Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Data publikacji: ostatnie 7 dni. Starsze wpisy dostępne w pełnym katalogu i widoku KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Aureus ERP through 1.6.0 contains an authorization bypass vulnerability that allows unauthenticated attackers to read unpublished draft blog posts via the customer-facing post view page. Attackers who know or guess a post slug can retrieve the full title, content, image, tags, author and publish…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,36 % · rekomendacja wg zapisanej polityki
n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains an authentication bypass because dynamic-path webhook resolution matched requests on the path alone, ignoring the server-generated identifier that is the URL's only unguessable component. Unauthenticated attackers can omit…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,36 % · rekomendacja wg zapisanej polityki
ImageMagick 7.1.1-31 before 7.1.2-32 contains a NULL pointer dereference in the PostScript decoder that is triggered when a policy limit is reached. Attackers can supply a crafted PostScript file for processing to crash the application, causing a denial of service.
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,35 % · rekomendacja wg zapisanej polityki
Web3.py 7.15.0 through 7.16.0 and 8.0.0b2 through 8.0.0 contains a server-side request forgery vulnerability because _check_ip_blocked() does not unwrap IPv4-mapped IPv6 addresses in CCIP Read URL validation. Malicious contracts can return OffchainLookup URLs with IPv4-mapped IPv6 hosts or AAAA…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a code injection vulnerability in the MVG decoder when a PostScript renderer is used. Attackers can supply a crafted MVG file that, when decoded, injects code into the PostScript rendering path.
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
Lancet through 2.3.9 contains an SSRF protection bypass vulnerability in netutil.IsInternalIP that misclassifies IPv6 private, link-local, CGNAT and transition addresses as external. Attackers can supply hostnames resolving to these address forms, including NAT64, 6to4 or Teredo embedding internal…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,33 % · rekomendacja wg zapisanej polityki
A security vulnerability has been detected in Praat up to 7.0.02. Affected is the function whisper_model_load of the file external/whispercpp/whisper.cpp of the component Model Loader. The manipulation of the argument n_dims leads to out-of-bounds write. The attack can be initiated remotely. The…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,33 % · rekomendacja wg zapisanej polityki
Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_typescript allows an unauthenticated attacker to read internal Elixir terms from an RPC error response by provoking an error the error builder has no dedicated clause…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
### Summary
`qs.stringify` with `arrayFormat: 'comma'` throws `TypeError: Cannot convert object to primitive value` when an array element cannot be coerced to a string, such as an object with an own non-callable `toString` (`{ "toString": "x" }`) or a null-prototype object. The comma format…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,3 % · rekomendacja wg zapisanej polityki
A cross-site scripting (XSS) vulnerability has been reported to affect QuFTP Service. If a remote attacker gains a user account, they can then exploit the vulnerability to inject malicious code.
We have already fixed the vulnerability in the following version:
QuFTP Service 1.4.6 and later
QuFTP…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
A user with query access to an Azure Monitor data source can use its resource proxy to call Azure Resource Manager APIs beyond those Grafana needs, with the data source's Azure identity (unintended proxy). The impact is bounded by the Azure role granted to that identity.
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
An authentication bypass vulnerability in the listed NETGEAR RAX series models allows an unauthenticated attacker with adjacent access to the affected device’s management service to access certain device information or modify administrative settings. This vulnerability may impact the…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,25 % · rekomendacja wg zapisanej polityki
Frappe before 14.99.2 and 15.x before 15.86.0 contains an LDAP injection vulnerability because certain endpoints do not sanitize user-supplied parameters before using them in LDAP queries. Attackers can supply crafted LDAP filter syntax through these parameters to alter the resulting directory…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,25 % · rekomendacja wg zapisanej polityki
bbPress before 2.6.19 contains an information disclosure vulnerability that allows unauthenticated visitors to view restricted subforum posts because hide_sitewide ignores ancestor forum visibility. Topics and replies in public subforums nested under private or hidden parents expose title,…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
An insufficient input validation vulnerability in the website blocking feature (Block Sites) of the listed NETGEAR router models allows a network-adjacent attacker having network access (such as WiFi credentials) to run unauthorized commands on the router. This vulnerability could affect the…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
Parse Server 8.2.2 before 8.6.94 and 9.0.0 before 9.10.1-alpha.14 applies its GraphQL introspection control only to operation text sent directly with a request, not to operations resolved from Apollo Server's automatic persisted query cache. Unauthenticated attackers holding the public Application…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
QloApps through 1.7.0 contains an insecure direct object reference vulnerability in back-office AJAX handlers of AdminOrdersController, AdminBookingDocumentController, AdminProductsController and AdminAddHotelController that skip htl_access hotel checks. Hotel-restricted employees can supply other…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,21 % · rekomendacja wg zapisanej polityki
Speedtest Tracker through 1.15.0 contains an IP allowlist bypass vulnerability that allows unauthenticated remote attackers to evade ALLOWED_IPS and Prometheus allowlists by spoofing X-Forwarded-For headers. Because bootstrap/app.php trusts every peer as a proxy, attackers can supply an…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,21 % · rekomendacja wg zapisanej polityki
LogicalDOC Community Edition through 9.3 contains an improper authorization vulnerability in the PswRecovery servlet that fails to bind password recovery tickets to the requesting user. Attackers can obtain a ticket for their own account and reuse it with any userId, including administrators, to…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,2 % · rekomendacja wg zapisanej polityki
AliasVault is a privacy-first password manager with built-in email aliasing. Prior to 0.30.3, the AliasVault server API favicon extractor validates a user-supplied hostname with a first DNS lookup but allows the HTTP client to perform a second DNS lookup when connecting. An authenticated…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
A vulnerability has been identified within Fleet where, by default, Fleet will automatically trust a remote server’s certificate when connecting through SSH if the certificate isn’t set in the `known_hosts` file. This could allow the execution of a man-in-the-middle (MitM) attack against Fleet. In…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
The AVDTP signalling layer arms a 6-second command timeout (AVDTP_TIMEOUT) in avdtp_send_cmd() whenever the local device issues an AVDTP request. Every response handler in subsys/bluetooth/host/classic/avdtp.c cancels session->timeout_work before clearing the pending request, but…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,18 % · rekomendacja wg zapisanej polityki
libsixel before 1.8.7-r1 and 1.9.0 through 1.10.5 contains a heap out-of-bounds write vulnerability in gif_init_frame() in src/fromgif.c, which never checks the GIF transparent color index against the palette size. Attackers can supply a crafted GIF with a small color table and large transparent…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.3, Nginx UI validates an automatic backup's storage_path, but AutoBackup.GetName returns a user-controlled name without rejecting path separators or parent-directory components, and downstream filename formatting embeds that…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
CVSS
6,3
EPSS
0,17 %
Poprawka
Status poprawki nieustalony
Publikacja
Aktualizacja NVD
Podatności: opis, rekomendacja, CVSS, EPSS i daty źródłowe. Rekomendacja nie potwierdza podatności własnego zasobu.
Aureus ERP through 1.6.0 contains an authorization bypass vulnerability that allows unauthenticated attackers to read unpublished draft blog posts via the customer-facing post view page. Attackers who know or guess a post slug can retrieve the full title, content, image, tags, author and publish…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,36 % · rekomendacja wg zapisanej polityki
n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains an authentication bypass because dynamic-path webhook resolution matched requests on the path alone, ignoring the server-generated identifier that is the URL's only unguessable component. Unauthenticated attackers can omit…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,36 % · rekomendacja wg zapisanej polityki
ImageMagick 7.1.1-31 before 7.1.2-32 contains a NULL pointer dereference in the PostScript decoder that is triggered when a policy limit is reached. Attackers can supply a crafted PostScript file for processing to crash the application, causing a denial of service.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,35 % · rekomendacja wg zapisanej polityki
Web3.py 7.15.0 through 7.16.0 and 8.0.0b2 through 8.0.0 contains a server-side request forgery vulnerability because _check_ip_blocked() does not unwrap IPv4-mapped IPv6 addresses in CCIP Read URL validation. Malicious contracts can return OffchainLookup URLs with IPv4-mapped IPv6 hosts or AAAA…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a code injection vulnerability in the MVG decoder when a PostScript renderer is used. Attackers can supply a crafted MVG file that, when decoded, injects code into the PostScript rendering path.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
Lancet through 2.3.9 contains an SSRF protection bypass vulnerability in netutil.IsInternalIP that misclassifies IPv6 private, link-local, CGNAT and transition addresses as external. Attackers can supply hostnames resolving to these address forms, including NAT64, 6to4 or Teredo embedding internal…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,33 % · rekomendacja wg zapisanej polityki
A security vulnerability has been detected in Praat up to 7.0.02. Affected is the function whisper_model_load of the file external/whispercpp/whisper.cpp of the component Model Loader. The manipulation of the argument n_dims leads to out-of-bounds write. The attack can be initiated remotely. The…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,33 % · rekomendacja wg zapisanej polityki
Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_typescript allows an unauthenticated attacker to read internal Elixir terms from an RPC error response by provoking an error the error builder has no dedicated clause…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
### Summary
`qs.stringify` with `arrayFormat: 'comma'` throws `TypeError: Cannot convert object to primitive value` when an array element cannot be coerced to a string, such as an object with an own non-callable `toString` (`{ "toString": "x" }`) or a null-prototype object. The comma format…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,3 % · rekomendacja wg zapisanej polityki
A cross-site scripting (XSS) vulnerability has been reported to affect QuFTP Service. If a remote attacker gains a user account, they can then exploit the vulnerability to inject malicious code.
We have already fixed the vulnerability in the following version:
QuFTP Service 1.4.6 and later
QuFTP…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
A user with query access to an Azure Monitor data source can use its resource proxy to call Azure Resource Manager APIs beyond those Grafana needs, with the data source's Azure identity (unintended proxy). The impact is bounded by the Azure role granted to that identity.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
An authentication bypass vulnerability in the listed NETGEAR RAX series models allows an unauthenticated attacker with adjacent access to the affected device’s management service to access certain device information or modify administrative settings. This vulnerability may impact the…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,25 % · rekomendacja wg zapisanej polityki
Frappe before 14.99.2 and 15.x before 15.86.0 contains an LDAP injection vulnerability because certain endpoints do not sanitize user-supplied parameters before using them in LDAP queries. Attackers can supply crafted LDAP filter syntax through these parameters to alter the resulting directory…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,25 % · rekomendacja wg zapisanej polityki
bbPress before 2.6.19 contains an information disclosure vulnerability that allows unauthenticated visitors to view restricted subforum posts because hide_sitewide ignores ancestor forum visibility. Topics and replies in public subforums nested under private or hidden parents expose title,…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
An insufficient input validation vulnerability in the website blocking feature (Block Sites) of the listed NETGEAR router models allows a network-adjacent attacker having network access (such as WiFi credentials) to run unauthorized commands on the router. This vulnerability could affect the…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
Parse Server 8.2.2 before 8.6.94 and 9.0.0 before 9.10.1-alpha.14 applies its GraphQL introspection control only to operation text sent directly with a request, not to operations resolved from Apollo Server's automatic persisted query cache. Unauthenticated attackers holding the public Application…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
QloApps through 1.7.0 contains an insecure direct object reference vulnerability in back-office AJAX handlers of AdminOrdersController, AdminBookingDocumentController, AdminProductsController and AdminAddHotelController that skip htl_access hotel checks. Hotel-restricted employees can supply other…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,21 % · rekomendacja wg zapisanej polityki
Speedtest Tracker through 1.15.0 contains an IP allowlist bypass vulnerability that allows unauthenticated remote attackers to evade ALLOWED_IPS and Prometheus allowlists by spoofing X-Forwarded-For headers. Because bootstrap/app.php trusts every peer as a proxy, attackers can supply an…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,21 % · rekomendacja wg zapisanej polityki
LogicalDOC Community Edition through 9.3 contains an improper authorization vulnerability in the PswRecovery servlet that fails to bind password recovery tickets to the requesting user. Attackers can obtain a ticket for their own account and reuse it with any userId, including administrators, to…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,2 % · rekomendacja wg zapisanej polityki
AliasVault is a privacy-first password manager with built-in email aliasing. Prior to 0.30.3, the AliasVault server API favicon extractor validates a user-supplied hostname with a first DNS lookup but allows the HTTP client to perform a second DNS lookup when connecting. An authenticated…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
A vulnerability has been identified within Fleet where, by default, Fleet will automatically trust a remote server’s certificate when connecting through SSH if the certificate isn’t set in the `known_hosts` file. This could allow the execution of a man-in-the-middle (MitM) attack against Fleet. In…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
The AVDTP signalling layer arms a 6-second command timeout (AVDTP_TIMEOUT) in avdtp_send_cmd() whenever the local device issues an AVDTP request. Every response handler in subsys/bluetooth/host/classic/avdtp.c cancels session->timeout_work before clearing the pending request, but…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,18 % · rekomendacja wg zapisanej polityki
libsixel before 1.8.7-r1 and 1.9.0 through 1.10.5 contains a heap out-of-bounds write vulnerability in gif_init_frame() in src/fromgif.c, which never checks the GIF transparent color index against the palette size. Attackers can supply a crafted GIF with a small color table and large transparent…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.3, Nginx UI validates an automatic backup's storage_path, but AutoBackup.GetName returns a user-controlled name without rejecting path separators or parent-directory components, and downstream filename formatting embeds that…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
6,3
0,17 %
Publikacja
Aktualizacja NVD
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.