Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Data publikacji: ostatnie 7 dni. Starsze wpisy dostępne w pełnym katalogu i widoku KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Improper Certificate Validation vulnerability in hexpm hex_core allows an attacker who can intercept HTTPS connections to impersonate hex.pm, repo.hex.pm or any other repository or API server to programs that use hex_core's default HTTP adapter on Erlang/OTP 24, or on OTP 25 when the operating…
Opis źródłowy NVD · ENCVSS 5,9 · EPSS 0,25 % · rekomendacja wg zapisanej polityki
CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploit depends on conditions beyond the attacker's…
Opis źródłowy NVD · ENCVSS 5,9 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploit depends on conditions beyond the attacker's…
Opis źródłowy NVD · ENCVSS 5,9 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
The receive path of the NXP KW41Z IEEE 802.15.4 driver, kw41z_rx() in drivers/ieee802154/ieee802154_kw41z.c, computed the payload size as pkt_len = len - KW41Z_FCS_LENGTH in a uint8_t, where len is the frame length reported by the radio. The interrupt handler kw41z_isr() obtained that length from…
Opis źródłowy NVD · ENCVSS 5,9 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
FlexPrice through 2.1.38 contains an authentication bypass vulnerability in HandleQuickBooksWebhook that skips signature verification when the intuit-signature header is omitted. Unauthenticated attackers knowing a tenant and environment ID can replay forged payment notifications to repeatedly add…
Opis źródłowy NVD · ENCVSS 5,9 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
Frappe before 13.46.1 and 14.x before 14.20.0 contains a cross-site scripting vulnerability because the html2text function weakly sanitizes user input. Authenticated attackers can supply crafted HTML that is insufficiently sanitized by html2text, executing scripts in the browsers of users who view…
Opis źródłowy NVD · ENCVSS 5,9 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
Integer wraparound in psqlODBC SQLBindParameter allows an application, or an attacker who controls how many parameters the application binds on one statement, to corrupt heap memory. psqlODBC stores the binding count in a signed 16-bit field. Binding parameter number 32768 wraps that count to…
Opis źródłowy NVD · ENCVSS 5,9 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
Wheels 3.0.0 through 4.1.1 can disclose detailed exceptions when allowIPBasedDebugAccess=true (disabled by default). An allowed administrator request changes error/debug-display settings in shared application scope. If it overlaps with an unauthorized client's request that raises an error, that…
Opis źródłowy NVD · ENCVSS 5,9 · EPSS 0,21 % · rekomendacja wg zapisanej polityki
Improper Certificate Validation vulnerability in hexpm hex allows an attacker who can intercept HTTPS connections, and holds a certificate for a Hex host issued by a CA in Hex's bundled CA store, to impersonate that host to users who set cacerts_path to a CA store that leaves that CA…
Opis źródłowy NVD · ENCVSS 5,9 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to view live video feed without authentication.
Opis źródłowy NVD · ENCVSS 5,9 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Erlang OTP stdlib (erl_tar module), hexpm hex_core (hex_erl_tar module), hexpm hex (mix_hex_erl_tar module) and erlang rebar3 (r3_hex_erl_tar module) allows an attacker who supplies a tar archive to cause a denial of service…
Opis źródłowy NVD · ENCVSS 5,9 · EPSS 0,18 % · rekomendacja wg zapisanej polityki
The affected code used child_process.execSync with a shell string for generator installation and uninstallation. This allowed an attacker to execute arbitrary OS commands with the developer's privileges by manipulating the ApplicationWizard.installationLocation VS Code workspace configuration…
Opis źródłowy NVD · ENCVSS 5,9 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
The Contact Form 7 Signature Addon WordPress plugin through 4.2.2 does not sanitize a signature field value before building an email attachment path from it, allowing unauthenticated users to attach arbitrary files (bounded to wp-content on current Contact Form 7) to a form's outgoing email via…
Opis źródłowy NVD · ENCVSS 5,9 · EPSS 0,16 % · rekomendacja wg zapisanej polityki
The Bluetooth host's ATT transmit path releases a buffer it does not own when signing fails. chan_send() in subsys/bluetooth/host/att.c documents (and every other error exit implements) the contract that on failure the caller retains ownership of the net_buf; the BT_ATT_OP_SIGNED_WRITE_CMD branch…
Opis źródłowy NVD · ENCVSS 5,9 · EPSS 0,16 % · rekomendacja wg zapisanej polityki
GNU Aspell 0.60.8.2 (first vulnerable version is not known) contains a heap-based buffer overflow write (CWE-122) in its read-only dictionary loader. String::reserve() in common/string.hpp computes its capacity check with a signed int ((int)s + 1), so a requested size of 0x7FFFFFFF wraps negative…
Opis źródłowy NVD · ENCVSS 5,9 · EPSS 0,16 % · rekomendacja wg zapisanej polityki
Wheels through 4.1.1 derives its default production error-email address from the Host header of the request that starts the application. If no explicit error-email recipient is configured, a mail server is configured, and the server accepts an attacker-chosen Host, an attacker whose request…
Opis źródłowy NVD · ENCVSS 5,9 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
In authd before 0.7.1, the user identity matching in UpdateUser (internal/users/manager.go) resolves an incoming login by the broker-scoped provider ID, but falls back to matching the username when the provider ID does not belong to any known user, and does not reject a conflicting non-empty…
Opis źródłowy NVD · ENCVSS 5,9 · EPSS 0,11 % · rekomendacja wg zapisanej polityki
A local privilege escalation vulnerability in the Palo Alto Networks GlobalProtect™ app enables a local user to escalate their privileges to root on macOS. This enables a non-administrative user to execute arbitrary commands with administrative privileges.
The GlobalProtect app on Linux, Windows,…
Opis źródłowy NVD · ENCVSS 5,9 · EPSS 0,11 % · rekomendacja wg zapisanej polityki
There are two invocations of `qrencode` to display a QR code for scanning. These invocations leak the private data $pin / $key via /proc accessible for arbitrary low-privileged users in the system.
Opis źródłowy NVD · ENCVSS 5,9 · EPSS 0,1 % · rekomendacja wg zapisanej polityki
A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an adjacent user to intercept or manipulate network communications.
Opis źródłowy NVD · ENCVSS 5,9 · EPSS 0,07 % · rekomendacja wg zapisanej polityki
lwIP through 2.2.1 contains a stack out-of-bounds write vulnerability in mdns_handle_response that allows adjacent attackers to corrupt stack memory by sending mDNS responses with invalid domain names. Attackers on the local link can send multicast PTR answers with oversized RDLENGTH or SRV…
Opis źródłowy NVD · ENCVSS 5,9 · rekomendacja wg zapisanej polityki
libstrophe through 0.14.0 contains a stack-based buffer overflow vulnerability in SCRAM_Hi that allows malicious XMPP servers to overflow a 128-byte stack buffer by sending an oversized SCRAM salt. Attackers can send a server-first-message whose s= attribute decodes to more than 124 bytes,…
Opis źródłowy NVD · ENCVSS 5,9 · rekomendacja wg zapisanej polityki
ProjectSend 2.0.0 before 2.7.0 contains a path validation flaw in OrphanFileScanner::isOrphan() that allows staff with import_orphans permission to treat tracked files as orphans. Attackers can submit ./ path aliases to the orphans import or delete endpoints, deleting or adopting other owners'…
Opis źródłowy NVD · ENCVSS 5,9 · rekomendacja wg zapisanej polityki
CVSS
5,9
EPSS
Nieustalone
Poprawka
Status poprawki nieustalony
Publikacja
Aktualizacja NVD
Podatności: opis, rekomendacja, CVSS, EPSS i daty źródłowe. Rekomendacja nie potwierdza podatności własnego zasobu.
Improper Certificate Validation vulnerability in hexpm hex_core allows an attacker who can intercept HTTPS connections to impersonate hex.pm, repo.hex.pm or any other repository or API server to programs that use hex_core's default HTTP adapter on Erlang/OTP 24, or on OTP 25 when the operating…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,9 · EPSS 0,25 % · rekomendacja wg zapisanej polityki
CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploit depends on conditions beyond the attacker's…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,9 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploit depends on conditions beyond the attacker's…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,9 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
The receive path of the NXP KW41Z IEEE 802.15.4 driver, kw41z_rx() in drivers/ieee802154/ieee802154_kw41z.c, computed the payload size as pkt_len = len - KW41Z_FCS_LENGTH in a uint8_t, where len is the frame length reported by the radio. The interrupt handler kw41z_isr() obtained that length from…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,9 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
FlexPrice through 2.1.38 contains an authentication bypass vulnerability in HandleQuickBooksWebhook that skips signature verification when the intuit-signature header is omitted. Unauthenticated attackers knowing a tenant and environment ID can replay forged payment notifications to repeatedly add…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,9 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
Frappe before 13.46.1 and 14.x before 14.20.0 contains a cross-site scripting vulnerability because the html2text function weakly sanitizes user input. Authenticated attackers can supply crafted HTML that is insufficiently sanitized by html2text, executing scripts in the browsers of users who view…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,9 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
Integer wraparound in psqlODBC SQLBindParameter allows an application, or an attacker who controls how many parameters the application binds on one statement, to corrupt heap memory. psqlODBC stores the binding count in a signed 16-bit field. Binding parameter number 32768 wraps that count to…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,9 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
Wheels 3.0.0 through 4.1.1 can disclose detailed exceptions when allowIPBasedDebugAccess=true (disabled by default). An allowed administrator request changes error/debug-display settings in shared application scope. If it overlaps with an unauthorized client's request that raises an error, that…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,9 · EPSS 0,21 % · rekomendacja wg zapisanej polityki
Improper Certificate Validation vulnerability in hexpm hex allows an attacker who can intercept HTTPS connections, and holds a certificate for a Hex host issued by a CA in Hex's bundled CA store, to impersonate that host to users who set cacerts_path to a CA store that leaves that CA…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,9 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to view live video feed without authentication.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,9 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Erlang OTP stdlib (erl_tar module), hexpm hex_core (hex_erl_tar module), hexpm hex (mix_hex_erl_tar module) and erlang rebar3 (r3_hex_erl_tar module) allows an attacker who supplies a tar archive to cause a denial of service…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,9 · EPSS 0,18 % · rekomendacja wg zapisanej polityki
The affected code used child_process.execSync with a shell string for generator installation and uninstallation. This allowed an attacker to execute arbitrary OS commands with the developer's privileges by manipulating the ApplicationWizard.installationLocation VS Code workspace configuration…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,9 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
The Contact Form 7 Signature Addon WordPress plugin through 4.2.2 does not sanitize a signature field value before building an email attachment path from it, allowing unauthenticated users to attach arbitrary files (bounded to wp-content on current Contact Form 7) to a form's outgoing email via…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,9 · EPSS 0,16 % · rekomendacja wg zapisanej polityki
The Bluetooth host's ATT transmit path releases a buffer it does not own when signing fails. chan_send() in subsys/bluetooth/host/att.c documents (and every other error exit implements) the contract that on failure the caller retains ownership of the net_buf; the BT_ATT_OP_SIGNED_WRITE_CMD branch…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,9 · EPSS 0,16 % · rekomendacja wg zapisanej polityki
GNU Aspell 0.60.8.2 (first vulnerable version is not known) contains a heap-based buffer overflow write (CWE-122) in its read-only dictionary loader. String::reserve() in common/string.hpp computes its capacity check with a signed int ((int)s + 1), so a requested size of 0x7FFFFFFF wraps negative…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,9 · EPSS 0,16 % · rekomendacja wg zapisanej polityki
Wheels through 4.1.1 derives its default production error-email address from the Host header of the request that starts the application. If no explicit error-email recipient is configured, a mail server is configured, and the server accepts an attacker-chosen Host, an attacker whose request…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,9 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
In authd before 0.7.1, the user identity matching in UpdateUser (internal/users/manager.go) resolves an incoming login by the broker-scoped provider ID, but falls back to matching the username when the provider ID does not belong to any known user, and does not reject a conflicting non-empty…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,9 · EPSS 0,11 % · rekomendacja wg zapisanej polityki
A local privilege escalation vulnerability in the Palo Alto Networks GlobalProtect™ app enables a local user to escalate their privileges to root on macOS. This enables a non-administrative user to execute arbitrary commands with administrative privileges.
The GlobalProtect app on Linux, Windows,…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,9 · EPSS 0,11 % · rekomendacja wg zapisanej polityki
There are two invocations of `qrencode` to display a QR code for scanning. These invocations leak the private data $pin / $key via /proc accessible for arbitrary low-privileged users in the system.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,9 · EPSS 0,1 % · rekomendacja wg zapisanej polityki
A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an adjacent user to intercept or manipulate network communications.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,9 · EPSS 0,07 % · rekomendacja wg zapisanej polityki
lwIP through 2.2.1 contains a stack out-of-bounds write vulnerability in mdns_handle_response that allows adjacent attackers to corrupt stack memory by sending mDNS responses with invalid domain names. Attackers on the local link can send multicast PTR answers with oversized RDLENGTH or SRV…
libstrophe through 0.14.0 contains a stack-based buffer overflow vulnerability in SCRAM_Hi that allows malicious XMPP servers to overflow a 128-byte stack buffer by sending an oversized SCRAM salt. Attackers can send a server-first-message whose s= attribute decodes to more than 124 bytes,…
ProjectSend 2.0.0 before 2.7.0 contains a path validation flaw in OrphanFileScanner::isOrphan() that allows staff with import_orphans permission to treat tracked files as orphans. Attackers can submit ./ path aliases to the orphans import or delete endpoints, deleting or adopting other owners'…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,9 · rekomendacja wg zapisanej polityki
5,9
Nieustalone
Publikacja
Aktualizacja NVD
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.