Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Data publikacji: ostatnie 7 dni. Starsze wpisy dostępne w pełnym katalogu i widoku KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Aureus ERP through 1.6.0 contains an authorization bypass vulnerability that allows authenticated API users to create or move records into disallowed companies by supplying a foreign company_id. Attackers can submit create or update requests to plugin REST API endpoints such as partners, sales, or…
Opis źródłowy NVD · ENCVSS 5,3 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
The AWP Classifieds WordPress plugin before 4.4.9 does not verify that a request is authorised to view a listing when a payment transaction is referenced, allowing unauthenticated attackers to bypass the ownership check on the ad submission page and read the private contact email stored on any…
Opis źródłowy NVD · ENCVSS 5,3 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
Colanode server through 0.4.7 contains a path traversal vulnerability that allows authenticated users to read arbitrary .jpeg files by supplying an encoded traversal sequence in avatarId. Attackers can send percent-encoded ../ sequences to GET /client/v1/avatars/:avatarId to escape the avatars…
Opis źródłowy NVD · ENCVSS 5,3 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated users to post messages containing attacker-controlled iframes through the messenger's HTMLPurifier SafeIframe branch. Attackers can craft a message with a malicious iframe that is…
Opis źródłowy NVD · ENCVSS 5,3 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform server-side authorization checks for requests to schedule special operations. This could allow an authenticated attacker with minimal privileges to schedule unauthorized…
Opis źródłowy NVD · ENCVSS 5,3 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform server-side authorization checks for requests to modify the state of scheduled actions. This could allow an authenticated attacker with minimal privileges to retry, stop, or…
Opis źródłowy NVD · ENCVSS 5,3 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
The LTL Freight Quotes WordPress plugin before 4.2.19 does not perform any authorization check or validation on one of its REST routes that writes to the database, allowing unauthenticated users to modify some of the LTL Freight Quotes WordPress plugin before 4.2.19's stored settings.
Opis źródłowy NVD · ENCVSS 5,3 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
The Avada (Fusion) Builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.16.1 via the 'args[link_target]' parameter. This makes it possible for unauthenticated attackers to extract arbitrary user meta values for any user ID, including…
Opis źródłowy NVD · ENCVSS 5,3 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
Erupt through 2.3.0 contains an HQL injection vulnerability that allows authenticated users to bypass tree-scoped data filters by injecting unescaped quotes into the linkTreeVal parameter of POST /erupt-api/data/table/{erupt}. Attackers holding query permission on entities with String-keyed…
Opis źródłowy NVD · ENCVSS 5,3 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
When a username for an Active Directory connection is a domain without a local part, the auth0-lock library initiates the authentication transaction with a GET request instead of a POST request. As a result, user-submitted form data is appended to the URL as query string parameters.
Opis źródłowy NVD · ENCVSS 5,3 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
A flaw was found in libtirpc. A remote attacker can exploit this vulnerability by sending specially crafted PMAPPROC_DUMP replies to a client application that uses the pmap_getmaps() function against an attacker-controlled host. This unbounded decoding can lead to excessive memory and CPU…
Opis źródłowy NVD · ENCVSS 5,3 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. Prior to version 2.4.0, InvoiceShelf invoice, estimate, and recurring-invoice creation paths accept client-supplied total, sub_total, tax, discount_val, and…
Opis źródłowy NVD · ENCVSS 5,3 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
zhontai Admin.Core through 10.1.0 contains an authorization bypass vulnerability that allows authenticated users to ignore department DataScope restrictions by supplying out-of-scope record ids. Attackers holding user or organization module permissions with Dept or Self scope can call UserService…
Opis źródłowy NVD · ENCVSS 5,3 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
waynboot-mall through 2.0.0 contains an insecure direct object reference vulnerability in AddressController that allows authenticated members to modify or delete other members' shipping addresses. Attackers can enumerate auto-increment address ids and send POST /address or DELETE…
Opis źródłowy NVD · ENCVSS 5,3 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
SurrealDB from 3.0.0 before 3.3.0 contains a missing authentication vulnerability in the revoke RPC method that allows low-privileged or unauthenticated callers to invalidate other users' refresh tokens without proof of possession. Attackers can obtain grant identifiers via ACCESS SHOW ALL with…
Opis źródłowy NVD · ENCVSS 5,3 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
LibreNMS before 26.9.0 contains a path traversal vulnerability in nfsen_channel_common.inc.php that allows authenticated users to read unauthorized RRD data by injecting ../ sequences into the channel parameter. Attackers with access to one NFSen-enabled device can request graph.php with a…
Opis źródłowy NVD · ENCVSS 5,3 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
Open WebUI before 0.11.4 contains a missing authorization vulnerability that allows authenticated users to reach disabled model provider backends by supplying an explicit backend index. Attackers can pass the index as a path segment or query parameter on Ollama and OpenAI-compatible listing routes…
Opis źródłowy NVD · ENCVSS 5,3 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
The CodeAtoZ B2B Suite for WooCommerce WordPress plugin before 1.6.1 does not properly restrict access to guest-submitted quotes, allowing unauthenticated users to retrieve another guest's quote, including the buyer's name, email address and requested line items, by supplying an enumerable…
Opis źródłowy NVD · ENCVSS 5,3 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
The WP Data Access WordPress plugin before 5.5.84 does not restrict its database table export action to authorized users, gating it only with a token that the WP Data Access WordPress plugin before 5.5.84 itself prints into the public pages on which it displays a table, allowing unauthenticated…
Opis źródłowy NVD · ENCVSS 5,3 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
Admidio before 5.0.16 contains an information disclosure vulnerability that allows unauthenticated attackers to view role-restricted weblinks because rss/links.php omits the category_view role-visibility filter. Attackers can request the weblinks RSS feed for an organization to retrieve link…
Opis źródłowy NVD · ENCVSS 5,3 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
Arkon through 0.9.2 contains a missing authorization vulnerability in list_skill_versions that allows authenticated employees to read other departments' skill version metadata by bypassing the can_access_skill check. Attackers holding the default skill:read permission can request GET…
Opis źródłowy NVD · ENCVSS 5,3 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
Steedos Platform through 3.0.15-beta.51 contains an authorization bypass vulnerability that allows authenticated users to read other tenants' report definitions by querying the reports object. Because objectql's callAdapter skips space filtering for enable_space_global objects on find/findOne,…
Opis źródłowy NVD · ENCVSS 5,3 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
APITable through 1.14.0-beta contains an authorization bypass vulnerability that allows authenticated users to read node descriptions from other spaces by supplying a user-controlled nodeId. Attackers can request GET /node/{nodeId}/description, which skips space membership and node permission…
Opis źródłowy NVD · ENCVSS 5,3 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
CVSS
5,3
EPSS
0,27 %
Poprawka
Status poprawki nieustalony
Publikacja
Aktualizacja NVD
Podatności: opis, rekomendacja, CVSS, EPSS i daty źródłowe. Rekomendacja nie potwierdza podatności własnego zasobu.
Aureus ERP through 1.6.0 contains an authorization bypass vulnerability that allows authenticated API users to create or move records into disallowed companies by supplying a foreign company_id. Attackers can submit create or update requests to plugin REST API endpoints such as partners, sales, or…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,3 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
The AWP Classifieds WordPress plugin before 4.4.9 does not verify that a request is authorised to view a listing when a payment transaction is referenced, allowing unauthenticated attackers to bypass the ownership check on the ad submission page and read the private contact email stored on any…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,3 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
Colanode server through 0.4.7 contains a path traversal vulnerability that allows authenticated users to read arbitrary .jpeg files by supplying an encoded traversal sequence in avatarId. Attackers can send percent-encoded ../ sequences to GET /client/v1/avatars/:avatarId to escape the avatars…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,3 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated users to post messages containing attacker-controlled iframes through the messenger's HTMLPurifier SafeIframe branch. Attackers can craft a message with a malicious iframe that is…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,3 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform server-side authorization checks for requests to schedule special operations. This could allow an authenticated attacker with minimal privileges to schedule unauthorized…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,3 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform server-side authorization checks for requests to modify the state of scheduled actions. This could allow an authenticated attacker with minimal privileges to retry, stop, or…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,3 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
The LTL Freight Quotes WordPress plugin before 4.2.19 does not perform any authorization check or validation on one of its REST routes that writes to the database, allowing unauthenticated users to modify some of the LTL Freight Quotes WordPress plugin before 4.2.19's stored settings.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,3 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
The Avada (Fusion) Builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.16.1 via the 'args[link_target]' parameter. This makes it possible for unauthenticated attackers to extract arbitrary user meta values for any user ID, including…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,3 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
Erupt through 2.3.0 contains an HQL injection vulnerability that allows authenticated users to bypass tree-scoped data filters by injecting unescaped quotes into the linkTreeVal parameter of POST /erupt-api/data/table/{erupt}. Attackers holding query permission on entities with String-keyed…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,3 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
When a username for an Active Directory connection is a domain without a local part, the auth0-lock library initiates the authentication transaction with a GET request instead of a POST request. As a result, user-submitted form data is appended to the URL as query string parameters.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,3 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
A flaw was found in libtirpc. A remote attacker can exploit this vulnerability by sending specially crafted PMAPPROC_DUMP replies to a client application that uses the pmap_getmaps() function against an attacker-controlled host. This unbounded decoding can lead to excessive memory and CPU…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,3 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. Prior to version 2.4.0, InvoiceShelf invoice, estimate, and recurring-invoice creation paths accept client-supplied total, sub_total, tax, discount_val, and…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,3 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
zhontai Admin.Core through 10.1.0 contains an authorization bypass vulnerability that allows authenticated users to ignore department DataScope restrictions by supplying out-of-scope record ids. Attackers holding user or organization module permissions with Dept or Self scope can call UserService…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,3 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
waynboot-mall through 2.0.0 contains an insecure direct object reference vulnerability in AddressController that allows authenticated members to modify or delete other members' shipping addresses. Attackers can enumerate auto-increment address ids and send POST /address or DELETE…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,3 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
SurrealDB from 3.0.0 before 3.3.0 contains a missing authentication vulnerability in the revoke RPC method that allows low-privileged or unauthenticated callers to invalidate other users' refresh tokens without proof of possession. Attackers can obtain grant identifiers via ACCESS SHOW ALL with…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,3 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
LibreNMS before 26.9.0 contains a path traversal vulnerability in nfsen_channel_common.inc.php that allows authenticated users to read unauthorized RRD data by injecting ../ sequences into the channel parameter. Attackers with access to one NFSen-enabled device can request graph.php with a…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,3 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
Open WebUI before 0.11.4 contains a missing authorization vulnerability that allows authenticated users to reach disabled model provider backends by supplying an explicit backend index. Attackers can pass the index as a path segment or query parameter on Ollama and OpenAI-compatible listing routes…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,3 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
The CodeAtoZ B2B Suite for WooCommerce WordPress plugin before 1.6.1 does not properly restrict access to guest-submitted quotes, allowing unauthenticated users to retrieve another guest's quote, including the buyer's name, email address and requested line items, by supplying an enumerable…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,3 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
The WP Data Access WordPress plugin before 5.5.84 does not restrict its database table export action to authorized users, gating it only with a token that the WP Data Access WordPress plugin before 5.5.84 itself prints into the public pages on which it displays a table, allowing unauthenticated…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,3 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
Admidio before 5.0.16 contains an information disclosure vulnerability that allows unauthenticated attackers to view role-restricted weblinks because rss/links.php omits the category_view role-visibility filter. Attackers can request the weblinks RSS feed for an organization to retrieve link…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,3 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
Arkon through 0.9.2 contains a missing authorization vulnerability in list_skill_versions that allows authenticated employees to read other departments' skill version metadata by bypassing the can_access_skill check. Attackers holding the default skill:read permission can request GET…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,3 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
Steedos Platform through 3.0.15-beta.51 contains an authorization bypass vulnerability that allows authenticated users to read other tenants' report definitions by querying the reports object. Because objectql's callAdapter skips space filtering for enable_space_global objects on find/findOne,…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,3 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
APITable through 1.14.0-beta contains an authorization bypass vulnerability that allows authenticated users to read node descriptions from other spaces by supplying a user-controlled nodeId. Attackers can request GET /node/{nodeId}/description, which skips space membership and node permission…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,3 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
5,3
0,27 %
Publikacja
Aktualizacja NVD
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.