Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Data publikacji: ostatnie 7 dni. Starsze wpisy dostępne w pełnym katalogu i widoku KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain a cross-site scripting vulnerability that could allow a remote attacker to execute script in the context of an authenticated user's browser session, which could result in unauthorized actions or…
Opis źródłowy NVD · ENCVSS 6,1 · EPSS 0,2 % · rekomendacja wg zapisanej polityki
The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to DOM-Based Cross-Site Scripting via the 'redirect_url' parameter in versions up to, and including, 4.0.8 This is due to insufficient input validation in the Topbar component's back button handler. This makes…
Opis źródłowy NVD · ENCVSS 6,1 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
The unstructured library provides open-source components for ingesting and pre-processing images and text documents, such as PDFs, HTML, Word docs, and many more. Prior to 0.24.1, partition_html(html_parser_version="v2") and the VLM partitioner can preserve untrusted document tags, attributes,…
Opis źródłowy NVD · ENCVSS 6,1 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
Thelia v2.6.0 contains an open redirect vulnerability in its address creation workflow. After a user accesses a crafted URL and successfully submits the “Add New Address” form, the application redirects them to the URL specified in the `next` parameter. Because the application does not validate…
Opis źródłowy NVD · ENCVSS 6,1 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
User-controlled values are not sufficiently neutralized when included in CSV exports. Values originating from user input, including data submitted by authenticated users or received through external communication channels such as email, may be stored in fields that are later included in CSV…
Opis źródłowy NVD · ENCVSS 6,1 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the PageTitle/Notes parameter in the Notes.aspx endpoint.
Opis źródłowy NVD · ENCVSS 6,1 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
IBM DB2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 uses a web link with untrusted references to an external site. A remote attacker could exploit this vulnerability to expose sensitive information or perform unauthorized actions on the victims’ web browser
Opis źródłowy NVD · ENCVSS 6,1 · EPSS 0,18 % · rekomendacja wg zapisanej polityki
libzvbi through 0.2.45 contains an out-of-bounds write vulnerability in the Teletext decoder that allows attackers to corrupt memory by supplying unvalidated DRCS pixel-mode values in X/28/3 packets. Attackers can send a crafted Teletext stream decoded via vbi_decode with every slot set to…
Opis źródłowy NVD · ENCVSS 6,1 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
Dell PowerScale InsightIQ, versions 5.2.0 through 6.3.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Denial of service.
Opis źródłowy NVD · ENCVSS 6,1 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject malicious scripts into a URL parameter. The scripts are reflected in the server response and executed in a user's browser when the crafted URL is visited, leading to theft of session information, manipulation of portal…
Opis źródłowy NVD · ENCVSS 6,1 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
Due to a DOM-Based Cross-Site Scripting (XSS) vulnerability, an unauthenticated attacker could generate a malicious link and make it publicly accessible. If an authenticated user accesses this link, client-side code reads the attacker-controlled input and writes it into the DOM without proper…
Opis źródłowy NVD · ENCVSS 6,1 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
IBM Db2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a…
Opis źródłowy NVD · ENCVSS 6,1 · EPSS 0,16 % · rekomendacja wg zapisanej polityki
IBM Db2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a…
Opis źródłowy NVD · ENCVSS 6,1 · EPSS 0,16 % · rekomendacja wg zapisanej polityki
IBM DB2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a…
Opis źródłowy NVD · ENCVSS 6,1 · EPSS 0,16 % · rekomendacja wg zapisanej polityki
A flaw was found in the GStreamer multimedia framework's ASF muxer plugin (asfmux). When writing string metadata tags containing Unicode characters outside the Basic Multilingual Plane (such as emoji) to an ASF container, the plugin incorrectly calculates the buffer size needed for the UTF-16LE…
Opis źródłowy NVD · ENCVSS 6,1 · EPSS 0,15 % · rekomendacja wg zapisanej polityki
Thelia v2.6.0's Smarty templates (address.html and address-update.html) fail to properly escape double quotes in the “next” parameter, enabling reflected Cross‑Site Scripting (XSS) when an authenticated user visits the malicious link containing attacker‑controlled JavaScript.
Opis źródłowy NVD · ENCVSS 6,1 · EPSS 0,15 % · rekomendacja wg zapisanej polityki
SAP NetWeaver Enterprise Portal does not sufficiently validate input to a certain portal component. An unauthenticated attacker could craft a malicious link that, when clicked by a victim, loads attacker-controlled content within the trusted application context. Successful exploitation could allow…
Opis źródłowy NVD · ENCVSS 6,1 · EPSS 0,15 % · rekomendacja wg zapisanej polityki
AdPlug through 2.4 contains a heap-based buffer overflow in CksmPlayer::update() in src/ksm.cpp that writes past the fixed databuf[2048] array without bounds checking. Attackers can supply a crafted .ksm module whose notes share one time slot to overflow the heap player object, causing memory…
Opis źródłowy NVD · ENCVSS 6,1 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
nifti_clib through 3.0.1 contains a stack-based out-of-bounds read and write vulnerability in nifti_convert_n2hdr2nim() because the NIfTI-2 dim[0] value is never range-checked. Attackers can supply a crafted 540-byte NIfTI-2 header read via nifti_image_read() to crash applications or corrupt stack…
Opis źródłowy NVD · ENCVSS 6,1 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
libmodplug through 0.8.9.1 contains a heap-based out-of-bounds write in CSoundFile::ReadDSM() in src/load_dsm.cpp because nPat is never checked against MAX_PATTERNS. Attackers can supply a crafted DSM file with over 240 PATT chunks or a wrapping patt_len value to corrupt heap memory and crash the…
Opis źródłowy NVD · ENCVSS 6,1 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
libTiMidity through 0.2.8 contains a stack out-of-bounds write vulnerability in the SoundFont loader that allows attackers to corrupt stack memory via unchecked generator operators in parse_gen. Attackers can supply a crafted .sf2 file with out-of-range pgen/igen operator values to write chosen…
Opis źródłowy NVD · ENCVSS 6,1 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
libical through 4.0.6 contains a heap-based out-of-bounds read in icalvalue_decode_ical_string() in src/libical/icalvalue.c when decoding input ending in a backslash. Attackers can supply escaped iCalendar text with a trailing backslash, causing the loop to read past the terminator and crash the…
Opis źródłowy NVD · ENCVSS 6,1 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
libTiMidity through 0.2.8 contains a heap out-of-bounds read vulnerability in the SoundFont loader in src/sndfont.c that uses unvalidated sampleId and instrument generator values as table indices. Attackers can supply a crafted .sf2 file loaded through mid_set_soundfont() to read heap memory out…
Opis źródłowy NVD · ENCVSS 6,1 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
CVSS
6,1
EPSS
0,13 %
Poprawka
Status poprawki nieustalony
Publikacja
Aktualizacja NVD
Podatności: opis, rekomendacja, CVSS, EPSS i daty źródłowe. Rekomendacja nie potwierdza podatności własnego zasobu.
Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain a cross-site scripting vulnerability that could allow a remote attacker to execute script in the context of an authenticated user's browser session, which could result in unauthorized actions or…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,1 · EPSS 0,2 % · rekomendacja wg zapisanej polityki
The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to DOM-Based Cross-Site Scripting via the 'redirect_url' parameter in versions up to, and including, 4.0.8 This is due to insufficient input validation in the Topbar component's back button handler. This makes…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,1 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
The unstructured library provides open-source components for ingesting and pre-processing images and text documents, such as PDFs, HTML, Word docs, and many more. Prior to 0.24.1, partition_html(html_parser_version="v2") and the VLM partitioner can preserve untrusted document tags, attributes,…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,1 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
Thelia v2.6.0 contains an open redirect vulnerability in its address creation workflow. After a user accesses a crafted URL and successfully submits the “Add New Address” form, the application redirects them to the URL specified in the `next` parameter. Because the application does not validate…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,1 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
User-controlled values are not sufficiently neutralized when included in CSV exports. Values originating from user input, including data submitted by authenticated users or received through external communication channels such as email, may be stored in fields that are later included in CSV…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,1 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the PageTitle/Notes parameter in the Notes.aspx endpoint.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,1 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
IBM DB2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 uses a web link with untrusted references to an external site. A remote attacker could exploit this vulnerability to expose sensitive information or perform unauthorized actions on the victims’ web browser
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,1 · EPSS 0,18 % · rekomendacja wg zapisanej polityki
libzvbi through 0.2.45 contains an out-of-bounds write vulnerability in the Teletext decoder that allows attackers to corrupt memory by supplying unvalidated DRCS pixel-mode values in X/28/3 packets. Attackers can send a crafted Teletext stream decoded via vbi_decode with every slot set to…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,1 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
Dell PowerScale InsightIQ, versions 5.2.0 through 6.3.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Denial of service.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,1 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject malicious scripts into a URL parameter. The scripts are reflected in the server response and executed in a user's browser when the crafted URL is visited, leading to theft of session information, manipulation of portal…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,1 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
Due to a DOM-Based Cross-Site Scripting (XSS) vulnerability, an unauthenticated attacker could generate a malicious link and make it publicly accessible. If an authenticated user accesses this link, client-side code reads the attacker-controlled input and writes it into the DOM without proper…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,1 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
IBM Db2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,1 · EPSS 0,16 % · rekomendacja wg zapisanej polityki
IBM Db2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,1 · EPSS 0,16 % · rekomendacja wg zapisanej polityki
IBM DB2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,1 · EPSS 0,16 % · rekomendacja wg zapisanej polityki
A flaw was found in the GStreamer multimedia framework's ASF muxer plugin (asfmux). When writing string metadata tags containing Unicode characters outside the Basic Multilingual Plane (such as emoji) to an ASF container, the plugin incorrectly calculates the buffer size needed for the UTF-16LE…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,1 · EPSS 0,15 % · rekomendacja wg zapisanej polityki
Thelia v2.6.0's Smarty templates (address.html and address-update.html) fail to properly escape double quotes in the “next” parameter, enabling reflected Cross‑Site Scripting (XSS) when an authenticated user visits the malicious link containing attacker‑controlled JavaScript.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,1 · EPSS 0,15 % · rekomendacja wg zapisanej polityki
SAP NetWeaver Enterprise Portal does not sufficiently validate input to a certain portal component. An unauthenticated attacker could craft a malicious link that, when clicked by a victim, loads attacker-controlled content within the trusted application context. Successful exploitation could allow…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,1 · EPSS 0,15 % · rekomendacja wg zapisanej polityki
AdPlug through 2.4 contains a heap-based buffer overflow in CksmPlayer::update() in src/ksm.cpp that writes past the fixed databuf[2048] array without bounds checking. Attackers can supply a crafted .ksm module whose notes share one time slot to overflow the heap player object, causing memory…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,1 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
nifti_clib through 3.0.1 contains a stack-based out-of-bounds read and write vulnerability in nifti_convert_n2hdr2nim() because the NIfTI-2 dim[0] value is never range-checked. Attackers can supply a crafted 540-byte NIfTI-2 header read via nifti_image_read() to crash applications or corrupt stack…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,1 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
libmodplug through 0.8.9.1 contains a heap-based out-of-bounds write in CSoundFile::ReadDSM() in src/load_dsm.cpp because nPat is never checked against MAX_PATTERNS. Attackers can supply a crafted DSM file with over 240 PATT chunks or a wrapping patt_len value to corrupt heap memory and crash the…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,1 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
libTiMidity through 0.2.8 contains a stack out-of-bounds write vulnerability in the SoundFont loader that allows attackers to corrupt stack memory via unchecked generator operators in parse_gen. Attackers can supply a crafted .sf2 file with out-of-range pgen/igen operator values to write chosen…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,1 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
libical through 4.0.6 contains a heap-based out-of-bounds read in icalvalue_decode_ical_string() in src/libical/icalvalue.c when decoding input ending in a backslash. Attackers can supply escaped iCalendar text with a trailing backslash, causing the loop to read past the terminator and crash the…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,1 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
libTiMidity through 0.2.8 contains a heap out-of-bounds read vulnerability in the SoundFont loader in src/sndfont.c that uses unvalidated sampleId and instrument generator values as table indices. Attackers can supply a crafted .sf2 file loaded through mid_set_soundfont() to read heap memory out…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,1 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
6,1
0,13 %
Publikacja
Aktualizacja NVD
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.