Podatności

A predictable seed in the pseudo-random number generator (PRNG) in the IFTTT pairing token generation of the ASUS RT-BE57 router allows an unauthenticated nearby user to derive the pairing token and read or modify router settings via observed values from an administrator-initiated IFTTT pairing…

CVSS 7,7 · EPSS 0,13 % · rekomendacja wg zapisanej polityki

In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15 on Linux, a local user who can run commands as the user account running Splunk Enterprise could cause an affected Linux package upgrade to run attacker-controlled operating-system commands with root privileges. The…

CVSS 7,7 · EPSS 0,12 % · rekomendacja wg zapisanej polityki

Contrast 1.8.0 before 1.24.1 contains an improper verification vulnerability in Coordinator peer recovery that fails to confirm the serving peer uses the same manifest generation. Attackers with write access to manifest history can replay a superseded history head so withdrawn workloads obtain…

CVSS 7,7 · EPSS 0,11 % · rekomendacja wg zapisanej polityki

FusionPBX through 5.6.5 contains an OS command injection vulnerability in call_recordings::download() that allows unauthenticated attackers to execute commands by placing calls with malicious caller ID values. When the record_name filename template is enabled, attackers can embed shell…

CVSS 7,5 · EPSS 1,1 % · rekomendacja wg zapisanej polityki

CVFS contained a missing authentication condition affecting command execution. Software customers upgrade to resolved maintenance release. Update CVFS.

CVSS 7,7 · rekomendacja wg zapisanej polityki

Froxlor 2.0.0 before 2.3.14 contains a stored cross-site scripting vulnerability that allows authenticated customers to inject HTML and JavaScript by setting a malicious theme value via customer_index.php. Script executes when an administrator views the customer overview with the Theme column…

CVSS 7,7 · rekomendacja wg zapisanej polityki

A vulnerability has been identified in SIMATIC IPC BX-21A (All versions < V31.01.13), SIMATIC IPC RW-543A (All versions < V1.1.4), SIMATIC IPC227G / IPC277G / IPC277G PRO / IPC327G / IPC377G (All versions < V28.01.15). A BIOS vendor test key is present in the UEFI Secure Boot key database. This…

CVSS 7,7 · rekomendacja wg zapisanej polityki

A vulnerability has been identified in Industrial Edge App Publisher (All versions < V1.27.9). The application fails to properly sanitize or escape data received from the backend before rendering it in the user interface. Because the front end is integrated with Node.js, this vulnerability allows…

CVSS 7,7 · rekomendacja wg zapisanej polityki

Operating system command injection vulnerability in the SVN integration component of BugTracker.NET. The application incorporates the value of the field corresponding to the repository into an svn.exe command without properly validating it. An authenticated user with administrator privileges could…

CVSS 7,5 · EPSS 0,93 % · rekomendacja wg zapisanej polityki

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper authorization.

CVSS 7,6 · EPSS 0,41 % · rekomendacja wg zapisanej polityki

Insufficient validation in the Single Sign-On (SSO) login flow could allow a remote, unauthenticated attacker to craft a URL that, when clicked by a user, causes the identity provider (IdP) to deliver authentication material to an attacker-controlled URL instead of to CloudVision.

CVSS 7,6 · EPSS 0,38 % · rekomendacja wg zapisanej polityki

pH7Builder (pH7 Social Dating CMS) before 18.5.0 contains an improper restriction of authentication attempts vulnerability that allows attackers to bypass two-factor authentication by guessing TOTP codes without limits. Attackers who know an account password can submit unlimited 6-digit…

CVSS 7,6 · EPSS 0,37 % · rekomendacja wg zapisanej polityki

IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection flaw.

CVSS 7,6 · EPSS 0,33 % · rekomendacja wg zapisanej polityki

Spotweb through 1.5.8 contains an OS command injection vulnerability in the runcommand NZB handler that allows remote attackers to execute commands by publishing spots with malicious titles. Attackers can post self-signed spots over Usenet with shell metacharacters in the title, which are…

CVSS 7,5 · EPSS 0,8 % · rekomendacja wg zapisanej polityki

Open WebUI from 0.8.6 before 0.11.4 contains a privilege escalation vulnerability in the terminal proxy that allows authenticated users to reach the Terminals administrator API with the shared key attached. Attackers can send requests through /api/v1/terminals/{server_id}/{path} to list or stop…

CVSS 7,6 · EPSS 0,3 % · rekomendacja wg zapisanej polityki

Subscriber Settings Change in uListing <= 2.2.0 versions.

CVSS 7,6 · EPSS 0,3 % · rekomendacja wg zapisanej polityki

Subscriber Settings Change in Pubjet | پاب‌جت <= 5.4.8 versions.

CVSS 7,6 · EPSS 0,29 % · rekomendacja wg zapisanej polityki

Express Gateway through 1.16.11 contains an authentication bypass vulnerability in the OAuth 2.0 refresh_token grant that fails to validate the token secret or issuing client. Attackers with any valid client credentials and the identifier portion of another user's refresh token can obtain that…

CVSS 7,6 · EPSS 0,29 % · rekomendacja wg zapisanej polityki

Administrator SQL Injection in Frontend Admin by DynamiApps <= 3.29.13 versions.

CVSS 7,6 · EPSS 0,28 % · rekomendacja wg zapisanej polityki

Administrator SQL Injection in WP Ultimate CSV Importer <= 9.2 versions.

CVSS 7,6 · EPSS 0,28 % · rekomendacja wg zapisanej polityki

Administrator SQL Injection in Leyka <= 3.32.3 versions.

CVSS 7,6 · EPSS 0,28 % · rekomendacja wg zapisanej polityki

JHipster is a development platform to quickly generate, develop, and deploy modern web applications and microservice architectures. Prior to generator-jhipster 9.4.0 and react-jhipster 1.1.0, generated applications can persist attacker-controlled Blob data and companion ContentType values, return…

CVSS 7,6 · EPSS 0,26 % · rekomendacja wg zapisanej polityki

IBM Guardium Data Protection 12.2 is affected by a command injection vulnerability in the SUID-root ssh_config_wrapper component. An authenticated high-privileged user can inject arbitrary commands through attacker-controlled arguments, resulting in command execution with root privileges.

CVSS 7,2 · EPSS 2,25 % · rekomendacja wg zapisanej polityki

LlamaFarm through 0.0.34 contains an insecure default configuration that binds its unauthenticated FastAPI server to 0.0.0.0 on port 14345, while the lf CLI silently discards HOST overrides. Network-adjacent attackers can call the project and dataset management API to read stored provider API…

CVSS 7,6 · EPSS 0,24 % · rekomendacja wg zapisanej polityki

MOVO through 0.2.3 contains an authorization bypass vulnerability in the chat-api document endpoints that allows authenticated users to access other users' stored objects by supplying arbitrary object paths. Attackers who know a target's object path can send it to /api/documents/fetch or…

CVSS 7,6 · EPSS 0,24 % · rekomendacja wg zapisanej polityki