Podatności

Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject HTML/script markup by uploading a poll-response attachment with a malicious filename that bypasses the paramFilter sanitization applied to $_FILES. Attackers…

CVSS 5,1 · EPSS 0,18 % · rekomendacja wg zapisanej polityki

phpMyFAQ from 4.2.0-alpha before 4.2.0-beta contains a stored cross-site scripting vulnerability in SvgSanitizer that allows FAQ editors to store executable SVG files. Attackers can split script tags around removed tokens like processing instructions so single-pass removal reassembles them,…

CVSS 5,1 · EPSS 0,17 % · rekomendacja wg zapisanej polityki

Incomplete cleanup vulnerability in ABB My Control System. This issue affects My Control System: 26.4 and 26.5.

CVSS 5,1 · EPSS 0,15 % · rekomendacja wg zapisanej polityki

Out-of-bounds write vulnerability in Hitachi Disk Array Driver for AIX and Hitachi Disk Array Driver for Virtual I/O Server. This issue affects Hitachi Disk Array Driver for AIX: from 01-00 before 01-23-/A; Hitachi Disk Array Driver for Virtual I/O Server: from 01-04 before 01-23-/A.

CVSS 5,1 · EPSS 0,13 % · rekomendacja wg zapisanej polityki

"ゲオアプリ" provided by GEO CORPORATION contains an issue with cleartext storage of sensitive information, which may allow an attacker to obtain the password of a user of the affected application.

CVSS 5,1 · EPSS 0,1 % · rekomendacja wg zapisanej polityki

IBM Db2 Genius Hub 1.0 could allow a local attacker to obtain sensitive information due to improper verification of cryptographic signature.

CVSS 5,1 · EPSS 0,1 % · rekomendacja wg zapisanej polityki

IBM i 7.3, 7.4, 7.5, and 7.6 is vulnerable to a denial of service to Digital Certificate Manager (DCM) for System TLS using applications attempting to create secure network connections. A bad actor could use this to prevent a service from starting or cause it to fallback to non-secure connections.

CVSS 5,1 · EPSS 0,06 % · rekomendacja wg zapisanej polityki

Element X iOS is a Matrix iOS Client provided by Element. Element X iOS before version 26.05.0 fails to check the URL allowlist when parsing io.element.call://. If an attacker is able to trick the user into opening a maliciously crafted io.element.call:// URL, they are able to load an…

CVSS 5,1 · rekomendacja wg zapisanej polityki

A security vulnerability has been detected in grandnode grandnode2 up to 2.3.0. This impacts the function ProductImportDataObject.PrepareProductPictures of the component Excel Import. The manipulation of the argument Picture1/Picture2/Picture3 leads to path traversal. The attack can be initiated…

CVSS 5,1 · rekomendacja wg zapisanej polityki

Koalixcrm through 1.14.0 contains a stored cross-site scripting vulnerability that allows staff users to inject script by storing malicious task titles rendered unescaped by Task.link_to_task(). Attackers can embed HTML or script that executes when administrators open the task changelist or change…

CVSS 5,1 · rekomendacja wg zapisanej polityki

Frappe Helpdesk before 1.26.0 contains an authorization bypass vulnerability that allows authenticated portal users to create tickets impersonating other customers by supplying a raised_by value. Attackers can call the hd_ticket.api.new endpoint with a victim's email to plant phishing tickets in…

CVSS 5,1 · rekomendacja wg zapisanej polityki

A Path Traversal vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to create, modify, arbitrary directories the host file system.

CVSS 5,0 · EPSS 0,47 % · rekomendacja wg zapisanej polityki

Improper access control in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

CVSS 4,9 · EPSS 0,86 % · rekomendacja wg zapisanej polityki

An issue in Matomo v.5.11.2 allows a remote attacker to obtain sensitive information via the SiteContentDetector / SitesManager component

CVSS 5,0 · EPSS 0,3 % · rekomendacja wg zapisanej polityki

10up Distributor before 2.3.2 contains a PHP object injection vulnerability that allows Contributor-level users to instantiate PHP objects by double unserializing distributed post meta. Attackers can store a serialized PHP string as meta, which set_meta() in includes/utils.php unserializes on the…

CVSS 5,0 · EPSS 0,27 % · rekomendacja wg zapisanej polityki

The Post Export Import with Media plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.17.2 via the 'theme_slug' parameter. This makes it possible for authenticated attackers, with administrator-level access and above, to perform actions on files…

CVSS 4,9 · EPSS 0,77 % · rekomendacja wg zapisanej polityki

Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to validate the invited recipient's email address when redeeming team and guest invitation tokens, which allows an authenticated attacker to join a team or gain unauthorized access to private channels…

CVSS 5,0 · EPSS 0,16 % · rekomendacja wg zapisanej polityki

The WP Data Access WordPress plugin before 5.5.88 does not have authorisation and CSRF checks in one of its actions, allowing any authenticated user, such as a subscriber, to make the server open connections to arbitrary hosts and ports, including internal ones, and read back the outcome.

CVSS 5,0 · EPSS 0,11 % · rekomendacja wg zapisanej polityki

Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network.

CVSS 4,9 · EPSS 0,61 % · rekomendacja wg zapisanej polityki

Wheels CLI through 4.1.0 does not verify that the local development server answering its HTTP requests belongs to the current project. A process listening on a port targeted by the CLI can receive the project's reload password and code submitted through wheels reload or wheels console; console…

CVSS 5,0 · EPSS 0,1 % · rekomendacja wg zapisanej polityki

Incorrect permission assignment (CWE-732) in the standalone installer for EA Javelin Anticheat (versions 1.0.14329371, 1.0.14547437, 1.0.14789537, and 1.0.14940698) on Windows allows a local non-administrative user to elevate privileges to NT AUTHORITY\SYSTEM by modifying the EAAntiCheatService…

CVSS 5,0 · EPSS 0,08 % · rekomendacja wg zapisanej polityki

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

CVSS 4,9 · EPSS 0,54 % · rekomendacja wg zapisanej polityki

Redash is a package for data visualization and sharing. From 10.0.0 until 26.9.0, the JSON data source query runner in redash/query_runner/json_ds.py used _get_all_results() to combine its configured base_url with a user-supplied query URL by using urljoin. An absolute query URL replaced the…

CVSS 4,9 · EPSS 0,41 % · rekomendacja wg zapisanej polityki

Zohocorp ManageEngine Malware Protection Plus versions before 1.0.64.12 are affected by insufficient driver signature validation in MEARWService.

CVSS 4,9 · EPSS 0,41 % · rekomendacja wg zapisanej polityki

The FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler plugin for WordPress is vulnerable to generic SQL Injection via the 'products[*].variants[*].<attacker-chosen key>' parameter in all versions up to, and including, 1.7.0 due to insufficient escaping on the user supplied parameter…

CVSS 4,9 · EPSS 0,38 % · rekomendacja wg zapisanej polityki