Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Data publikacji: ostatnie 7 dni. Starsze wpisy dostępne w pełnym katalogu i widoku KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
pig through 4.1.1 contains a missing authorization vulnerability in SysUserController.user that allows any authenticated user to read other users' profiles via GET /admin/user/details/{id}. Low-privilege attackers can enumerate sequential user ids to obtain usernames, real names, phone numbers,…
Opis źródłowy NVD · ENCVSS 4,3 · EPSS 0,25 % · rekomendacja wg zapisanej polityki
The Blog2Social – Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 9.1.4. This is due to the b2s_ship_item and b2s_ship_item_reload_url AJAX handlers lacking per-object authorization on the postId…
Opis źródłowy NVD · ENCVSS 4,3 · EPSS 0,25 % · rekomendacja wg zapisanej polityki
Tbed through 20240319 contains a missing authorization vulnerability that allows any authenticated user to rename other users' images through the /admin/setImgFileName endpoint. Attackers can supply a victim's imgname, exposed in public image URLs and album listings, to overwrite display names…
Opis źródłowy NVD · ENCVSS 4,3 · EPSS 0,25 % · rekomendacja wg zapisanej polityki
Peppermint through 0.5.5 contains a missing authorization vulnerability that allows any authenticated user to create time entries and attachments as other users by supplying a user id in the request body. Attackers can send POST requests to /api/v1/time/new or…
Opis źródłowy NVD · ENCVSS 4,3 · EPSS 0,25 % · rekomendacja wg zapisanej polityki
waynboot-mall through 2.0.0 contains an insecure direct object reference vulnerability in the mobile CartController that allows authenticated members to modify or delete other members' cart items. Attackers can enumerate sequential cart ids via PUT /cart, POST /cart/changeNum, and DELETE…
Opis źródłowy NVD · ENCVSS 4,3 · EPSS 0,25 % · rekomendacja wg zapisanej polityki
PickMall lilishop through 4.4 contains an insecure direct object reference vulnerability that allows authenticated sellers to change other stores' product freight templates via PUT /store/goods/goods/freight. GoodsServiceImpl.freight and GoodsSkuServiceImpl.freight update goods and SKUs by id…
Opis źródłowy NVD · ENCVSS 4,3 · EPSS 0,25 % · rekomendacja wg zapisanej polityki
JetLinks Community through 2.10.0 contains a missing authorization vulnerability that allows users with only query access to enable or disable any alarm configuration. Because the AlarmConfigController _enable and _disable endpoints lack the save action annotation, attackers can toggle alarms by…
Opis źródłowy NVD · ENCVSS 4,3 · EPSS 0,25 % · rekomendacja wg zapisanej polityki
Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted. This may allow an authenticated user to process and convert unintended document types if bypassing the Webmail experience.
Opis źródłowy NVD · ENCVSS 4,3 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
FreeRDP versions 3.13.0 before 3.32.0 contain a resource retention flaw in drive_process_irp_create, which registers an opened local file in the drive dictionary before applying the allocation size and does not remove it when that operation fails. A malicious RDP server connected to a client with…
Opis źródłowy NVD · ENCVSS 4,3 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
The Tainacan WordPress plugin before 1.4.0 does not restrict its reports REST endpoints to users with a management capability, allowing any authenticated subscriber to read the email addresses of the repository's staff.
Opis źródłowy NVD · ENCVSS 4,3 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
Internal Application Information Exposure Vulnerability in Hitachi Ops Center Administrator.
This issue affects Hitachi Ops Center Administrator: before 11.0.9-01.
Opis źródłowy NVD · ENCVSS 4,3 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
The Bulk Page Generator – LPagery plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.1.0 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with…
Opis źródłowy NVD · ENCVSS 4,3 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
The Apache Airflow SFTP provider's deferrable code paths (`SFTPTrigger`, `SFTPHookAsync`, `SFTPClientPool`) disable SSH host-key verification by default unless the connection explicitly sets `no_host_key_check` to false. Deployments that run SFTP sensors or operators in deferrable mode are…
Opis źródłowy NVD · ENCVSS 4,3 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
SFTPGo is an open source, event-driven file transfer solution. From 2.5.0 until 2.7.6, an authenticated user with copy permission can copy a source file denied by denied_patterns or outside allowed_patterns to an allowed destination name because file-pattern filters are evaluated only on the…
Opis źródłowy NVD · ENCVSS 4,3 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
The Salon Booking System WordPress plugin before 10.31.3 does not restrict several of its booking REST API routes to users with the appropriate capability, allowing any authenticated user such as a subscriber to read every customer's booking records, including their personal data.
Opis źródłowy NVD · ENCVSS 4,3 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
The Visual Form Builder WordPress plugin through 3.1 does not perform an authorization check before displaying recent form submission data in a dashboard widget, allowing any authenticated user (Subscriber and above) to read other users' submitted contact information, including names, email…
Opis źródłowy NVD · ENCVSS 4,3 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 could allow a Reader-role attacker to obtain version information that causes an uncaught exception.
Opis źródłowy NVD · ENCVSS 4,3 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
The Fastcache by Host.it plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.7.5. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with…
Opis źródłowy NVD · ENCVSS 4,3 · EPSS 0,21 % · rekomendacja wg zapisanej polityki
The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.2.1 via the 'password' parameter due to missing validation on a user controlled key.…
Opis źródłowy NVD · ENCVSS 4,3 · EPSS 0,21 % · rekomendacja wg zapisanej polityki
Mattermost versions 11.10.x <= 11.10.0, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10 fail to cap the number and size of mention keys stored in a user's notification properties, and to bound the quadratic multibyte-keyword matching performed for each post, which allows an authenticated…
Opis źródłowy NVD · ENCVSS 4,3 · EPSS 0,21 % · rekomendacja wg zapisanej polityki
Helium is a free online student planner for classes, homework, grades, and notes. Prior to 2.2.60, any authenticated user can submit an arbitrary URL to POST /feed/externalcalendars/, where helium/feed/services/icalexternalcalendarservice.py uses validate_url to check only URL syntax before…
Opis źródłowy NVD · ENCVSS 4,3 · EPSS 0,21 % · rekomendacja wg zapisanej polityki
Information disclosure in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
Opis źródłowy NVD · ENCVSS 4,3 · EPSS 0,21 % · rekomendacja wg zapisanej polityki
Information disclosure in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
Opis źródłowy NVD · ENCVSS 4,3 · EPSS 0,21 % · rekomendacja wg zapisanej polityki
phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an improper authorization vulnerability in attachment.php that fails to verify whether an attachment's parent FAQ is published or visible to the requester. Authenticated users with the dlattachment permission can request…
Opis źródłowy NVD · ENCVSS 4,3 · EPSS 0,2 % · rekomendacja wg zapisanej polityki
The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.1.0 via the 'ID' parameter due to missing validation on a user controlled key. This makes it possible for authenticated attackers,…
Opis źródłowy NVD · ENCVSS 4,3 · EPSS 0,2 % · rekomendacja wg zapisanej polityki
CVSS
4,3
EPSS
0,2 %
Poprawka
Status poprawki nieustalony
Publikacja
Aktualizacja NVD
Podatności: opis, rekomendacja, CVSS, EPSS i daty źródłowe. Rekomendacja nie potwierdza podatności własnego zasobu.
pig through 4.1.1 contains a missing authorization vulnerability in SysUserController.user that allows any authenticated user to read other users' profiles via GET /admin/user/details/{id}. Low-privilege attackers can enumerate sequential user ids to obtain usernames, real names, phone numbers,…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 4,3 · EPSS 0,25 % · rekomendacja wg zapisanej polityki
The Blog2Social – Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 9.1.4. This is due to the b2s_ship_item and b2s_ship_item_reload_url AJAX handlers lacking per-object authorization on the postId…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 4,3 · EPSS 0,25 % · rekomendacja wg zapisanej polityki
Tbed through 20240319 contains a missing authorization vulnerability that allows any authenticated user to rename other users' images through the /admin/setImgFileName endpoint. Attackers can supply a victim's imgname, exposed in public image URLs and album listings, to overwrite display names…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 4,3 · EPSS 0,25 % · rekomendacja wg zapisanej polityki
Peppermint through 0.5.5 contains a missing authorization vulnerability that allows any authenticated user to create time entries and attachments as other users by supplying a user id in the request body. Attackers can send POST requests to /api/v1/time/new or…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 4,3 · EPSS 0,25 % · rekomendacja wg zapisanej polityki
waynboot-mall through 2.0.0 contains an insecure direct object reference vulnerability in the mobile CartController that allows authenticated members to modify or delete other members' cart items. Attackers can enumerate sequential cart ids via PUT /cart, POST /cart/changeNum, and DELETE…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 4,3 · EPSS 0,25 % · rekomendacja wg zapisanej polityki
PickMall lilishop through 4.4 contains an insecure direct object reference vulnerability that allows authenticated sellers to change other stores' product freight templates via PUT /store/goods/goods/freight. GoodsServiceImpl.freight and GoodsSkuServiceImpl.freight update goods and SKUs by id…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 4,3 · EPSS 0,25 % · rekomendacja wg zapisanej polityki
JetLinks Community through 2.10.0 contains a missing authorization vulnerability that allows users with only query access to enable or disable any alarm configuration. Because the AlarmConfigController _enable and _disable endpoints lack the save action annotation, attackers can toggle alarms by…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 4,3 · EPSS 0,25 % · rekomendacja wg zapisanej polityki
Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted. This may allow an authenticated user to process and convert unintended document types if bypassing the Webmail experience.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 4,3 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
FreeRDP versions 3.13.0 before 3.32.0 contain a resource retention flaw in drive_process_irp_create, which registers an opened local file in the drive dictionary before applying the allocation size and does not remove it when that operation fails. A malicious RDP server connected to a client with…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 4,3 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
The Tainacan WordPress plugin before 1.4.0 does not restrict its reports REST endpoints to users with a management capability, allowing any authenticated subscriber to read the email addresses of the repository's staff.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 4,3 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
Internal Application Information Exposure Vulnerability in Hitachi Ops Center Administrator.
This issue affects Hitachi Ops Center Administrator: before 11.0.9-01.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 4,3 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
The Bulk Page Generator – LPagery plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.1.0 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 4,3 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
The Apache Airflow SFTP provider's deferrable code paths (`SFTPTrigger`, `SFTPHookAsync`, `SFTPClientPool`) disable SSH host-key verification by default unless the connection explicitly sets `no_host_key_check` to false. Deployments that run SFTP sensors or operators in deferrable mode are…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 4,3 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
SFTPGo is an open source, event-driven file transfer solution. From 2.5.0 until 2.7.6, an authenticated user with copy permission can copy a source file denied by denied_patterns or outside allowed_patterns to an allowed destination name because file-pattern filters are evaluated only on the…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 4,3 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
The Salon Booking System WordPress plugin before 10.31.3 does not restrict several of its booking REST API routes to users with the appropriate capability, allowing any authenticated user such as a subscriber to read every customer's booking records, including their personal data.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 4,3 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
The Visual Form Builder WordPress plugin through 3.1 does not perform an authorization check before displaying recent form submission data in a dashboard widget, allowing any authenticated user (Subscriber and above) to read other users' submitted contact information, including names, email…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 4,3 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 could allow a Reader-role attacker to obtain version information that causes an uncaught exception.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 4,3 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
The Fastcache by Host.it plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.7.5. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 4,3 · EPSS 0,21 % · rekomendacja wg zapisanej polityki
The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.2.1 via the 'password' parameter due to missing validation on a user controlled key.…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 4,3 · EPSS 0,21 % · rekomendacja wg zapisanej polityki
Mattermost versions 11.10.x <= 11.10.0, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10 fail to cap the number and size of mention keys stored in a user's notification properties, and to bound the quadratic multibyte-keyword matching performed for each post, which allows an authenticated…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 4,3 · EPSS 0,21 % · rekomendacja wg zapisanej polityki
Helium is a free online student planner for classes, homework, grades, and notes. Prior to 2.2.60, any authenticated user can submit an arbitrary URL to POST /feed/externalcalendars/, where helium/feed/services/icalexternalcalendarservice.py uses validate_url to check only URL syntax before…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 4,3 · EPSS 0,21 % · rekomendacja wg zapisanej polityki
Information disclosure in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 4,3 · EPSS 0,21 % · rekomendacja wg zapisanej polityki
Information disclosure in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 4,3 · EPSS 0,21 % · rekomendacja wg zapisanej polityki
phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an improper authorization vulnerability in attachment.php that fails to verify whether an attachment's parent FAQ is published or visible to the requester. Authenticated users with the dlattachment permission can request…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 4,3 · EPSS 0,2 % · rekomendacja wg zapisanej polityki
The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.1.0 via the 'ID' parameter due to missing validation on a user controlled key. This makes it possible for authenticated attackers,…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 4,3 · EPSS 0,2 % · rekomendacja wg zapisanej polityki
4,3
0,2 %
Publikacja
Aktualizacja NVD
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.