Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Data publikacji: ostatnie 7 dni. Starsze wpisy dostępne w pełnym katalogu i widoku KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
The FV Player 8 plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 8.1.7 via the check_mimetype function. This is due to insufficient file type validation in check_mimetype(), which writes attacker-supplied remote file content to the public uploads…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,64 % · rekomendacja wg zapisanej polityki
ILIAS before 9.24, 10.12, and 11.5 contains an unrestricted file upload vulnerability in QTI question import image handling (ilQtiMatImageSecurity) that allows authenticated authors to write executable files. Attackers with question pool import rights can import a crafted archive writing a…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,64 % · rekomendacja wg zapisanej polityki
An authenticated path traversal vulnerability exists in the command line interface of ClearPass Policy Manager. Successful exploitation could allow a low-privileged authenticated remote attacker to execute arbitrary code with elevated privileges on the underlying operating system.
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,63 % · rekomendacja wg zapisanej polityki
LMCache through 0.5.5 contains a missing authentication vulnerability in the multiprocess mode HTTP server that allows remote unauthenticated attackers to access management endpoints listening on all interfaces by default. Attackers can read environment credentials via GET /env and configuration…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,58 % · rekomendacja wg zapisanej polityki
SimpleChat is a secure AI conversation application with personal and group workspaces for document-grounded interactions. In versions 0.261.003 and 0.261.027, an authorization ordering flaw in POST /api/user/plugins allows an authenticated low-privileged user to omit the top-level MCP type so that…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,56 % · rekomendacja wg zapisanej polityki
The ACPT (Premium) plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.0.66 via the render function. This is due to missing capability check on the REST API form creation endpoint and unsandboxed Twig environment rendering email templates. This makes…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,55 % · rekomendacja wg zapisanej polityki
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in code, resulting in a sandbox escape.
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,55 % · rekomendacja wg zapisanej polityki
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to an incomplete blocklist in the code security scanner.
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,55 % · rekomendacja wg zapisanej polityki
The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Unrestricted File Type Upload in all versions up to, and including, 6.3.316 via the upload_files function. This is due to missing file type validation in the upload_files function, which reads and applies an…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,53 % · rekomendacja wg zapisanej polityki
Improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Apache Camel Karavan.
A project file name supplied through the project file API was used verbatim as a path segment when the project was written to the working copy for a Git commit, so a name…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,52 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs
Fix several related bounds checking and pointer lifecycle issues in
receive_encrypted_standard()'s handling of compound encrypted frames:
- Clear…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,51 % · rekomendacja wg zapisanej polityki
Mooncake Store master through 0.3.13.post1 contains a missing authentication vulnerability that allows unauthenticated attackers to force-delete any object via Remove, RemoveByRegex, RemoveAll and BatchRemove on the coro_rpc port. Attackers can send forged requests with the force flag set to…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,49 % · rekomendacja wg zapisanej polityki
A flaw was found in ansible-core. When installing a collection with
`ansible-galaxy collection install`, the archive extractor validates member
paths using lexical path normalisation (os.path.abspath) instead of resolving
symbolic links (os.path.realpath), and it performs no containment check…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
A Server-Side Request Forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed a repository contributor to cause the appliance to issue requests to attacker-controlled internal hosts, which could be chained to achieve remote code execution on the appliance. The secret…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
Backstage is an open framework for building developer portals. Prior to 1.14.8, 1.15.6, and 2.0.1, the @backstage/plugin-techdocs-node package improperly validated mapping-style markdown_extensions configuration. An authenticated attacker who can register or influence an SCM-backed documentation…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
Use after free in WebRTC in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,46 % · rekomendacja wg zapisanej polityki
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command ('Code Injection') related to improper input validation.
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 10.2.1 via deserialization of untrusted input . This makes it possible for authenticated attackers, with custom-level access and above,…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,44 % · rekomendacja wg zapisanej polityki
A heap-based out-of-bounds write in the ws_read_frame function (src/bolt/ws.c) and the buffer_apply_mask function (src/bolt/buffer.c) in FalkorDB before 4.20.0 allows a remote unauthenticated attacker to cause a denial of service and possibly corrupt heap memory by sending a WebSocket frame with a…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,44 % · rekomendacja wg zapisanej polityki
An SQL Injection vulnerability exists in the Site Search function of Movable Type, which may allow an unauthenticated attacker to execute an arbitrary SQL query on the affected product.
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,43 % · rekomendacja wg zapisanej polityki
A heap-based out-of-bounds read in the BufferSerializerIOv2_ReadBuffer function (src/serializers/serializer_io.c) in FalkorDB before 4.18.4 allows a remote attacker who can issue Redis replication commands (for example, against an instance with no password configured) to cause a denial of service…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,43 % · rekomendacja wg zapisanej polityki
CVSS
8,8
EPSS
0,43 %
Poprawka
Status poprawki nieustalony
Publikacja
Aktualizacja NVD
Podatności: opis, rekomendacja, CVSS, EPSS i daty źródłowe. Rekomendacja nie potwierdza podatności własnego zasobu.
The FV Player 8 plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 8.1.7 via the check_mimetype function. This is due to insufficient file type validation in check_mimetype(), which writes attacker-supplied remote file content to the public uploads…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,64 % · rekomendacja wg zapisanej polityki
ILIAS before 9.24, 10.12, and 11.5 contains an unrestricted file upload vulnerability in QTI question import image handling (ilQtiMatImageSecurity) that allows authenticated authors to write executable files. Attackers with question pool import rights can import a crafted archive writing a…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,64 % · rekomendacja wg zapisanej polityki
An authenticated path traversal vulnerability exists in the command line interface of ClearPass Policy Manager. Successful exploitation could allow a low-privileged authenticated remote attacker to execute arbitrary code with elevated privileges on the underlying operating system.
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,63 % · rekomendacja wg zapisanej polityki
LMCache through 0.5.5 contains a missing authentication vulnerability in the multiprocess mode HTTP server that allows remote unauthenticated attackers to access management endpoints listening on all interfaces by default. Attackers can read environment credentials via GET /env and configuration…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,58 % · rekomendacja wg zapisanej polityki
SimpleChat is a secure AI conversation application with personal and group workspaces for document-grounded interactions. In versions 0.261.003 and 0.261.027, an authorization ordering flaw in POST /api/user/plugins allows an authenticated low-privileged user to omit the top-level MCP type so that…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,56 % · rekomendacja wg zapisanej polityki
The ACPT (Premium) plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.0.66 via the render function. This is due to missing capability check on the REST API form creation endpoint and unsandboxed Twig environment rendering email templates. This makes…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,55 % · rekomendacja wg zapisanej polityki
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in code, resulting in a sandbox escape.
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,55 % · rekomendacja wg zapisanej polityki
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to an incomplete blocklist in the code security scanner.
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,55 % · rekomendacja wg zapisanej polityki
The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Unrestricted File Type Upload in all versions up to, and including, 6.3.316 via the upload_files function. This is due to missing file type validation in the upload_files function, which reads and applies an…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,53 % · rekomendacja wg zapisanej polityki
Improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Apache Camel Karavan.
A project file name supplied through the project file API was used verbatim as a path segment when the project was written to the working copy for a Git commit, so a name…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,52 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs
Fix several related bounds checking and pointer lifecycle issues in
receive_encrypted_standard()'s handling of compound encrypted frames:
- Clear…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,51 % · rekomendacja wg zapisanej polityki
Mooncake Store master through 0.3.13.post1 contains a missing authentication vulnerability that allows unauthenticated attackers to force-delete any object via Remove, RemoveByRegex, RemoveAll and BatchRemove on the coro_rpc port. Attackers can send forged requests with the force flag set to…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,49 % · rekomendacja wg zapisanej polityki
A flaw was found in ansible-core. When installing a collection with
`ansible-galaxy collection install`, the archive extractor validates member
paths using lexical path normalisation (os.path.abspath) instead of resolving
symbolic links (os.path.realpath), and it performs no containment check…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
A Server-Side Request Forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed a repository contributor to cause the appliance to issue requests to attacker-controlled internal hosts, which could be chained to achieve remote code execution on the appliance. The secret…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,48 % · rekomendacja wg zapisanej polityki
Backstage is an open framework for building developer portals. Prior to 1.14.8, 1.15.6, and 2.0.1, the @backstage/plugin-techdocs-node package improperly validated mapping-style markdown_extensions configuration. An authenticated attacker who can register or influence an SCM-backed documentation…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
Use after free in WebRTC in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,46 % · rekomendacja wg zapisanej polityki
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command ('Code Injection') related to improper input validation.
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 10.2.1 via deserialization of untrusted input . This makes it possible for authenticated attackers, with custom-level access and above,…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,44 % · rekomendacja wg zapisanej polityki
A heap-based out-of-bounds write in the ws_read_frame function (src/bolt/ws.c) and the buffer_apply_mask function (src/bolt/buffer.c) in FalkorDB before 4.20.0 allows a remote unauthenticated attacker to cause a denial of service and possibly corrupt heap memory by sending a WebSocket frame with a…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,44 % · rekomendacja wg zapisanej polityki
An SQL Injection vulnerability exists in the Site Search function of Movable Type, which may allow an unauthenticated attacker to execute an arbitrary SQL query on the affected product.
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,43 % · rekomendacja wg zapisanej polityki
A heap-based out-of-bounds read in the BufferSerializerIOv2_ReadBuffer function (src/serializers/serializer_io.c) in FalkorDB before 4.18.4 allows a remote attacker who can issue Redis replication commands (for example, against an instance with no password configured) to cause a denial of service…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,43 % · rekomendacja wg zapisanej polityki
8,8
0,43 %
Publikacja
Aktualizacja NVD
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.