An Out-of-bounds Write vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated attacker to cause a routing-plane denial of service via Auto-RP mapping announcements received when Auto-RP mapping is enabled.
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,1 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos EVO allows an adjacent unauthenticated attacker to cause a denial of service via LDP control traffic.
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,1 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
An Integer Underflow (Wrap or Wraparound) vulnerability in the srxpfe of Juniper Networks Junos OS and Junos OS Evolved on the SRX Series allows an adjacent unauthenticated attacker to cause a forwarding-plane denial of service via an ICMP message associated with an SVR carrier session.
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,1 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
Makunet maku-boot 4.3.0 through 5.0.0 contains a missing authorization vulnerability that allows authenticated users to read mail and SMS configurations by calling /sys/mail/config/list and /sys/sms/config/list without the required authority checks. Attackers can retrieve unmasked SMTP passwords…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,1 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
Frappe Framework before 15.117.0 and 16.x before 16.30.0 contains an arbitrary file read vulnerability in the handling of attributes in outgoing email HTML. Attackers who can supply outgoing email content can set an attribute value referencing a local file path to expose sensitive server files.
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,1 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to read MCP server configurations because the queryById permission check is commented out. Attackers can obtain record ids from the unguarded /airag/app/queryById endpoint and retrieve MCP…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,1 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
An Improper Handling of Length Parameter Inconsistency vulnerability in the
l2ald
daemon of Juniper Networks Junos OS and Junos OS Evolved allows an attacker who can control or impersonate a configured MC-LAG ICCP peer to disclose process heap memory or cause a denial of service via a…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,1 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
PickMall lilishop through 4.4 contains an insecure direct object reference vulnerability that allows authenticated sellers to overwrite any store's product by supplying another store's goodsId to the goods update endpoint. Attackers can send PUT requests to /store/goods/goods/update/{goodsId} to…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,1 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
JetLinks Community through 2.10.0 contains a missing authorization vulnerability that allows users with only query access on transparent-codec to overwrite product codecs via POST /device/transparent-codec/{productId}. Because the endpoint lacks @SaveAction, attackers can save arbitrary codec…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,1 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
Frappe ERPNext before 15.106.0 and 16.x before 16.16.0 contains an SQL injection vulnerability in some endpoints due to missing input validation. Authenticated attackers can send specially crafted requests to inject SQL into database queries and extract sensitive information from the underlying…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,1 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
Frappe ERPNext before 15.102.0 and 16.x before 16.11.0 contains an SQL injection vulnerability in some endpoints due to missing input validation, allowing manipulation of database queries. Authenticated attackers can send specially crafted requests to the affected endpoints to extract sensitive…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,1 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
Frappe ERPNext before 15.106.0 and 16.x before 16.16.0 contains an SQL injection vulnerability in some endpoints due to missing input validation. Authenticated low-privileged attackers can send specially crafted requests to these endpoints to inject SQL and extract sensitive information from the…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,1 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
Frappe ERPNext before 15.106.0 and 16.x before 16.16.0 contains an SQL injection vulnerability in multiple endpoints caused by missing input validation. Authenticated attackers can send specially crafted requests to these endpoints to manipulate database queries and extract sensitive information…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,1 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
Frappe ERPNext before 15.110.0 and 16.x before 16.21.0 contains a SQL injection vulnerability in some endpoints caused by missing input validation. Authenticated attackers can send specially crafted requests to these endpoints to manipulate database queries and extract sensitive information from…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,1 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
Frappe ERPNext before 15.102.0 and 16.x before 16.8.0 contains an SQL injection vulnerability in some endpoints due to missing input validation, allowing manipulation of database queries. Authenticated attackers with low privileges can send specially crafted requests to the affected endpoints to…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,1 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
Frappe ERPNext before 16.34.2 contains an SQL injection vulnerability caused by missing input validation in multiple endpoints. Authenticated attackers with low privileges can send specially crafted requests to these endpoints to inject SQL and extract sensitive information from the database.
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,1 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
Frappe ERPNext before 15.119.1 and 16.x before 16.32.0 contains an SQL injection vulnerability in some endpoints that lack input validation, allowing crafted input to alter database queries. Authenticated attackers with low privileges can send specially crafted requests to these endpoints to…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,1 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
7,1
0,28 %
Publikacja
Aktualizacja NVD
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.