Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Data publikacji: ostatnie 7 dni. Starsze wpisy dostępne w pełnym katalogu i widoku KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Thelia v2.6.0 permits authenticated administrators to upload and install modules via the ZIP upload function without validating or sandboxing embedded PHP code. An attacker can include malicious PHP code in a module's `install()` method which will then be executed upon installation, enabling…
Opis źródłowy NVD · ENCVSS 5,4 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
The Responsive Blocks WordPress plugin before 2.3.0 does not sanitise or escape some of the values submitted with its Form block before adding them to the HTML notification email sent to the site owner, allowing unauthenticated users to inject arbitrary HTML, such as phishing links, into that email.
Opis źródłowy NVD · ENCVSS 5,4 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
Ekko Studio through 0.7.36 contains a missing authorization vulnerability that allows any authenticated non-super_admin user to list and clear server-wide login lockouts via /api/auth/locked-ips. Attackers can send DELETE requests without an ip parameter to invoke unlockAll(), disabling the login…
Opis źródłowy NVD · ENCVSS 5,4 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
abp-next-admin 10.2.0 through 10.6.0 contains an insecure direct object reference vulnerability in the LINGYUN.Abp.AIManagement module that allows authenticated users to access other users' AI chat conversations by supplying their ConversationId. Attackers holding the Chat permission can call…
Opis źródłowy NVD · ENCVSS 5,4 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
B3log Solo through 4.4.0 contains a missing authorization vulnerability in ArticleConsole that allows authenticated authors to access other authors' articles by omitting per-author ownership checks. Attackers can query the console articles status endpoint to list other authors' drafts, probe draft…
Opis źródłowy NVD · ENCVSS 5,4 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
Likeshop through 3.5.1 contains an insecure direct object reference vulnerability in AfterSale.php and AfterSaleLogic.php that lets authenticated users access other customers' after-sale records by supplying their ids. Attackers with self-registered accounts can call the detail, goodsInfo, cancel,…
Opis źródłowy NVD · ENCVSS 5,4 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
Jorani before 1.0.4 contains a missing authorization vulnerability in Contracts::import() that allows any authenticated user to import days off into any contract from an arbitrary URL. Attackers can submit a contract id and URL via POST to overwrite non-working-day calendars and abuse…
Opis źródłowy NVD · ENCVSS 5,4 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
The Events Made Easy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'event[location_name]' parameter in all versions up to, and including, 3.2.22 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject…
Opis źródłowy NVD · ENCVSS 5,4 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.10, looks up BookmarkletImport by sequential primary key within the active Space without restricting created_by to the requesting user when an authenticated member of a shared Space…
Opis źródłowy NVD · ENCVSS 5,4 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code.
Opis źródłowy NVD · ENCVSS 5,4 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.21.0, FileRise enforces disableFormLogin, disableBasicAuth, and disableOIDCLogin in the client interface but not consistently in the corresponding server-side authentication flows. A…
Opis źródłowy NVD · ENCVSS 5,4 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
Opis źródłowy NVD · ENCVSS 5,4 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
Integer overflow in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
Opis źródłowy NVD · ENCVSS 5,4 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
Opis źródłowy NVD · ENCVSS 5,4 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
Opis źródłowy NVD · ENCVSS 5,4 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
Use-after-free in the Crash Reporting component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
Opis źródłowy NVD · ENCVSS 5,4 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
MrDoc through 1.1.1 contains a missing object-level authorization vulnerability in the ImportLocalDoc API that allows authenticated users to modify other users' documents and projects. Attackers can send PUT requests with arbitrary sort_data document ids to publish private drafts and reparent…
Opis źródłowy NVD · ENCVSS 5,4 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the CONNECT engine plugin file-access UDFs json_file(), bson_file(), jfile_make(), bfile_make(), and jbin_file() are affected because each does not enforce FILE…
Opis źródłowy NVD · ENCVSS 5,4 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
SparkyFitness is a self-hosted, AI-powered health and fitness tracker for families. Prior to 1.6.0, SparkyFitnessServer/services/chatService.ts and SparkyFitnessServer/services/labelScanService.ts do not validate destinations supplied in custom AI service settings. An authenticated user saves a…
Opis źródłowy NVD · ENCVSS 5,4 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, Firewall Rules and NAT views place stored category names and alias descriptions into HTML title attributes in filter_rule.volt and nat_rule.volt without quote-safe encoding. The response layer uses ENT_NOQUOTES,…
Opis źródłowy NVD · ENCVSS 5,4 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
lichess.org is the forever free, adless and open source chess server. Prior to commit c54596c9e1569d378fe20f80d4c790c6fdee54c4, a user who can add a chapter to a study can place attacker-controlled text in the PGN Annotator tag, which becomes Comment.Author.External and is returned verbatim by…
Opis źródłowy NVD · ENCVSS 5,4 · EPSS 0,21 % · rekomendacja wg zapisanej polityki
CVSS
5,4
EPSS
0,21 %
Poprawka
Status poprawki nieustalony
Publikacja
Aktualizacja NVD
Podatności: opis, rekomendacja, CVSS, EPSS i daty źródłowe. Rekomendacja nie potwierdza podatności własnego zasobu.
Thelia v2.6.0 permits authenticated administrators to upload and install modules via the ZIP upload function without validating or sandboxing embedded PHP code. An attacker can include malicious PHP code in a module's `install()` method which will then be executed upon installation, enabling…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,4 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
The Responsive Blocks WordPress plugin before 2.3.0 does not sanitise or escape some of the values submitted with its Form block before adding them to the HTML notification email sent to the site owner, allowing unauthenticated users to inject arbitrary HTML, such as phishing links, into that email.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,4 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
Ekko Studio through 0.7.36 contains a missing authorization vulnerability that allows any authenticated non-super_admin user to list and clear server-wide login lockouts via /api/auth/locked-ips. Attackers can send DELETE requests without an ip parameter to invoke unlockAll(), disabling the login…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,4 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
abp-next-admin 10.2.0 through 10.6.0 contains an insecure direct object reference vulnerability in the LINGYUN.Abp.AIManagement module that allows authenticated users to access other users' AI chat conversations by supplying their ConversationId. Attackers holding the Chat permission can call…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,4 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
B3log Solo through 4.4.0 contains a missing authorization vulnerability in ArticleConsole that allows authenticated authors to access other authors' articles by omitting per-author ownership checks. Attackers can query the console articles status endpoint to list other authors' drafts, probe draft…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,4 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
Likeshop through 3.5.1 contains an insecure direct object reference vulnerability in AfterSale.php and AfterSaleLogic.php that lets authenticated users access other customers' after-sale records by supplying their ids. Attackers with self-registered accounts can call the detail, goodsInfo, cancel,…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,4 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
Jorani before 1.0.4 contains a missing authorization vulnerability in Contracts::import() that allows any authenticated user to import days off into any contract from an arbitrary URL. Attackers can submit a contract id and URL via POST to overwrite non-working-day calendars and abuse…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,4 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
The Events Made Easy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'event[location_name]' parameter in all versions up to, and including, 3.2.22 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,4 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.10, looks up BookmarkletImport by sequential primary key within the active Space without restricting created_by to the requesting user when an authenticated member of a shared Space…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,4 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,4 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.21.0, FileRise enforces disableFormLogin, disableBasicAuth, and disableOIDCLogin in the client interface but not consistently in the corresponding server-side authentication flows. A…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,4 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,4 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
Integer overflow in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,4 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,4 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,4 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
Use-after-free in the Crash Reporting component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,4 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
MrDoc through 1.1.1 contains a missing object-level authorization vulnerability in the ImportLocalDoc API that allows authenticated users to modify other users' documents and projects. Attackers can send PUT requests with arbitrary sort_data document ids to publish private drafts and reparent…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,4 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the CONNECT engine plugin file-access UDFs json_file(), bson_file(), jfile_make(), bfile_make(), and jbin_file() are affected because each does not enforce FILE…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,4 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
SparkyFitness is a self-hosted, AI-powered health and fitness tracker for families. Prior to 1.6.0, SparkyFitnessServer/services/chatService.ts and SparkyFitnessServer/services/labelScanService.ts do not validate destinations supplied in custom AI service settings. An authenticated user saves a…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,4 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, Firewall Rules and NAT views place stored category names and alias descriptions into HTML title attributes in filter_rule.volt and nat_rule.volt without quote-safe encoding. The response layer uses ENT_NOQUOTES,…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,4 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
lichess.org is the forever free, adless and open source chess server. Prior to commit c54596c9e1569d378fe20f80d4c790c6fdee54c4, a user who can add a chapter to a study can place attacker-controlled text in the PGN Annotator tag, which becomes Comment.Author.External and is returned verbatim by…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,4 · EPSS 0,21 % · rekomendacja wg zapisanej polityki
5,4
0,21 %
Publikacja
Aktualizacja NVD
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.