Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Data publikacji: ostatnie 7 dni. Starsze wpisy dostępne w pełnym katalogu i widoku KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains an authentication bypass because dynamic-path webhook resolution matched requests on the path alone, ignoring the server-generated identifier that is the URL's only unguessable component. Unauthenticated attackers can omit…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,36 % · rekomendacja wg zapisanej polityki
ImageMagick 7.1.1-31 before 7.1.2-32 contains a NULL pointer dereference in the PostScript decoder that is triggered when a policy limit is reached. Attackers can supply a crafted PostScript file for processing to crash the application, causing a denial of service.
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,35 % · rekomendacja wg zapisanej polityki
Web3.py 7.15.0 through 7.16.0 and 8.0.0b2 through 8.0.0 contains a server-side request forgery vulnerability because _check_ip_blocked() does not unwrap IPv4-mapped IPv6 addresses in CCIP Read URL validation. Malicious contracts can return OffchainLookup URLs with IPv4-mapped IPv6 hosts or AAAA…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a code injection vulnerability in the MVG decoder when a PostScript renderer is used. Attackers can supply a crafted MVG file that, when decoded, injects code into the PostScript rendering path.
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
Lancet through 2.3.9 contains an SSRF protection bypass vulnerability in netutil.IsInternalIP that misclassifies IPv6 private, link-local, CGNAT and transition addresses as external. Attackers can supply hostnames resolving to these address forms, including NAT64, 6to4 or Teredo embedding internal…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,33 % · rekomendacja wg zapisanej polityki
A security vulnerability has been detected in Praat up to 7.0.02. Affected is the function whisper_model_load of the file external/whispercpp/whisper.cpp of the component Model Loader. The manipulation of the argument n_dims leads to out-of-bounds write. The attack can be initiated remotely. The…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,33 % · rekomendacja wg zapisanej polityki
Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_typescript allows an unauthenticated attacker to read internal Elixir terms from an RPC error response by provoking an error the error builder has no dedicated clause…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
### Summary
`qs.stringify` with `arrayFormat: 'comma'` throws `TypeError: Cannot convert object to primitive value` when an array element cannot be coerced to a string, such as an object with an own non-callable `toString` (`{ "toString": "x" }`) or a null-prototype object. The comma format…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,3 % · rekomendacja wg zapisanej polityki
A cross-site scripting (XSS) vulnerability has been reported to affect QuFTP Service. If a remote attacker gains a user account, they can then exploit the vulnerability to inject malicious code.
We have already fixed the vulnerability in the following version:
QuFTP Service 1.4.6 and later
QuFTP…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
An authentication bypass vulnerability in the listed NETGEAR RAX series models allows an unauthenticated attacker with adjacent access to the affected device’s management service to access certain device information or modify administrative settings. This vulnerability may impact the…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
A user with query access to an Azure Monitor data source can use its resource proxy to call Azure Resource Manager APIs beyond those Grafana needs, with the data source's Azure identity (unintended proxy). The impact is bounded by the Azure role granted to that identity.
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
ip-address before 10.7.4 allows a denial of service (CPU consumption from quadratic complexity, and application stall) via many % characters in input reaching a function call that uses the Address6 constructor.
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,25 % · rekomendacja wg zapisanej polityki
FastBee through 2.1.0 contains an insecure direct object reference vulnerability that allows authenticated low-privilege users to access other users' device groups because GroupController queries lack owner checks. Attackers, including self-registered users, can supply sequential group IDs to…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,25 % · rekomendacja wg zapisanej polityki
Frappe before 14.99.2 and 15.x before 15.86.0 contains an LDAP injection vulnerability because certain endpoints do not sanitize user-supplied parameters before using them in LDAP queries. Attackers can supply crafted LDAP filter syntax through these parameters to alter the resulting directory…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,25 % · rekomendacja wg zapisanej polityki
A vulnerability was determined in datastax pulsar-jms up to 9.0.3. This issue affects the function decode of the file pulsar-jms/src/main/java/com/datastax/oss/pulsar/jms/messages/PulsarObjectMessage.java. This manipulation causes deserialization. It is possible to initiate the attack remotely.…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,25 % · rekomendacja wg zapisanej polityki
An insufficient input validation vulnerability in the website blocking feature (Block Sites) of the listed NETGEAR router models allows a network-adjacent attacker having network access (such as WiFi credentials) to run unauthorized commands on the router. This vulnerability could affect the…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
bbPress before 2.6.19 contains an information disclosure vulnerability that allows unauthenticated visitors to view restricted subforum posts because hide_sitewide ignores ancestor forum visibility. Topics and replies in public subforums nested under private or hidden parents expose title,…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
Parse Server 8.2.2 before 8.6.94 and 9.0.0 before 9.10.1-alpha.14 applies its GraphQL introspection control only to operation text sent directly with a request, not to operations resolved from Apollo Server's automatic persisted query cache. Unauthenticated attackers holding the public Application…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
FreeRDP 3.0.0 before 3.32.0 allows HTTP header injection in its proxy because a lone LF in the target portion of a routing token (Cookie: msts=) is not rejected and is written by http_proxy_connect into the CONNECT request line and Host header. A remote unauthenticated RDP client connecting to a…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
SGLang through 0.5.21 trusts caller-supplied mm_hashes values as the multimodal prefix-cache key, allowing remote attackers to poison cached KV entries across requests. Attackers can send a different image under a known or predicted hash via /generate to disclose another request's image content or…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,21 % · rekomendacja wg zapisanej polityki
AliasVault is a privacy-first password manager with built-in email aliasing. Prior to 0.30.3, the AliasVault server API favicon extractor validates a user-supplied hostname with a first DNS lookup but allows the HTTP client to perform a second DNS lookup when connecting. An authenticated…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
A vulnerability has been identified within Fleet where, by default, Fleet will automatically trust a remote server’s certificate when connecting through SSH if the certificate isn’t set in the `known_hosts` file. This could allow the execution of a man-in-the-middle (MitM) attack against Fleet. In…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
The AVDTP signalling layer arms a 6-second command timeout (AVDTP_TIMEOUT) in avdtp_send_cmd() whenever the local device issues an AVDTP request. Every response handler in subsys/bluetooth/host/classic/avdtp.c cancels session->timeout_work before clearing the pending request, but…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,18 % · rekomendacja wg zapisanej polityki
libsixel before 1.8.7-r1 and 1.9.0 through 1.10.5 contains a heap out-of-bounds write vulnerability in gif_init_frame() in src/fromgif.c, which never checks the GIF transparent color index against the palette size. Attackers can supply a crafted GIF with a small color table and large transparent…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
CVSS
6,3
EPSS
0,17 %
Poprawka
Status poprawki nieustalony
Publikacja
Aktualizacja NVD
Podatności: opis, rekomendacja, CVSS, EPSS i daty źródłowe. Rekomendacja nie potwierdza podatności własnego zasobu.
n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains an authentication bypass because dynamic-path webhook resolution matched requests on the path alone, ignoring the server-generated identifier that is the URL's only unguessable component. Unauthenticated attackers can omit…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,36 % · rekomendacja wg zapisanej polityki
ImageMagick 7.1.1-31 before 7.1.2-32 contains a NULL pointer dereference in the PostScript decoder that is triggered when a policy limit is reached. Attackers can supply a crafted PostScript file for processing to crash the application, causing a denial of service.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,35 % · rekomendacja wg zapisanej polityki
Web3.py 7.15.0 through 7.16.0 and 8.0.0b2 through 8.0.0 contains a server-side request forgery vulnerability because _check_ip_blocked() does not unwrap IPv4-mapped IPv6 addresses in CCIP Read URL validation. Malicious contracts can return OffchainLookup URLs with IPv4-mapped IPv6 hosts or AAAA…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a code injection vulnerability in the MVG decoder when a PostScript renderer is used. Attackers can supply a crafted MVG file that, when decoded, injects code into the PostScript rendering path.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
Lancet through 2.3.9 contains an SSRF protection bypass vulnerability in netutil.IsInternalIP that misclassifies IPv6 private, link-local, CGNAT and transition addresses as external. Attackers can supply hostnames resolving to these address forms, including NAT64, 6to4 or Teredo embedding internal…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,33 % · rekomendacja wg zapisanej polityki
A security vulnerability has been detected in Praat up to 7.0.02. Affected is the function whisper_model_load of the file external/whispercpp/whisper.cpp of the component Model Loader. The manipulation of the argument n_dims leads to out-of-bounds write. The attack can be initiated remotely. The…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,33 % · rekomendacja wg zapisanej polityki
Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_typescript allows an unauthenticated attacker to read internal Elixir terms from an RPC error response by provoking an error the error builder has no dedicated clause…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
### Summary
`qs.stringify` with `arrayFormat: 'comma'` throws `TypeError: Cannot convert object to primitive value` when an array element cannot be coerced to a string, such as an object with an own non-callable `toString` (`{ "toString": "x" }`) or a null-prototype object. The comma format…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,3 % · rekomendacja wg zapisanej polityki
A cross-site scripting (XSS) vulnerability has been reported to affect QuFTP Service. If a remote attacker gains a user account, they can then exploit the vulnerability to inject malicious code.
We have already fixed the vulnerability in the following version:
QuFTP Service 1.4.6 and later
QuFTP…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
An authentication bypass vulnerability in the listed NETGEAR RAX series models allows an unauthenticated attacker with adjacent access to the affected device’s management service to access certain device information or modify administrative settings. This vulnerability may impact the…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
A user with query access to an Azure Monitor data source can use its resource proxy to call Azure Resource Manager APIs beyond those Grafana needs, with the data source's Azure identity (unintended proxy). The impact is bounded by the Azure role granted to that identity.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
ip-address before 10.7.4 allows a denial of service (CPU consumption from quadratic complexity, and application stall) via many % characters in input reaching a function call that uses the Address6 constructor.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,25 % · rekomendacja wg zapisanej polityki
FastBee through 2.1.0 contains an insecure direct object reference vulnerability that allows authenticated low-privilege users to access other users' device groups because GroupController queries lack owner checks. Attackers, including self-registered users, can supply sequential group IDs to…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,25 % · rekomendacja wg zapisanej polityki
Frappe before 14.99.2 and 15.x before 15.86.0 contains an LDAP injection vulnerability because certain endpoints do not sanitize user-supplied parameters before using them in LDAP queries. Attackers can supply crafted LDAP filter syntax through these parameters to alter the resulting directory…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,25 % · rekomendacja wg zapisanej polityki
A vulnerability was determined in datastax pulsar-jms up to 9.0.3. This issue affects the function decode of the file pulsar-jms/src/main/java/com/datastax/oss/pulsar/jms/messages/PulsarObjectMessage.java. This manipulation causes deserialization. It is possible to initiate the attack remotely.…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,25 % · rekomendacja wg zapisanej polityki
An insufficient input validation vulnerability in the website blocking feature (Block Sites) of the listed NETGEAR router models allows a network-adjacent attacker having network access (such as WiFi credentials) to run unauthorized commands on the router. This vulnerability could affect the…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
bbPress before 2.6.19 contains an information disclosure vulnerability that allows unauthenticated visitors to view restricted subforum posts because hide_sitewide ignores ancestor forum visibility. Topics and replies in public subforums nested under private or hidden parents expose title,…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
Parse Server 8.2.2 before 8.6.94 and 9.0.0 before 9.10.1-alpha.14 applies its GraphQL introspection control only to operation text sent directly with a request, not to operations resolved from Apollo Server's automatic persisted query cache. Unauthenticated attackers holding the public Application…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
FreeRDP 3.0.0 before 3.32.0 allows HTTP header injection in its proxy because a lone LF in the target portion of a routing token (Cookie: msts=) is not rejected and is written by http_proxy_connect into the CONNECT request line and Host header. A remote unauthenticated RDP client connecting to a…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
SGLang through 0.5.21 trusts caller-supplied mm_hashes values as the multimodal prefix-cache key, allowing remote attackers to poison cached KV entries across requests. Attackers can send a different image under a known or predicted hash via /generate to disclose another request's image content or…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,21 % · rekomendacja wg zapisanej polityki
AliasVault is a privacy-first password manager with built-in email aliasing. Prior to 0.30.3, the AliasVault server API favicon extractor validates a user-supplied hostname with a first DNS lookup but allows the HTTP client to perform a second DNS lookup when connecting. An authenticated…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
A vulnerability has been identified within Fleet where, by default, Fleet will automatically trust a remote server’s certificate when connecting through SSH if the certificate isn’t set in the `known_hosts` file. This could allow the execution of a man-in-the-middle (MitM) attack against Fleet. In…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
The AVDTP signalling layer arms a 6-second command timeout (AVDTP_TIMEOUT) in avdtp_send_cmd() whenever the local device issues an AVDTP request. Every response handler in subsys/bluetooth/host/classic/avdtp.c cancels session->timeout_work before clearing the pending request, but…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,18 % · rekomendacja wg zapisanej polityki
libsixel before 1.8.7-r1 and 1.9.0 through 1.10.5 contains a heap out-of-bounds write vulnerability in gif_init_frame() in src/fromgif.c, which never checks the GIF transparent color index against the palette size. Attackers can supply a crafted GIF with a small color table and large transparent…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
6,3
0,17 %
Publikacja
Aktualizacja NVD
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.