Podatności

The HootBoard WordPress plugin through 3.1.4 does not perform any authorisation check on some of its REST endpoints, and does not escape the values stored through them before outputting them in a public page, allowing unauthenticated users to inject arbitrary web scripts that will execute in the…

CVSS 8,8 · EPSS 0,34 % · rekomendacja wg zapisanej polityki

The Web Vitals Tracking WordPress plugin through 5.4.2 does not validate or escape performance measurements submitted by unauthenticated visitors before storing them and outputting them in a script context on an administrative page, allowing unauthenticated attackers to perform Stored Cross-Site…

CVSS 8,8 · EPSS 0,34 % · rekomendacja wg zapisanej polityki

Subscriber Broken Access Control in Progress Planner <= 1.10.0 versions.

CVSS 8,8 · EPSS 0,34 % · rekomendacja wg zapisanej polityki

Subscriber Privilege Escalation in JobZilla - Job Board WordPress Theme <= 2.2 versions.

CVSS 8,8 · EPSS 0,34 % · rekomendacja wg zapisanej polityki

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The…

CVSS 8,8 · EPSS 0,34 % · rekomendacja wg zapisanej polityki

The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.9 This is due to a missing ownership and capability check on the `user` parameter within the `process_edit()` function, which allows any…

CVSS 8,8 · EPSS 0,33 % · rekomendacja wg zapisanej polityki

Missing authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)

CVSS 8,8 · EPSS 0,33 % · rekomendacja wg zapisanej polityki

Incorrect authorization in Autofill in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)

CVSS 8,8 · EPSS 0,33 % · rekomendacja wg zapisanej polityki

Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVSS 8,8 · EPSS 0,33 % · rekomendacja wg zapisanej polityki

Use after free in Fonts in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVSS 8,8 · EPSS 0,33 % · rekomendacja wg zapisanej polityki

Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVSS 8,8 · EPSS 0,33 % · rekomendacja wg zapisanej polityki

Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVSS 8,8 · EPSS 0,33 % · rekomendacja wg zapisanej polityki

A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an administrative user of the interface. A successful exploit could allow an attacker to execute arbitrary…

CVSS 8,8 · EPSS 0,33 % · rekomendacja wg zapisanej polityki

A user who can open a fork pull request can place workflow content with a shared run-level concurrency group into a Gitea Actions run that is awaiting approval. When a later run in that group cancels the blocked job, the run becomes terminal while still marked as needing approval. If a maintainer…

CVSS 8,8 · EPSS 0,33 % · rekomendacja wg zapisanej polityki

Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVSS 8,8 · EPSS 0,32 % · rekomendacja wg zapisanej polityki

Information leak in Passwords in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)

CVSS 8,8 · EPSS 0,32 % · rekomendacja wg zapisanej polityki

Subscriber Privilege Escalation in WP User Profiles <= 2.7.3 versions.

CVSS 8,8 · EPSS 0,32 % · rekomendacja wg zapisanej polityki

Use after free in Track in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

CVSS 8,8 · EPSS 0,31 % · rekomendacja wg zapisanej polityki

Incorrect authorization in WebProtect in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)

CVSS 8,8 · EPSS 0,31 % · rekomendacja wg zapisanej polityki

Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, Nginx UI accepts the Node.Secret master credential through the node_secret query parameter in HTTP and WebSocket authentication paths instead of requiring the X-Node-Secret header. The credential can consequently…

CVSS 8,8 · EPSS 0,31 % · rekomendacja wg zapisanej polityki

Payload is a free and open source headless content management system. In @payloadcms/plugin-ecommerce versions before 3.90.0 and canary versions before 4.0.0-canary.34, use of the Stripe payment adapter can allow a Stripe order confirmation to be processed more than once under certain conditions.…

CVSS 8,8 · EPSS 0,31 % · rekomendacja wg zapisanej polityki

The Bluetooth Mesh On-Demand Private Proxy solicitation handler in subsys/bluetooth/mesh/solicitation.c copies a received Solicitation PDU into a fixed 17-byte stack buffer without bounding the source length. In sol_pdu_decrypt(), out is allocated as NET_BUF_SIMPLE(17) and then filled with…

CVSS 8,8 · EPSS 0,31 % · rekomendacja wg zapisanej polityki

Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, the api/cluster router exposes node and namespace mutation operations and cluster-wide Nginx reload or restart operations with AuthRequired but without RequireSecureSession. An authenticated OTP-enabled user…

CVSS 8,8 · EPSS 0,31 % · rekomendacja wg zapisanej polityki

Missing authorization in Autofill in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)

CVSS 8,8 · EPSS 0,31 % · rekomendacja wg zapisanej polityki

The click5 CRM add-on to Ninja Forms WordPress plugin through 1.0.1 does not sanitise and escape content submitted through an unauthenticated endpoint before outputting it back in an admin page, leading to Stored XSS which could be used against high privilege users such as admin.

CVSS 8,8 · EPSS 0,3 % · rekomendacja wg zapisanej polityki