Podatności

CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploit depends on conditions beyond the attacker's…

CVSS 5,9 · EPSS 0,24 % · rekomendacja wg zapisanej polityki

The receive path of the NXP KW41Z IEEE 802.15.4 driver, kw41z_rx() in drivers/ieee802154/ieee802154_kw41z.c, computed the payload size as pkt_len = len - KW41Z_FCS_LENGTH in a uint8_t, where len is the frame length reported by the radio. The interrupt handler kw41z_isr() obtained that length from…

CVSS 5,9 · EPSS 0,23 % · rekomendacja wg zapisanej polityki

A buffer overflow vulnerability in HPE NonStop TELSERV can cause memory corruption and DoS.

CVSS 5,9 · EPSS 0,23 % · rekomendacja wg zapisanej polityki

FlexPrice through 2.1.38 contains an authentication bypass vulnerability in HandleQuickBooksWebhook that skips signature verification when the intuit-signature header is omitted. Unauthenticated attackers knowing a tenant and environment ID can replay forged payment notifications to repeatedly add…

CVSS 5,9 · EPSS 0,22 % · rekomendacja wg zapisanej polityki

Frappe before 13.46.1 and 14.x before 14.20.0 contains a cross-site scripting vulnerability because the html2text function weakly sanitizes user input. Authenticated attackers can supply crafted HTML that is insufficiently sanitized by html2text, executing scripts in the browsers of users who view…

CVSS 5,9 · EPSS 0,22 % · rekomendacja wg zapisanej polityki

Integer wraparound in psqlODBC SQLBindParameter allows an application, or an attacker who controls how many parameters the application binds on one statement, to corrupt heap memory. psqlODBC stores the binding count in a signed 16-bit field. Binding parameter number 32768 wraps that count to…

CVSS 5,9 · EPSS 0,22 % · rekomendacja wg zapisanej polityki

Wheels 3.0.0 through 4.1.1 can disclose detailed exceptions when allowIPBasedDebugAccess=true (disabled by default). An allowed administrator request changes error/debug-display settings in shared application scope. If it overlaps with an unauthorized client's request that raises an error, that…

CVSS 5,9 · EPSS 0,21 % · rekomendacja wg zapisanej polityki

Improper Certificate Validation vulnerability in hexpm hex allows an attacker who can intercept HTTPS connections, and holds a certificate for a Hex host issued by a CA in Hex's bundled CA store, to impersonate that host to users who set cacerts_path to a CA store that leaves that CA…

CVSS 5,9 · EPSS 0,19 % · rekomendacja wg zapisanej polityki

SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to view live video feed without authentication.

CVSS 5,9 · EPSS 0,19 % · rekomendacja wg zapisanej polityki

Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Erlang OTP stdlib (erl_tar module), hexpm hex_core (hex_erl_tar module), hexpm hex (mix_hex_erl_tar module) and erlang rebar3 (r3_hex_erl_tar module) allows an attacker who supplies a tar archive to cause a denial of service…

CVSS 5,9 · EPSS 0,18 % · rekomendacja wg zapisanej polityki

The affected code used child_process.execSync with a shell string for generator installation and uninstallation. This allowed an attacker to execute arbitrary OS commands with the developer's privileges by manipulating the ApplicationWizard.installationLocation VS Code workspace configuration…

CVSS 5,9 · EPSS 0,17 % · rekomendacja wg zapisanej polityki

The Contact Form 7 Signature Addon WordPress plugin through 4.2.2 does not sanitize a signature field value before building an email attachment path from it, allowing unauthenticated users to attach arbitrary files (bounded to wp-content on current Contact Form 7) to a form's outgoing email via…

CVSS 5,9 · EPSS 0,16 % · rekomendacja wg zapisanej polityki

The Bluetooth host's ATT transmit path releases a buffer it does not own when signing fails. chan_send() in subsys/bluetooth/host/att.c documents (and every other error exit implements) the contract that on failure the caller retains ownership of the net_buf; the BT_ATT_OP_SIGNED_WRITE_CMD branch…

CVSS 5,9 · EPSS 0,16 % · rekomendacja wg zapisanej polityki

GNU Aspell 0.60.8.2 (first vulnerable version is not known) contains a heap-based buffer overflow write (CWE-122) in its read-only dictionary loader. String::reserve() in common/string.hpp computes its capacity check with a signed int ((int)s + 1), so a requested size of 0x7FFFFFFF wraps negative…

CVSS 5,9 · EPSS 0,16 % · rekomendacja wg zapisanej polityki

Wheels through 4.1.1 derives its default production error-email address from the Host header of the request that starts the application. If no explicit error-email recipient is configured, a mail server is configured, and the server accepts an attacker-chosen Host, an attacker whose request…

CVSS 5,9 · EPSS 0,14 % · rekomendacja wg zapisanej polityki

In authd before 0.7.1, the user identity matching in UpdateUser (internal/users/manager.go) resolves an incoming login by the broker-scoped provider ID, but falls back to matching the username when the provider ID does not belong to any known user, and does not reject a conflicting non-empty…

CVSS 5,9 · EPSS 0,11 % · rekomendacja wg zapisanej polityki

A local privilege escalation vulnerability in the Palo Alto Networks GlobalProtect™ app enables a local user to escalate their privileges to root on macOS. This enables a non-administrative user to execute arbitrary commands with administrative privileges. The GlobalProtect app on Linux, Windows,…

CVSS 5,9 · EPSS 0,11 % · rekomendacja wg zapisanej polityki

Improper access control in Samsung Internet prior to version 30.0.5.6 allows local attackers to access sensitive information.

CVSS 5,9 · EPSS 0,11 % · rekomendacja wg zapisanej polityki

There are two invocations of `qrencode` to display a QR code for scanning. These invocations leak the private data $pin / $key via /proc accessible for arbitrary low-privileged users in the system.

CVSS 5,9 · EPSS 0,1 % · rekomendacja wg zapisanej polityki

A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an adjacent user to intercept or manipulate network communications.

CVSS 5,9 · EPSS 0,07 % · rekomendacja wg zapisanej polityki

lwIP through 2.2.1 contains a stack out-of-bounds write vulnerability in mdns_handle_response that allows adjacent attackers to corrupt stack memory by sending mDNS responses with invalid domain names. Attackers on the local link can send multicast PTR answers with oversized RDLENGTH or SRV…

CVSS 5,9 · rekomendacja wg zapisanej polityki

libstrophe through 0.14.0 contains a stack-based buffer overflow vulnerability in SCRAM_Hi that allows malicious XMPP servers to overflow a 128-byte stack buffer by sending an oversized SCRAM salt. Attackers can send a server-first-message whose s= attribute decodes to more than 124 bytes,…

CVSS 5,9 · rekomendacja wg zapisanej polityki

ProjectSend 2.0.0 before 2.7.0 contains a path validation flaw in OrphanFileScanner::isOrphan() that allows staff with import_orphans permission to treat tracked files as orphans. Attackers can submit ./ path aliases to the orphans import or delete endpoints, deleting or adopting other owners'…

CVSS 5,9 · rekomendacja wg zapisanej polityki

OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.4.0 until 3.8.0, the multipart processor in internal/bodyprocessors/multipart.go treats io.ErrUnexpectedEOF as nonfatal without setting MULTIPART_STRICT_ERROR. A remote attacker can submit a truncated…

CVSS 5,8 · EPSS 0,49 % · rekomendacja wg zapisanej polityki

OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.0.0 until 3.8.0, the t:jsDecode transformation in internal/transformations/js_decode.go:64-70 includes the backslash in the octal buffer, causing ParseInt to fail and return a null byte. The flaw is…

CVSS 5,8 · EPSS 0,4 % · rekomendacja wg zapisanej polityki