Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Data publikacji: ostatnie 7 dni. Starsze wpisy dostępne w pełnym katalogu i widoku KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
An Improper Release of Memory Before Removing Last Reference vulnerability in the l2ald process of Juniper Networks Junos OS and Junos OS Evolved on QFX5K-family platforms allows a configured EVPN peer to cause a denial of service through memory exhaustion via EVPN-VXLAN active-active multihoming…
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,33 % · rekomendacja wg zapisanej polityki
Sylius through 2.3.0 contains an authorization bypass vulnerability that allows unauthenticated attackers to read unmoderated and rejected product reviews because the AcceptedExtension filter is not applied to the item operation. Attackers can enumerate sequential ids on GET…
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the vertx-mail-client does not sanitize CR (\r) or LF (\n) characters in user-supplied email header names and values before writing them into the SMTP DATA section. A CR/LF sequence embedded in a name…
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
NivoCart through 2.5.1 contains a CAPTCHA bypass vulnerability that allows unauthenticated attackers to defeat form protection because the expected code is printed as plain text in the HTML. Attackers can fetch protected forms, extract the captcha_image value with a pattern match, and submit it to…
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
RedAmon through 7.0.1 contains an unauthenticated server-side request forgery vulnerability in the agent POST /tradecraft/verify endpoint because validate_url checks only the initial hostname. Attackers can submit a public URL that redirects or DNS-rebinds to internal addresses like cloud metadata…
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
ValueCell through 0.1.20 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to direct backend requests by setting an unvalidated provider base_url. Attackers can set base_url via the provider config endpoint and trigger POST /api/v1/models/check to…
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
Description
NGINX JavaScript (njs) has a vulnerability where the built-in njs engine leaks a libxml2 parser context when xml.parse() fails. The failure path did not register cleanup and the context was not released for the lifetime of the process. An unauthenticated attacker may send requests…
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
Razorpay IFSC Ruby gem through 2.0.62 contains a server-side request forgery vulnerability that allows attackers to redirect API requests by supplying a crafted IFSC code to IFSC.find or IFSC#get. Attackers can submit network-path references or absolute URIs that URI.join resolves as a new host,…
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
Frappe ERPNext before 15.110.0 and 16.x before 16.21.0 contains a missing authorization vulnerability in certain endpoints that fail to enforce authorization checks. Unauthenticated remote attackers can call these endpoints to create records and enumerate availability even when an administrator…
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
Frappe before 14.59.0 and 15.x before 15.5.0 contains a sandbox flaw where the frappe.flags.in_safe_exec global flag can become False during Server Script execution when one server script triggers another. Authenticated high-privileged users can craft a Server Script that triggers other server…
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
Hatchet through 0.110.5 contains an allocation of resources without limits vulnerability that allows unauthenticated attackers to exhaust memory via the SNS ingestion endpoint. Attackers can send arbitrarily large or concurrent request bodies to POST /api/v1/sns/{tenant}/{event} with any UUID,…
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
Craft CMS 4.0.0 before 4.18.7 and 5.0.0 before 5.10.14 contains an arbitrary file read vulnerability because the Twig create() class blocklist does not cover DOMDocument. Attackers able to set an entry-type title format, including via project-config/apply, can use…
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,31 % · rekomendacja wg zapisanej polityki
A vulnerability was determined in OpenSIPS up to 3.6.8/4.0.1. The impacted element is the function rtpproxy_offer/rtpproxy_answer of the component rtpproxy. This manipulation causes out-of-bounds read. The attack may be initiated remotely. Upgrading to version 3.6.9 and 4.0.2 is sufficient to…
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,31 % · rekomendacja wg zapisanej polityki
A security flaw has been discovered in cemtan sar2html 4.0.0. Affected by this vulnerability is an unknown functionality of the file sar2html.py. The manipulation of the argument SECRET_KEY results in hard-coded credentials. The attack can be executed remotely. The project was informed of the…
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,31 % · rekomendacja wg zapisanej polityki
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an information disclosure vulnerability in the JPEG decoder, which performs a read that exposes uninitialized memory when handling crafted input. Attackers can supply a crafted JPEG file for processing to disclose uninitialized memory…
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,31 % · rekomendacja wg zapisanej polityki
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an information disclosure vulnerability in the PostScript decoder, which allocates a buffer one byte longer than the data it decoded. Attackers can supply a crafted PostScript file to expose a single uninitialized byte of memory contents.
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,31 % · rekomendacja wg zapisanej polityki
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an uninitialized memory read in the TGA image decoder that can expose memory contents. Attackers can supply a crafted TGA image for processing to disclose contents of uninitialized memory from the ImageMagick process.
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,31 % · rekomendacja wg zapisanej polityki
Frappe 14.x before 14.45.0 contains an information disclosure vulnerability that allows users with error log access to view secrets stored in local variables captured in tracebacks. Attackers who can read error logs can extract plaintext secrets such as credentials or keys exposed in traceback…
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,31 % · rekomendacja wg zapisanej polityki
Quarkus LangChain4j 1.9.0 through 1.14.1 contains a missing release of memory vulnerability in the chat-scopes WebSocket /_chat/routes endpoint that allows unauthenticated remote clients to exhaust server memory. Attackers can send repeated CONNECT frames reusing one chatId, leaving orphaned…
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,3 % · rekomendacja wg zapisanej polityki
Frappe ERPNext before 15.121.0 and 16.x before 16.34.0 contains an SQL injection vulnerability in some endpoints due to missing input validation. Authenticated attackers with high privileges can send specially crafted requests to these endpoints to inject SQL and extract sensitive information from…
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,3 % · rekomendacja wg zapisanej polityki
Craftplan through 0.7.5 contains a missing authorization vulnerability in the CRM Customer resource that allows unauthenticated attackers to create customer records via JSON:API and GraphQL. Attackers can send anonymous requests to POST /api/json/customers or the create_customer mutation to insert…
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,3 % · rekomendacja wg zapisanej polityki
An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a limited information disclosure and availability impact to the device.
Due to a wrong initialization, a process…
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
A vulnerability was found in ZKTeco BioTime 9.5.6 Build 20260130.3206. This issue affects some unknown processing. The manipulation results in use of hard-coded cryptographic key
. The attack may be launched remotely. Upgrading to version 9.5.6 Build 3623 is capable of addressing this issue. It…
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
A vulnerability was found in cemtan sar2html 4.0.0. The affected element is the function updateDb of the file sar2html.py of the component Archive Processing. The manipulation of the argument s2host results in sql injection. The attack can be launched remotely. The project was informed of the…
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
In Eclipse Jetty, `TryPathsHandler` and `TryFilesFilter` can be configured to forward requests to template URIs such as `index?p=$path`, where `$path` is the request path in context.
However, URI paths may contain characters that are reserved in URI queries so that a path of `/s&a=1` when…
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
CVSS
6,9
EPSS
0,27 %
Poprawka
Status poprawki nieustalony
Publikacja
Aktualizacja NVD
Podatności: opis, rekomendacja, CVSS, EPSS i daty źródłowe. Rekomendacja nie potwierdza podatności własnego zasobu.
An Improper Release of Memory Before Removing Last Reference vulnerability in the l2ald process of Juniper Networks Junos OS and Junos OS Evolved on QFX5K-family platforms allows a configured EVPN peer to cause a denial of service through memory exhaustion via EVPN-VXLAN active-active multihoming…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,33 % · rekomendacja wg zapisanej polityki
Sylius through 2.3.0 contains an authorization bypass vulnerability that allows unauthenticated attackers to read unmoderated and rejected product reviews because the AcceptedExtension filter is not applied to the item operation. Attackers can enumerate sequential ids on GET…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the vertx-mail-client does not sanitize CR (\r) or LF (\n) characters in user-supplied email header names and values before writing them into the SMTP DATA section. A CR/LF sequence embedded in a name…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
NivoCart through 2.5.1 contains a CAPTCHA bypass vulnerability that allows unauthenticated attackers to defeat form protection because the expected code is printed as plain text in the HTML. Attackers can fetch protected forms, extract the captcha_image value with a pattern match, and submit it to…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
RedAmon through 7.0.1 contains an unauthenticated server-side request forgery vulnerability in the agent POST /tradecraft/verify endpoint because validate_url checks only the initial hostname. Attackers can submit a public URL that redirects or DNS-rebinds to internal addresses like cloud metadata…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
ValueCell through 0.1.20 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to direct backend requests by setting an unvalidated provider base_url. Attackers can set base_url via the provider config endpoint and trigger POST /api/v1/models/check to…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
Description
NGINX JavaScript (njs) has a vulnerability where the built-in njs engine leaks a libxml2 parser context when xml.parse() fails. The failure path did not register cleanup and the context was not released for the lifetime of the process. An unauthenticated attacker may send requests…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
Razorpay IFSC Ruby gem through 2.0.62 contains a server-side request forgery vulnerability that allows attackers to redirect API requests by supplying a crafted IFSC code to IFSC.find or IFSC#get. Attackers can submit network-path references or absolute URIs that URI.join resolves as a new host,…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
Frappe ERPNext before 15.110.0 and 16.x before 16.21.0 contains a missing authorization vulnerability in certain endpoints that fail to enforce authorization checks. Unauthenticated remote attackers can call these endpoints to create records and enumerate availability even when an administrator…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
Frappe before 14.59.0 and 15.x before 15.5.0 contains a sandbox flaw where the frappe.flags.in_safe_exec global flag can become False during Server Script execution when one server script triggers another. Authenticated high-privileged users can craft a Server Script that triggers other server…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
Hatchet through 0.110.5 contains an allocation of resources without limits vulnerability that allows unauthenticated attackers to exhaust memory via the SNS ingestion endpoint. Attackers can send arbitrarily large or concurrent request bodies to POST /api/v1/sns/{tenant}/{event} with any UUID,…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
Craft CMS 4.0.0 before 4.18.7 and 5.0.0 before 5.10.14 contains an arbitrary file read vulnerability because the Twig create() class blocklist does not cover DOMDocument. Attackers able to set an entry-type title format, including via project-config/apply, can use…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,31 % · rekomendacja wg zapisanej polityki
A vulnerability was determined in OpenSIPS up to 3.6.8/4.0.1. The impacted element is the function rtpproxy_offer/rtpproxy_answer of the component rtpproxy. This manipulation causes out-of-bounds read. The attack may be initiated remotely. Upgrading to version 3.6.9 and 4.0.2 is sufficient to…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,31 % · rekomendacja wg zapisanej polityki
A security flaw has been discovered in cemtan sar2html 4.0.0. Affected by this vulnerability is an unknown functionality of the file sar2html.py. The manipulation of the argument SECRET_KEY results in hard-coded credentials. The attack can be executed remotely. The project was informed of the…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,31 % · rekomendacja wg zapisanej polityki
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an information disclosure vulnerability in the JPEG decoder, which performs a read that exposes uninitialized memory when handling crafted input. Attackers can supply a crafted JPEG file for processing to disclose uninitialized memory…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,31 % · rekomendacja wg zapisanej polityki
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an information disclosure vulnerability in the PostScript decoder, which allocates a buffer one byte longer than the data it decoded. Attackers can supply a crafted PostScript file to expose a single uninitialized byte of memory contents.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,31 % · rekomendacja wg zapisanej polityki
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an uninitialized memory read in the TGA image decoder that can expose memory contents. Attackers can supply a crafted TGA image for processing to disclose contents of uninitialized memory from the ImageMagick process.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,31 % · rekomendacja wg zapisanej polityki
Frappe 14.x before 14.45.0 contains an information disclosure vulnerability that allows users with error log access to view secrets stored in local variables captured in tracebacks. Attackers who can read error logs can extract plaintext secrets such as credentials or keys exposed in traceback…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,31 % · rekomendacja wg zapisanej polityki
Quarkus LangChain4j 1.9.0 through 1.14.1 contains a missing release of memory vulnerability in the chat-scopes WebSocket /_chat/routes endpoint that allows unauthenticated remote clients to exhaust server memory. Attackers can send repeated CONNECT frames reusing one chatId, leaving orphaned…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,3 % · rekomendacja wg zapisanej polityki
Frappe ERPNext before 15.121.0 and 16.x before 16.34.0 contains an SQL injection vulnerability in some endpoints due to missing input validation. Authenticated attackers with high privileges can send specially crafted requests to these endpoints to inject SQL and extract sensitive information from…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,3 % · rekomendacja wg zapisanej polityki
Craftplan through 0.7.5 contains a missing authorization vulnerability in the CRM Customer resource that allows unauthenticated attackers to create customer records via JSON:API and GraphQL. Attackers can send anonymous requests to POST /api/json/customers or the create_customer mutation to insert…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,3 % · rekomendacja wg zapisanej polityki
An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a limited information disclosure and availability impact to the device.
Due to a wrong initialization, a process…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
A vulnerability was found in ZKTeco BioTime 9.5.6 Build 20260130.3206. This issue affects some unknown processing. The manipulation results in use of hard-coded cryptographic key
. The attack may be launched remotely. Upgrading to version 9.5.6 Build 3623 is capable of addressing this issue. It…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
A vulnerability was found in cemtan sar2html 4.0.0. The affected element is the function updateDb of the file sar2html.py of the component Archive Processing. The manipulation of the argument s2host results in sql injection. The attack can be launched remotely. The project was informed of the…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
In Eclipse Jetty, `TryPathsHandler` and `TryFilesFilter` can be configured to forward requests to template URIs such as `index?p=$path`, where `$path` is the request path in context.
However, URI paths may contain characters that are reserved in URI queries so that a path of `/s&a=1` when…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
6,9
0,27 %
Publikacja
Aktualizacja NVD
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.