Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Data publikacji: ostatnie 7 dni. Starsze wpisy dostępne w pełnym katalogu i widoku KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Affected devices do not properly sanitize calculated signal data contained in imported CSV trace files before rendering it on the Trace page.
This could allow an attacker to social engineer an authorized user who holds the function right “Read diagnostics” into importing a specially crafted…
Opis źródłowy NVD · ENCVSS 5,3 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
A use of hard-coded cryptographic key vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4 all versions, FortiSandbox Cloud 5.2.0 through 5.2.1, FortiSandbox Cloud 5.0.0 through 5.0.6, FortiSandbox Cloud 4.4 all versions may allow attacker…
Opis źródłowy NVD · ENCVSS 5,3 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
Distributor before 2.3.2 contains a missing authorization vulnerability that allows Contributor-level users to invoke external connection AJAX actions intended for manage_options users. Attackers can call dt_verify_external_connection with a chosen endpointId and url to send stored connection…
Opis źródłowy NVD · ENCVSS 5,3 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
Jorani before 1.0.4 contains an insecure direct object reference vulnerability that allows authenticated users to modify, delete, and view other employees' requests by authorizing by operation name only. Attackers can supply numeric request ids to Leaves::edit(), Extra::edit(), Leaves::delete(),…
Opis źródłowy NVD · ENCVSS 5,3 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
FreeRDP from 3.0.0 before 3.32.0 contains an uninitialized memory disclosure vulnerability in smartcard_Transmit_Call that allows malicious RDP servers to read client memory. Servers can send SCardTransmit requests with an invalid card handle and nonzero receive length, causing…
Opis źródłowy NVD · ENCVSS 5,3 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
DooTask through 1.9.66 contains a missing authorization vulnerability in WebSocketDialog::checkDialog() that skips the membership check for dialogs with group_type 'okr'. Authenticated users can supply the dialog_id of OKR comment dialogs to msg__list, msg__one, or msg__send* endpoints to read and…
Opis źródłowy NVD · ENCVSS 5,3 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
Backdrop CMS Core 1.35.x before 1.35.2 and 1.34.x before 1.34.6 does not sufficiently validate uploaded SVG images to ensure they lack potentially dangerous SVG tags. SVG images can contain clickable links or executable scripting. By uploading a crafted SVG, it is possible to execute scripting in…
Opis źródłowy NVD · ENCVSS 5,3 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
Open WES through 1.0.0 contains an authorization bypass vulnerability that allows authenticated users to modify other warehouses' stock records because GlobalGatewayFilter never enforces auth_warehouse scoping. Attackers holding the menu permission can enumerate sequential IDs on…
Opis źródłowy NVD · ENCVSS 5,3 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
The WP-BusinessDirectory WordPress plugin through 4.0.2 does not restrict the type or destination of files saved by an unauthenticated upload handler, allowing unauthenticated attackers to write files with arbitrary content to arbitrary locations, though not to execute code on a default server…
Opis źródłowy NVD · ENCVSS 5,3 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
The NEX-Forms WordPress plugin before 9.3.1 does not perform any authorization, ownership or request-validation checks before updating stored form entries, allowing unauthenticated attackers to overwrite, permanently erase, reassign or append to any previously submitted form entry by referencing…
Opis źródłowy NVD · ENCVSS 5,3 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
FreeRDP 3.0.0 before 3.32.0 contains a heap use-after-free vulnerability in smartcard emulation when SCARD_IOCTL_DISCONNECT and SCARD_IOCTL_TRANSMIT operate concurrently on one card handle. A malicious RDP server can overlap these IRPs through separate context workers to free and reuse the…
Opis źródłowy NVD · ENCVSS 5,3 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restrict access to database queries used for subnet management. This could allow an authenticated attacker to read, modify, or delete subnet configurations, leading to unauthorized…
Opis źródłowy NVD · ENCVSS 5,3 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
Improper Validation of Specified Quantity in Input vulnerability in Magepeople inc. Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Removing Important Client Functionality.This issue affects Booking and Rental Manager: from n/a through 2.8.0.
Opis źródłowy NVD · ENCVSS 5,3 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
External control of assumed-Immutable web parameter issue exists in EC-CUBE plugin (for EC-CUBE 4 series) "AmazonPay Plugin". If exploited, the user may be redirected to an arbitrary website during the ordering process. As a result, user's account information may be obtained.
Opis źródłowy NVD · ENCVSS 5,3 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
ChatWiki through 2.9.6 contains an insecure direct object reference vulnerability that allows authenticated users to access another tenant's form filters by supplying arbitrary form_id values. Attackers can send sequential form_id values to getFormFilterList, getFormFilterInfo and…
Opis źródłowy NVD · ENCVSS 5,3 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
abp-next-admin 10.2.0 through 10.6.0 contains an insecure direct object reference vulnerability in the LINGYUN.Abp.AIManagement module that allows authenticated users to access other users' AI chat conversations by supplying their ConversationId. Attackers holding the Chat permission can call…
Opis źródłowy NVD · ENCVSS 5,3 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
B3log Solo through 4.4.0 contains a missing authorization vulnerability in ArticleConsole that allows authenticated authors to access other authors' articles by omitting per-author ownership checks. Attackers can query the console articles status endpoint to list other authors' drafts, probe draft…
Opis źródłowy NVD · ENCVSS 5,3 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
roncoo-education through 25.0.0-RELEASE contains an insecure direct object reference vulnerability that allows authenticated users to cancel or continue payment on other users' orders. Attackers can supply another user's order number to the pay cancel or continue endpoints to close pending orders…
Opis źródłowy NVD · ENCVSS 5,3 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
TaskingAI through 0.3.0 contains a server-side request forgery vulnerability that allows authenticated attackers to make the backend send arbitrary HTTP requests by supplying an unvalidated OpenAPI servers[0].url in a user-defined action. Attackers holding a project API key or console admin login…
Opis źródłowy NVD · ENCVSS 5,3 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
Shopizer through 3.2.5 contains an authorization bypass vulnerability that allows authenticated customers to post reviews as other customers by supplying a customerId field. Attackers can send crafted requests to POST /api/v1/auth/products/{id}/reviews to publish reviews and ratings attributed to…
Opis źródłowy NVD · ENCVSS 5,3 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
An Improper Validation of Specified Quantity in Input vulnerability in the
l2ald
of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker with access to an ICCP peer session to cause memory disclosure and disruption of the l2ald daemon via malformed ICCP packets.
Opis źródłowy NVD · ENCVSS 5,3 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
CVSS
5,3
EPSS
0,22 %
Poprawka
Status poprawki nieustalony
Publikacja
Aktualizacja NVD
Podatności: opis, rekomendacja, CVSS, EPSS i daty źródłowe. Rekomendacja nie potwierdza podatności własnego zasobu.
Affected devices do not properly sanitize calculated signal data contained in imported CSV trace files before rendering it on the Trace page.
This could allow an attacker to social engineer an authorized user who holds the function right “Read diagnostics” into importing a specially crafted…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,3 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
A use of hard-coded cryptographic key vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4 all versions, FortiSandbox Cloud 5.2.0 through 5.2.1, FortiSandbox Cloud 5.0.0 through 5.0.6, FortiSandbox Cloud 4.4 all versions may allow attacker…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,3 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
Distributor before 2.3.2 contains a missing authorization vulnerability that allows Contributor-level users to invoke external connection AJAX actions intended for manage_options users. Attackers can call dt_verify_external_connection with a chosen endpointId and url to send stored connection…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,3 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
Jorani before 1.0.4 contains an insecure direct object reference vulnerability that allows authenticated users to modify, delete, and view other employees' requests by authorizing by operation name only. Attackers can supply numeric request ids to Leaves::edit(), Extra::edit(), Leaves::delete(),…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,3 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
FreeRDP from 3.0.0 before 3.32.0 contains an uninitialized memory disclosure vulnerability in smartcard_Transmit_Call that allows malicious RDP servers to read client memory. Servers can send SCardTransmit requests with an invalid card handle and nonzero receive length, causing…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,3 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
DooTask through 1.9.66 contains a missing authorization vulnerability in WebSocketDialog::checkDialog() that skips the membership check for dialogs with group_type 'okr'. Authenticated users can supply the dialog_id of OKR comment dialogs to msg__list, msg__one, or msg__send* endpoints to read and…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,3 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
Backdrop CMS Core 1.35.x before 1.35.2 and 1.34.x before 1.34.6 does not sufficiently validate uploaded SVG images to ensure they lack potentially dangerous SVG tags. SVG images can contain clickable links or executable scripting. By uploading a crafted SVG, it is possible to execute scripting in…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,3 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
Open WES through 1.0.0 contains an authorization bypass vulnerability that allows authenticated users to modify other warehouses' stock records because GlobalGatewayFilter never enforces auth_warehouse scoping. Attackers holding the menu permission can enumerate sequential IDs on…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,3 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
The WP-BusinessDirectory WordPress plugin through 4.0.2 does not restrict the type or destination of files saved by an unauthenticated upload handler, allowing unauthenticated attackers to write files with arbitrary content to arbitrary locations, though not to execute code on a default server…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,3 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
The NEX-Forms WordPress plugin before 9.3.1 does not perform any authorization, ownership or request-validation checks before updating stored form entries, allowing unauthenticated attackers to overwrite, permanently erase, reassign or append to any previously submitted form entry by referencing…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,3 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
FreeRDP 3.0.0 before 3.32.0 contains a heap use-after-free vulnerability in smartcard emulation when SCARD_IOCTL_DISCONNECT and SCARD_IOCTL_TRANSMIT operate concurrently on one card handle. A malicious RDP server can overlap these IRPs through separate context workers to free and reuse the…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,3 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restrict access to database queries used for subnet management. This could allow an authenticated attacker to read, modify, or delete subnet configurations, leading to unauthorized…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,3 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
Improper Validation of Specified Quantity in Input vulnerability in Magepeople inc. Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Removing Important Client Functionality.This issue affects Booking and Rental Manager: from n/a through 2.8.0.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,3 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
External control of assumed-Immutable web parameter issue exists in EC-CUBE plugin (for EC-CUBE 4 series) "AmazonPay Plugin". If exploited, the user may be redirected to an arbitrary website during the ordering process. As a result, user's account information may be obtained.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,3 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
ChatWiki through 2.9.6 contains an insecure direct object reference vulnerability that allows authenticated users to access another tenant's form filters by supplying arbitrary form_id values. Attackers can send sequential form_id values to getFormFilterList, getFormFilterInfo and…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,3 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
abp-next-admin 10.2.0 through 10.6.0 contains an insecure direct object reference vulnerability in the LINGYUN.Abp.AIManagement module that allows authenticated users to access other users' AI chat conversations by supplying their ConversationId. Attackers holding the Chat permission can call…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,3 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
B3log Solo through 4.4.0 contains a missing authorization vulnerability in ArticleConsole that allows authenticated authors to access other authors' articles by omitting per-author ownership checks. Attackers can query the console articles status endpoint to list other authors' drafts, probe draft…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,3 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
roncoo-education through 25.0.0-RELEASE contains an insecure direct object reference vulnerability that allows authenticated users to cancel or continue payment on other users' orders. Attackers can supply another user's order number to the pay cancel or continue endpoints to close pending orders…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,3 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
TaskingAI through 0.3.0 contains a server-side request forgery vulnerability that allows authenticated attackers to make the backend send arbitrary HTTP requests by supplying an unvalidated OpenAPI servers[0].url in a user-defined action. Attackers holding a project API key or console admin login…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,3 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
Shopizer through 3.2.5 contains an authorization bypass vulnerability that allows authenticated customers to post reviews as other customers by supplying a customerId field. Attackers can send crafted requests to POST /api/v1/auth/products/{id}/reviews to publish reviews and ratings attributed to…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,3 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
An Improper Validation of Specified Quantity in Input vulnerability in the
l2ald
of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker with access to an ICCP peer session to cause memory disclosure and disruption of the l2ald daemon via malformed ICCP packets.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,3 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
5,3
0,22 %
Publikacja
Aktualizacja NVD
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.