Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Data publikacji: ostatnie 7 dni. Starsze wpisy dostępne w pełnym katalogu i widoku KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
The Donation Thermometer WordPress plugin before 2.3.0 does not escape a colour value taken from a shortcode attribute before using it in an attribute of the generated legend markup, allowing users with the Contributor role and above to inject arbitrary event handlers that execute when the page is…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
The Pricing Table WordPress plugin before 2.1.5 does not validate the scheme of a user-supplied link value in one of its blocks before rendering it, allowing users with contributor-level access and above to store malicious scripts that execute when another user views and interacts with the…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
The Gutenverse Form WordPress plugin before 3.0.11 does not sanitize SVG icon markup stored in its form blocks before it is decoded and inserted into the page in the browser, allowing authenticated users with Contributor-level access and above to store malicious SVG that executes JavaScript in…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.15 does not sanitize or escape gallery configuration values before echoing them into an inline script on every page that embeds the gallery, allowing users with contributor-level access and above to store JavaScript that executes…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
The Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories WordPress plugin before 4.10.6 does not enforce a safe HTML-element allowlist on a shortcode attribute and does not neutralise attacker-controlled text placed inside the resulting…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
The WP Testimonials WordPress plugin through 1.4.13 does not properly escape testimonial content and reverses WordPress's HTML sanitization when rendering it, allowing users with the Author role and above to store JavaScript that executes in the session of any user viewing the testimonials,…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,3 % · rekomendacja wg zapisanej polityki
The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape some of its image settings before outputting them in a gallery page, allowing users with the Author role and above to perform Stored Cross-Site Scripting attacks that execute in the browser of any visitor viewing the…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape image alt text before outputting it in one of its gallery layouts, allowing users with the Author role and above to perform Stored Cross-Site Scripting attacks that execute in the browser of any user viewing the affected…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape a gallery setting before outputting it on a frontend page, allowing users with the Author role and above to perform Stored Cross-Site Scripting attacks that execute in the browser of any visitor viewing a gallery,…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape some of its gallery settings before outputting them on the gallery edit screen, allowing users with the Contributor role and above to store JavaScript that executes in the context of an administrator who opens the gallery…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
The Post Snippets WordPress plugin through 4.2.4 does not properly escape variable values substituted into snippets before outputting them, allowing users with the Contributor role and above to inject arbitrary web scripts that execute when the content is viewed.
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
The CC1200 sub-GHz IEEE 802.15.4 driver takes the PHY packet length from the first byte of the radio's RX FIFO in get_packet_length() and validates it in verify_rxfifo_validity() (drivers/ieee802154/ieee802154_cc1200.c). That validation only enforced a lower bound (pkt_len < 3); its second clause…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
A flaw was found in the Client-Initiated Backchannel Authentication CIBA implementation within the keycloak-services component of Keycloak. This component handles advanced authentication flows where a client initiates a login on behalf of a user. The issue occurs because Keycloak fails to verify…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,25 % · rekomendacja wg zapisanej polityki
xlsxio through 0.2.37 contains a NULL pointer dereference vulnerability in main_sheet_get_sheetfile_expat_callback_element_start() in lib/xlsxio_read.c that allows attackers to crash applications via crafted files. Attackers can supply a .xlsx file whose workbook.xml.rels contains a worksheet…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
L-SMASH through 2.14.5 contains an infinite loop vulnerability in vc1_importer_probe() in importer/vc1_imp.c that allows attackers to hang applications via crafted input files. Attackers can supply a file consisting only of zero bytes, which lsmash_read_file() probes automatically, causing…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.16.0, FileRise stores the isAdmin flag in remember-me tokens and restores that stale value during automatic login instead of resolving the account's current role from users.txt. A…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
Distribution is a toolkit to pack, ship, store, and deliver container content. Prior to 3.1.2, registry/client.(*manifests).Get() reads a manifest returned for a digest-pinned request and passes it to distribution.UnmarshalManifest without hashing the body against the requested digest, allowing a…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,21 % · rekomendacja wg zapisanej polityki
BentoPDF is a privacy-focused PDF toolkit that runs in the browser. In versions through 2.8.6, cloudflare/cors-proxy-worker.js performs a DNS-over-HTTPS safety check in hostnameResolvesToPrivate(), as used by isValidCertificateUrl() and isValidTsaUrl(), separately from the outbound…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,2 % · rekomendacja wg zapisanej polityki
libmikmod through 3.3.15 contains a heap out-of-bounds read vulnerability in the IMF_Load() loader that allows attackers to read beyond allocated memory by supplying a crafted IMF module. Attackers can enable the linear-period header flag and map notes to out-of-range samples, causing noteindex…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,2 % · rekomendacja wg zapisanej polityki
WildMIDI through 0.5.0 contains a heap out-of-bounds read vulnerability in _WM_ParseNewHmi() in src/f_hmi.c that reads past buffers when handling 0xfe sub-events. Attackers can supply a crafted HMI file placing a 0xfe 0x10 sub-event near the buffer end to read up to four bytes past the allocation,…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,2 % · rekomendacja wg zapisanej polityki
Assimp through 6.0.5 contains a NULL pointer dereference vulnerability in the Ogre3D importer that allows attackers to crash applications via unvalidated bone indices in OgreStructs.cpp. Attackers can supply a crafted .mesh and .skeleton file referencing a missing bone, causing BoneById() to…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,2 % · rekomendacja wg zapisanej polityki
The Mobile builder WordPress plugin through 1.4.2 does not sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks on sites that also run the WCFM Delivery add-on.
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
The WX Subscribe 微信支付付费订阅 WordPress plugin through 1.2.1 does not sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated attackers to perform SQL injection attacks on installs where the payment key has not been configured.
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,18 % · rekomendacja wg zapisanej polityki
OW2 ASM 3.0 before 9.11 contains an uncontrolled recursion vulnerability in SignatureReader.parseType() that allows attackers to exhaust the stack via deeply nested generic type signatures. Attackers can supply a crafted class file with a long Signature attribute containing many nested type…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
CVSS
6,8
EPSS
0,17 %
Poprawka
Status poprawki nieustalony
Publikacja
Aktualizacja NVD
Podatności: opis, rekomendacja, CVSS, EPSS i daty źródłowe. Rekomendacja nie potwierdza podatności własnego zasobu.
The Donation Thermometer WordPress plugin before 2.3.0 does not escape a colour value taken from a shortcode attribute before using it in an attribute of the generated legend markup, allowing users with the Contributor role and above to inject arbitrary event handlers that execute when the page is…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
The Pricing Table WordPress plugin before 2.1.5 does not validate the scheme of a user-supplied link value in one of its blocks before rendering it, allowing users with contributor-level access and above to store malicious scripts that execute when another user views and interacts with the…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
The Gutenverse Form WordPress plugin before 3.0.11 does not sanitize SVG icon markup stored in its form blocks before it is decoded and inserted into the page in the browser, allowing authenticated users with Contributor-level access and above to store malicious SVG that executes JavaScript in…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.15 does not sanitize or escape gallery configuration values before echoing them into an inline script on every page that embeds the gallery, allowing users with contributor-level access and above to store JavaScript that executes…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
The Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories WordPress plugin before 4.10.6 does not enforce a safe HTML-element allowlist on a shortcode attribute and does not neutralise attacker-controlled text placed inside the resulting…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
The WP Testimonials WordPress plugin through 1.4.13 does not properly escape testimonial content and reverses WordPress's HTML sanitization when rendering it, allowing users with the Author role and above to store JavaScript that executes in the session of any user viewing the testimonials,…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,3 % · rekomendacja wg zapisanej polityki
The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape some of its image settings before outputting them in a gallery page, allowing users with the Author role and above to perform Stored Cross-Site Scripting attacks that execute in the browser of any visitor viewing the…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape image alt text before outputting it in one of its gallery layouts, allowing users with the Author role and above to perform Stored Cross-Site Scripting attacks that execute in the browser of any user viewing the affected…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape a gallery setting before outputting it on a frontend page, allowing users with the Author role and above to perform Stored Cross-Site Scripting attacks that execute in the browser of any visitor viewing a gallery,…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape some of its gallery settings before outputting them on the gallery edit screen, allowing users with the Contributor role and above to store JavaScript that executes in the context of an administrator who opens the gallery…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
The Post Snippets WordPress plugin through 4.2.4 does not properly escape variable values substituted into snippets before outputting them, allowing users with the Contributor role and above to inject arbitrary web scripts that execute when the content is viewed.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
The CC1200 sub-GHz IEEE 802.15.4 driver takes the PHY packet length from the first byte of the radio's RX FIFO in get_packet_length() and validates it in verify_rxfifo_validity() (drivers/ieee802154/ieee802154_cc1200.c). That validation only enforced a lower bound (pkt_len < 3); its second clause…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
A flaw was found in the Client-Initiated Backchannel Authentication CIBA implementation within the keycloak-services component of Keycloak. This component handles advanced authentication flows where a client initiates a login on behalf of a user. The issue occurs because Keycloak fails to verify…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,25 % · rekomendacja wg zapisanej polityki
xlsxio through 0.2.37 contains a NULL pointer dereference vulnerability in main_sheet_get_sheetfile_expat_callback_element_start() in lib/xlsxio_read.c that allows attackers to crash applications via crafted files. Attackers can supply a .xlsx file whose workbook.xml.rels contains a worksheet…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
L-SMASH through 2.14.5 contains an infinite loop vulnerability in vc1_importer_probe() in importer/vc1_imp.c that allows attackers to hang applications via crafted input files. Attackers can supply a file consisting only of zero bytes, which lsmash_read_file() probes automatically, causing…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.16.0, FileRise stores the isAdmin flag in remember-me tokens and restores that stale value during automatic login instead of resolving the account's current role from users.txt. A…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
Distribution is a toolkit to pack, ship, store, and deliver container content. Prior to 3.1.2, registry/client.(*manifests).Get() reads a manifest returned for a digest-pinned request and passes it to distribution.UnmarshalManifest without hashing the body against the requested digest, allowing a…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,21 % · rekomendacja wg zapisanej polityki
BentoPDF is a privacy-focused PDF toolkit that runs in the browser. In versions through 2.8.6, cloudflare/cors-proxy-worker.js performs a DNS-over-HTTPS safety check in hostnameResolvesToPrivate(), as used by isValidCertificateUrl() and isValidTsaUrl(), separately from the outbound…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,2 % · rekomendacja wg zapisanej polityki
libmikmod through 3.3.15 contains a heap out-of-bounds read vulnerability in the IMF_Load() loader that allows attackers to read beyond allocated memory by supplying a crafted IMF module. Attackers can enable the linear-period header flag and map notes to out-of-range samples, causing noteindex…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,2 % · rekomendacja wg zapisanej polityki
WildMIDI through 0.5.0 contains a heap out-of-bounds read vulnerability in _WM_ParseNewHmi() in src/f_hmi.c that reads past buffers when handling 0xfe sub-events. Attackers can supply a crafted HMI file placing a 0xfe 0x10 sub-event near the buffer end to read up to four bytes past the allocation,…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,2 % · rekomendacja wg zapisanej polityki
Assimp through 6.0.5 contains a NULL pointer dereference vulnerability in the Ogre3D importer that allows attackers to crash applications via unvalidated bone indices in OgreStructs.cpp. Attackers can supply a crafted .mesh and .skeleton file referencing a missing bone, causing BoneById() to…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,2 % · rekomendacja wg zapisanej polityki
The Mobile builder WordPress plugin through 1.4.2 does not sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks on sites that also run the WCFM Delivery add-on.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
The WX Subscribe 微信支付付费订阅 WordPress plugin through 1.2.1 does not sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated attackers to perform SQL injection attacks on installs where the payment key has not been configured.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,18 % · rekomendacja wg zapisanej polityki
OW2 ASM 3.0 before 9.11 contains an uncontrolled recursion vulnerability in SignatureReader.parseType() that allows attackers to exhaust the stack via deeply nested generic type signatures. Attackers can supply a crafted class file with a long Signature attribute containing many nested type…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
6,8
0,17 %
Publikacja
Aktualizacja NVD
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.