Podatności

Aureus ERP through 1.6.0 contains a stored cross-site scripting vulnerability in HolidayAction.php that allows authenticated users to inject scripts via unescaped holiday names rendered as HtmlString. Attackers permitted to create Public Holidays or Mandatory Days can store JavaScript payloads…

CVSS 5,1 · EPSS 0,22 % · rekomendacja wg zapisanej polityki

Koillection through 1.8.4 contains a stored cross-site scripting vulnerability that allows authenticated users to upload HTML files as Datum file attachments lacking MIME restrictions. Attackers can upload HTML payloads via POST /api/data/{id}/file, served as text/html from public/uploads,…

CVSS 5,1 · EPSS 0,22 % · rekomendacja wg zapisanej polityki

phpMyFAQ from 4.0.0 before 4.1.9 contains an incorrect authorization vulnerability that allows delegated admins lacking the editnews right to modify news by calling PUT /admin/api/news/update, which checks NEWS_DELETE instead of NEWS_EDIT. Attackers holding addnews and delnews can read the…

CVSS 5,1 · EPSS 0,21 % · rekomendacja wg zapisanej polityki

"Handmade Marketplace App - Creema" provided by CREEMA LTD. contains an open redirect vulnerability. When accessing a specially crafted URL, a website set up by the attacker may be displayed within the app's screen of a user. As a result, the user may become a victim of a phishing attack.

CVSS 5,1 · EPSS 0,21 % · rekomendacja wg zapisanej polityki

Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malicious script by uploading a file with HTML/script markup embedded in its filename, which bypasses the paramFilter since uploaded-file names arrive through…

CVSS 5,1 · EPSS 0,21 % · rekomendacja wg zapisanej polityki

A vulnerability was found in SourceCodester Inventory System 1.0. This issue affects some unknown processing of the file /api/transactions_handler.php?action=save_sale of the component Sales Management Handler. The manipulation of the argument Hsn_Code results in cross site scripting. It is…

CVSS 5,1 · EPSS 0,2 % · rekomendacja wg zapisanej polityki

"ゲオアプリ" provided by GEO CORPORATION is vulnerable to improper authorization in handler for a custom URL scheme. An attacker may be able to cause the application's in-app browser to access an arbitrary website, potentially leading to phishing attacks or disclosure of a service's session ID.

CVSS 5,1 · EPSS 0,19 % · rekomendacja wg zapisanej polityki

phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains a stored cross-site scripting vulnerability in SvgSanitizer that allows users with FAQ_EDIT permission to bypass sanitization using XML DTD custom entities. Attackers can upload an SVG defining an entity that expands to javascript in an anchor href,…

CVSS 5,1 · EPSS 0,18 % · rekomendacja wg zapisanej polityki

Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject HTML/script markup by uploading a poll-response attachment with a malicious filename that bypasses the paramFilter sanitization applied to $_FILES. Attackers…

CVSS 5,1 · EPSS 0,18 % · rekomendacja wg zapisanej polityki

phpMyFAQ from 4.2.0-alpha before 4.2.0-beta contains a stored cross-site scripting vulnerability in SvgSanitizer that allows FAQ editors to store executable SVG files. Attackers can split script tags around removed tokens like processing instructions so single-pass removal reassembles them,…

CVSS 5,1 · EPSS 0,17 % · rekomendacja wg zapisanej polityki

Incomplete cleanup vulnerability in ABB My Control System. This issue affects My Control System: 26.4 and 26.5.

CVSS 5,1 · EPSS 0,15 % · rekomendacja wg zapisanej polityki

Out-of-bounds write vulnerability in Hitachi Disk Array Driver for AIX and Hitachi Disk Array Driver for Virtual I/O Server. This issue affects Hitachi Disk Array Driver for AIX: from 01-00 before 01-23-/A; Hitachi Disk Array Driver for Virtual I/O Server: from 01-04 before 01-23-/A.

CVSS 5,1 · EPSS 0,13 % · rekomendacja wg zapisanej polityki

"ゲオアプリ" provided by GEO CORPORATION contains an issue with cleartext storage of sensitive information, which may allow an attacker to obtain the password of a user of the affected application.

CVSS 5,1 · EPSS 0,1 % · rekomendacja wg zapisanej polityki

IBM Db2 Genius Hub 1.0 could allow a local attacker to obtain sensitive information due to improper verification of cryptographic signature.

CVSS 5,1 · EPSS 0,1 % · rekomendacja wg zapisanej polityki

IBM i 7.3, 7.4, 7.5, and 7.6 is vulnerable to a denial of service to Digital Certificate Manager (DCM) for System TLS using applications attempting to create secure network connections. A bad actor could use this to prevent a service from starting or cause it to fallback to non-secure connections.

CVSS 5,1 · EPSS 0,06 % · rekomendacja wg zapisanej polityki

Element X iOS is a Matrix iOS Client provided by Element. Element X iOS before version 26.05.0 fails to check the URL allowlist when parsing io.element.call://. If an attacker is able to trick the user into opening a maliciously crafted io.element.call:// URL, they are able to load an…

CVSS 5,1 · rekomendacja wg zapisanej polityki

A security vulnerability has been detected in grandnode grandnode2 up to 2.3.0. This impacts the function ProductImportDataObject.PrepareProductPictures of the component Excel Import. The manipulation of the argument Picture1/Picture2/Picture3 leads to path traversal. The attack can be initiated…

CVSS 5,1 · rekomendacja wg zapisanej polityki

Koalixcrm through 1.14.0 contains a stored cross-site scripting vulnerability that allows staff users to inject script by storing malicious task titles rendered unescaped by Task.link_to_task(). Attackers can embed HTML or script that executes when administrators open the task changelist or change…

CVSS 5,1 · rekomendacja wg zapisanej polityki

Frappe Helpdesk before 1.26.0 contains an authorization bypass vulnerability that allows authenticated portal users to create tickets impersonating other customers by supplying a raised_by value. Attackers can call the hd_ticket.api.new endpoint with a victim's email to plant phishing tickets in…

CVSS 5,1 · rekomendacja wg zapisanej polityki

A Path Traversal vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to create, modify, arbitrary directories the host file system.

CVSS 5,0 · EPSS 0,47 % · rekomendacja wg zapisanej polityki

Improper access control in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

CVSS 4,9 · EPSS 0,86 % · rekomendacja wg zapisanej polityki

An issue in Matomo v.5.11.2 allows a remote attacker to obtain sensitive information via the SiteContentDetector / SitesManager component

CVSS 5,0 · EPSS 0,3 % · rekomendacja wg zapisanej polityki

10up Distributor before 2.3.2 contains a PHP object injection vulnerability that allows Contributor-level users to instantiate PHP objects by double unserializing distributed post meta. Attackers can store a serialized PHP string as meta, which set_meta() in includes/utils.php unserializes on the…

CVSS 5,0 · EPSS 0,27 % · rekomendacja wg zapisanej polityki

The Post Export Import with Media plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.17.2 via the 'theme_slug' parameter. This makes it possible for authenticated attackers, with administrator-level access and above, to perform actions on files…

CVSS 4,9 · EPSS 0,77 % · rekomendacja wg zapisanej polityki

Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to validate the invited recipient's email address when redeeming team and guest invitation tokens, which allows an authenticated attacker to join a team or gain unauthorized access to private channels…

CVSS 5,0 · EPSS 0,16 % · rekomendacja wg zapisanej polityki