Podatności

Improper path containment check in ikus060 rdiffweb 7.1.1 allows an authenticated user to cause the browse, restore, history and delete operations to resolve to a path outside the repository being operated on, via a percent-encoded traversal sequence (%2e%2e) in the request path, because the…

CVSS 4,6 · EPSS 0,23 % · rekomendacja wg zapisanej polityki

Fossify File Manager through 1.6.2 contains a path traversal vulnerability that allows crafted ZIP archives to write files outside the extraction folder by bypassing an unanchored startsWith check. Attackers can supply archive entries like ../<name>_x/file to create or overwrite files in sibling…

CVSS 4,6 · EPSS 0,21 % · rekomendacja wg zapisanej polityki

HPE NonStop MODULAR NSJ  contains a predictable seed vulnerability in Random Number Generation (PRNG)

CVSS 4,6 · EPSS 0,18 % · rekomendacja wg zapisanej polityki

Incomplete List of Disallowed Inputs (CWE-184) in the dangerous-extension confirmation of the archive object viewer (peach.pas, grid_obj_open) in PeaZip 10.5.0 through 11.2.0 on Windows allows an attacker who convinces a victim to open an entry of a crafted archive to execute a program, or an…

CVSS 4,6 · EPSS 0,13 % · rekomendacja wg zapisanej polityki

An external control of system or configuration setting vulnerability has been reported to affect QuRouter. If a local attacker gains an administrator account, they can then exploit the vulnerability to modify data on the system. We have already fixed the vulnerability in the following…

CVSS 4,6 · EPSS 0,11 % · rekomendacja wg zapisanej polityki

Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail to sanitize authentication tokens before writing them to server log entries, which allows an attacker with access to server logs to obtain valid session tokens or OAuth access tokens and impersonate…

CVSS 4,5 · EPSS 0,24 % · rekomendacja wg zapisanej polityki

Improper certificate validation in Windows Hello allows an authorized attacker to bypass a security feature locally.

CVSS 4,4 · EPSS 0,4 % · rekomendacja wg zapisanej polityki

Incorrect authorization in Windows Hello allows an authorized attacker to bypass a security feature locally.

CVSS 4,4 · EPSS 0,38 % · rekomendacja wg zapisanej polityki

No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

CVSS 4,4 · EPSS 0,32 % · rekomendacja wg zapisanej polityki

Time-of-check time-of-use (toctou) race condition in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to bypass a security feature locally.

CVSS 4,4 · EPSS 0,28 % · rekomendacja wg zapisanej polityki

Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to reject OAuth application sessions in the account type switch endpoint, which allows an attacker with a valid OAuth bearer token for a target user to permanently take over that user's SSO-backed…

CVSS 4,4 · EPSS 0,2 % · rekomendacja wg zapisanej polityki

A use-after-free exists in the Windows WFP packet-capture driver shipped with Akamai Guardicore Platform Agent (GPA) before 7.4. When an IPv6 proxy/redirect rule is active, a local attacker with Administrator privileges can send a single crafted outbound IPv6 packet via a raw IPV6_HDRINCL socket…

CVSS 4,4 · EPSS 0,14 % · rekomendacja wg zapisanej polityki

A security vulnerability in HPE NonStop TSQLEXE may cause application crash via a crafted SQL query.

CVSS 4,4 · EPSS 0,13 % · rekomendacja wg zapisanej polityki

NVIDIA Warp contains a vulnerability where an attacker could cause a heap-based buffer overflow. A successful exploit of this vulnerability might lead to denial of service.

CVSS 4,4 · EPSS 0,13 % · rekomendacja wg zapisanej polityki

Safing Portmaster before 2.2.5 contains a missing authorization vulnerability that allows unprivileged local processes to force updates by calling the POST /api/v1/updates/from-url endpoint registered with api.PermitAnyone. Attackers can supply an attacker-controlled index URL that bypasses…

CVSS 4,4 · EPSS 0,12 % · rekomendacja wg zapisanej polityki

Uncaught exception vulnerability in Samsung Open Source Vyond allows Input Data Manipulation. This issue affects Vyond: before fb10a5c8b833df7f152d4a563a61d6090a1790d7.

CVSS 4,4 · EPSS 0,11 % · rekomendacja wg zapisanej polityki

Improper validation of array index vulnerability in Samsung Open Source Vyond allows Input Data Manipulation. This issue affects Vyond: before be6e297b0c4836e20d73b2f8a40a561ea496ebaa.

CVSS 4,4 · EPSS 0,11 % · rekomendacja wg zapisanej polityki

Adobe Commerce is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploitation of this issue does not require user…

CVSS 4,3 · EPSS 0,47 % · rekomendacja wg zapisanej polityki

Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

CVSS 4,3 · EPSS 0,43 % · rekomendacja wg zapisanej polityki

Gitea's API and web issue-search paths do not treat restricted accounts as anonymous viewers when evaluating Limited-visibility repository owners. A restricted user can search and retrieve issue titles and bodies that should be hidden by the owner's visibility policy. Keyword matching can also…

CVSS 4,3 · EPSS 0,4 % · rekomendacja wg zapisanej polityki

Gitea's user SSH and GPG key-list API endpoints omit the profile visibility check applied by their web equivalents. A restricted account can retrieve public keys, key titles, fingerprints, and GPG-embedded email addresses belonging to Limited-visibility users. The disclosure concerns public key…

CVSS 4,3 · EPSS 0,4 % · rekomendacja wg zapisanej polityki

Gitea's Maven upload handler reads checksum uploads entirely into memory and returns before enforcing package-size quotas. An authenticated user with package-publish permission can submit an oversized body to a checksum endpoint despite legitimate checksum values being at most 128 bytes. This…

CVSS 4,3 · EPSS 0,39 % · rekomendacja wg zapisanej polityki

Gitea's package registry grants authenticated users read access to packages owned by Limited-visibility users without excluding restricted accounts. A restricted user can enumerate and download those packages despite the visibility policy that should prevent this access. The issue affects…

CVSS 4,3 · EPSS 0,37 % · rekomendacja wg zapisanej polityki

Gitea's user organization-list API includes Limited-visibility organizations for authenticated restricted accounts without applying the visibility restriction enforced by the single-organization endpoint. A restricted user can list a known user's public organization memberships and retrieve…

CVSS 4,3 · EPSS 0,37 % · rekomendacja wg zapisanej polityki

Gitea's activity-feed and contribution-heatmap API handlers do not apply the profile visibility check for restricted accounts viewing Limited-visibility users. A restricted user can retrieve activity records and contribution timestamps that the corresponding profile routes deny. Exposed activity…

CVSS 4,3 · EPSS 0,37 % · rekomendacja wg zapisanej polityki