Chronologiczny przegląd publikacji. Ostatnie modyfikacje są w osobnym widoku.
Data publikacji: ostatnie 7 dni. Starsze wpisy dostępne w pełnym katalogu i widoku KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Trigger.dev before 4.5.6 contains an improper authorization vulnerability that allows holders of lower-trust environment API keys to cancel other environments' deployments because DeploymentService.getDeployment scopes lookups by projectId only. Attackers with a dev, preview, or CI secret key can…
Opis źródłowy NVD · ENCVSS 5,4 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
Trigger.dev before 4.5.2 contains a blind server-side request forgery vulnerability that allows authenticated project members to make the server send requests by setting unvalidated alert-channel webhook URLs. Attackers can create alert channels pointing to loopback, internal, or cloud metadata…
Opis źródłowy NVD · ENCVSS 5,3 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
The Trigger.dev webapp before 4.5.12 contains a cross-site request forgery vulnerability in its organization-level Slack OAuth flow, which uses the organization ID as the OAuth state without binding it to the initiating session. Attackers who know a target organization ID can trick an…
Opis źródłowy NVD · ENCVSS 4,3 · EPSS 0,1 % · rekomendacja wg zapisanej polityki
Trigger.dev CLI before 4.5.9 contains an information disclosure vulnerability that exposes resolved environment secret values in debug deployment logs by serializing unredacted envVars. Attackers with access to terminal transcripts, CI debug logs, or support bundles can read the Starting…
Opis źródłowy NVD · ENCVSS 5,5 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
Trigger.dev before 4.5.10 contains a server-side request forgery vulnerability that allows authenticated project members to bypass webhook SSRF protections by targeting the non-global 198.18.0.0/15 benchmarking range. Attackers can configure alert-channel webhooks pointing at internally routed…
Opis źródłowy NVD · ENCVSS 5,4 · EPSS 0,26 % · rekomendacja wg zapisanej polityki
Trigger.dev before 4.5.12 contains an authorization bypass vulnerability that allows holders of capability-restricted user-actor tokens to create alert channels by using the legacy personal access token helper. Attackers with a read-only UAT can POST to the project alertChannels endpoint to create…
Opis źródłowy NVD · ENCVSS 5,3 · EPSS 0,26 % · rekomendacja wg zapisanej polityki
Trigger.dev before 4.5.2 contains a blind server-side request forgery vulnerability that allows authenticated tenants to make the webapp server send POST requests to internal hosts by setting an unvalidated webhook alert channel URL. Attackers can point the webhook at internal services or cloud…
Opis źródłowy NVD · ENCVSS 5,4 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
Trigger.dev 4.5.0 before 4.6.2 contains an improper authorization vulnerability in the PUT snapshot-url session endpoint that allows public session token holders to obtain presigned S3 write URLs. End users can overwrite their own session's durable chat snapshot to forge the agent's conversation…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
Trigger.dev 4.5.0 before 4.6.0 contains an information disclosure vulnerability in the Dashboard Agent input proxy that stores a delegated user-actor token in browser-readable session input records. Attackers holding a chat's public session token can read the in records endpoint to recover the…
Opis źródłowy NVD · ENCVSS 5,1 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
Trigger.dev before 4.5.12 contains an authorization bypass vulnerability that allows authenticated project members to complete another member's DEVELOPMENT environment waitpoint by skipping the per-user environment ownership check. Attackers who know a victim's waitpoint friendly ID can submit…
Opis źródłowy NVD · ENCVSS 3,1 · EPSS 0,2 % · rekomendacja wg zapisanej polityki
SvelteKit (@sveltejs/kit) before 3.0.0 contains an open redirect vulnerability in enhanced form actions (use:enhance) on routes accepting paths beginning with a double slash. Attackers can craft action paths starting with // that become protocol-relative URLs, causing non-redirect form results to…
Opis źródłowy NVD · ENCVSS 2,1 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
SvelteKit (@sveltejs/kit) before 3.0.0 contains a cross-site scripting vulnerability in prerendered pages because a cache-control header value set via setHeaders is inserted without escaping into a <meta http-equiv="cache-control"> tag. An attacker who can influence that untrusted value at…
Opis źródłowy NVD · ENCVSS 4,7 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
SvelteKit before 3.0.0 contains a server-side request forgery vulnerability that allows remote attackers to reach internal services because self-fetch fallbacks follow HTTP redirects automatically. Attackers can manipulate the Host or forwarded headers to point fallback requests at their server,…
Opis źródłowy NVD · ENCVSS 5,3 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
Snipe-IT before 8.7.0 contains a server-side request forgery vulnerability in the webhook testing feature that allows super-admin users to probe internal network addresses, including loopback and RFC1918 ranges. Attackers can point webhooks at internal hosts and ports, then compare 4xx versus 5xx…
Opis źródłowy NVD · ENCVSS 5,5 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
vLLM before 0.31.0 contains a cache aliasing vulnerability that allows authenticated attackers to collide shared cache keys by supplying caller-controlled values such as EXIF ImageID or cache_salt. Attackers can set a UUID EXIF ImageID to receive another request's cached processed media, or match…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
ArcadeDB from 26.8.1 before 26.10.1 contains an authorization bypass vulnerability that allows read-only users to modify edge type lightweight and unique schema flags without UPDATE_SCHEMA permission. Attackers can send a bare ALTER TYPE edgeType WITH lightweight = true command over the HTTP,…
Opis źródłowy NVD · ENCVSS 4,3 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
ArcadeDB from 26.2.1 before 26.10.1 contains a missing authorization vulnerability in the Bolt protocol handler that allows authenticated users to enumerate all database names. Attackers with credentials for any single database can issue a SHOW DATABASES query over the Bolt port to reveal…
Opis źródłowy NVD · ENCVSS 4,3 · EPSS 0,2 % · rekomendacja wg zapisanej polityki
ArcadeDB from 26.2.1 before 26.10.1 contains a missing authorization vulnerability in the Bolt protocol handler that lets authenticated users read other databases' schema metadata. Attackers with credentials for one database can set the db field in RUN or BEGIN messages and call db.labels() or…
Opis źródłowy NVD · ENCVSS 4,3 · EPSS 0,2 % · rekomendacja wg zapisanej polityki
FreeRDP 3.0.0 before 3.32.0 contains a null-pointer dereference in the smartcard emulation backend that accepts a null per-reader name in SCardGetStatusChange requests. A malicious RDP server can send a crafted reader-state entry with a null szReader, causing strcmp or _wcscmp to crash the client…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,25 % · rekomendacja wg zapisanej polityki
FreeRDP from 2.0.0 before 3.32.0 contains an improper certificate validation vulnerability in its proxy that accepts untrusted target TLS certificates when no verification module is configured. Network-positioned attackers can intercept the proxy's outbound connection and present a self-signed,…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,16 % · rekomendacja wg zapisanej polityki
WWBN AVideo before 24.0 contains a cross-site request forgery vulnerability in legacy endpoints like playlistStatus.php that bypass the .json.php-only autoCSRFGuard() check. Attackers can lure logged-in users to a page with an auto-submitting form to make private playlists public, remove playlist…
Opis źródłowy NVD · ENCVSS 3,5 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
vLLM before 0.31.0 contains a cross-request mask leak in InputBatch.condense() that allows remote attackers to constrain other clients' outputs by leaving stale allowed_token_ids rows. Attackers can submit concurrent constrained generate requests, including via unauthenticated /invocations, so…
Opis źródłowy NVD · ENCVSS 3,7 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
A flaw was found in device-mapper-multipath. A local user can trigger an out-of-bounds read by sending a command with a format string ending in a trailing percent character to the multipath daemon. This issue can allow the user to expose unintended daemon memory, leading to information disclosure,…
Opis źródłowy NVD · ENCVSS 5,1 · EPSS 0,12 % · rekomendacja wg zapisanej polityki
FreeRDP before 3.32.1 on Windows contains a heap out-of-bounds read in client_cli_present_gateway_message that passes a byte count as wide-character printf precision. A malicious RD Gateway can send pre-authentication consent or service messages, causing the client to read twice the buffer size,…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
FreeRDP 3.32.0 contains a use-after-free vulnerability in the drdynvc channel that frees a pool-owned stream with the owned-stream deallocator when totalLength is smaller than the chunk size. A malicious RDP server can send a single well-formed Virtual Channel PDU to trigger the free and crash the…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,25 % · rekomendacja wg zapisanej polityki
CVSS
6,5
EPSS
0,25 %
Poprawka
Status poprawki nieustalony
Publikacja
Aktualizacja NVD
Podatności: opis, rekomendacja, CVSS, EPSS i daty źródłowe. Rekomendacja nie potwierdza podatności własnego zasobu.
Trigger.dev before 4.5.6 contains an improper authorization vulnerability that allows holders of lower-trust environment API keys to cancel other environments' deployments because DeploymentService.getDeployment scopes lookups by projectId only. Attackers with a dev, preview, or CI secret key can…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,4 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
Trigger.dev before 4.5.2 contains a blind server-side request forgery vulnerability that allows authenticated project members to make the server send requests by setting unvalidated alert-channel webhook URLs. Attackers can create alert channels pointing to loopback, internal, or cloud metadata…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,3 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
The Trigger.dev webapp before 4.5.12 contains a cross-site request forgery vulnerability in its organization-level Slack OAuth flow, which uses the organization ID as the OAuth state without binding it to the initiating session. Attackers who know a target organization ID can trick an…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 4,3 · EPSS 0,1 % · rekomendacja wg zapisanej polityki
Trigger.dev CLI before 4.5.9 contains an information disclosure vulnerability that exposes resolved environment secret values in debug deployment logs by serializing unredacted envVars. Attackers with access to terminal transcripts, CI debug logs, or support bundles can read the Starting…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,5 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
Trigger.dev before 4.5.10 contains a server-side request forgery vulnerability that allows authenticated project members to bypass webhook SSRF protections by targeting the non-global 198.18.0.0/15 benchmarking range. Attackers can configure alert-channel webhooks pointing at internally routed…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,4 · EPSS 0,26 % · rekomendacja wg zapisanej polityki
Trigger.dev before 4.5.12 contains an authorization bypass vulnerability that allows holders of capability-restricted user-actor tokens to create alert channels by using the legacy personal access token helper. Attackers with a read-only UAT can POST to the project alertChannels endpoint to create…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,3 · EPSS 0,26 % · rekomendacja wg zapisanej polityki
Trigger.dev before 4.5.2 contains a blind server-side request forgery vulnerability that allows authenticated tenants to make the webapp server send POST requests to internal hosts by setting an unvalidated webhook alert channel URL. Attackers can point the webhook at internal services or cloud…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,4 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
Trigger.dev 4.5.0 before 4.6.2 contains an improper authorization vulnerability in the PUT snapshot-url session endpoint that allows public session token holders to obtain presigned S3 write URLs. End users can overwrite their own session's durable chat snapshot to forge the agent's conversation…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
Trigger.dev 4.5.0 before 4.6.0 contains an information disclosure vulnerability in the Dashboard Agent input proxy that stores a delegated user-actor token in browser-readable session input records. Attackers holding a chat's public session token can read the in records endpoint to recover the…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,1 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
Trigger.dev before 4.5.12 contains an authorization bypass vulnerability that allows authenticated project members to complete another member's DEVELOPMENT environment waitpoint by skipping the per-user environment ownership check. Attackers who know a victim's waitpoint friendly ID can submit…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 3,1 · EPSS 0,2 % · rekomendacja wg zapisanej polityki
SvelteKit (@sveltejs/kit) before 3.0.0 contains an open redirect vulnerability in enhanced form actions (use:enhance) on routes accepting paths beginning with a double slash. Attackers can craft action paths starting with // that become protocol-relative URLs, causing non-redirect form results to…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 2,1 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
SvelteKit (@sveltejs/kit) before 3.0.0 contains a cross-site scripting vulnerability in prerendered pages because a cache-control header value set via setHeaders is inserted without escaping into a <meta http-equiv="cache-control"> tag. An attacker who can influence that untrusted value at…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 4,7 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
SvelteKit before 3.0.0 contains a server-side request forgery vulnerability that allows remote attackers to reach internal services because self-fetch fallbacks follow HTTP redirects automatically. Attackers can manipulate the Host or forwarded headers to point fallback requests at their server,…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,3 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
Snipe-IT before 8.7.0 contains a server-side request forgery vulnerability in the webhook testing feature that allows super-admin users to probe internal network addresses, including loopback and RFC1918 ranges. Attackers can point webhooks at internal hosts and ports, then compare 4xx versus 5xx…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,5 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
vLLM before 0.31.0 contains a cache aliasing vulnerability that allows authenticated attackers to collide shared cache keys by supplying caller-controlled values such as EXIF ImageID or cache_salt. Attackers can set a UUID EXIF ImageID to receive another request's cached processed media, or match…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
ArcadeDB from 26.8.1 before 26.10.1 contains an authorization bypass vulnerability that allows read-only users to modify edge type lightweight and unique schema flags without UPDATE_SCHEMA permission. Attackers can send a bare ALTER TYPE edgeType WITH lightweight = true command over the HTTP,…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 4,3 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
ArcadeDB from 26.2.1 before 26.10.1 contains a missing authorization vulnerability in the Bolt protocol handler that allows authenticated users to enumerate all database names. Attackers with credentials for any single database can issue a SHOW DATABASES query over the Bolt port to reveal…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 4,3 · EPSS 0,2 % · rekomendacja wg zapisanej polityki
ArcadeDB from 26.2.1 before 26.10.1 contains a missing authorization vulnerability in the Bolt protocol handler that lets authenticated users read other databases' schema metadata. Attackers with credentials for one database can set the db field in RUN or BEGIN messages and call db.labels() or…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 4,3 · EPSS 0,2 % · rekomendacja wg zapisanej polityki
FreeRDP 3.0.0 before 3.32.0 contains a null-pointer dereference in the smartcard emulation backend that accepts a null per-reader name in SCardGetStatusChange requests. A malicious RDP server can send a crafted reader-state entry with a null szReader, causing strcmp or _wcscmp to crash the client…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,25 % · rekomendacja wg zapisanej polityki
FreeRDP from 2.0.0 before 3.32.0 contains an improper certificate validation vulnerability in its proxy that accepts untrusted target TLS certificates when no verification module is configured. Network-positioned attackers can intercept the proxy's outbound connection and present a self-signed,…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,16 % · rekomendacja wg zapisanej polityki
WWBN AVideo before 24.0 contains a cross-site request forgery vulnerability in legacy endpoints like playlistStatus.php that bypass the .json.php-only autoCSRFGuard() check. Attackers can lure logged-in users to a page with an auto-submitting form to make private playlists public, remove playlist…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 3,5 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
vLLM before 0.31.0 contains a cross-request mask leak in InputBatch.condense() that allows remote attackers to constrain other clients' outputs by leaving stale allowed_token_ids rows. Attackers can submit concurrent constrained generate requests, including via unauthenticated /invocations, so…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 3,7 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
A flaw was found in device-mapper-multipath. A local user can trigger an out-of-bounds read by sending a command with a format string ending in a trailing percent character to the multipath daemon. This issue can allow the user to expose unintended daemon memory, leading to information disclosure,…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,1 · EPSS 0,12 % · rekomendacja wg zapisanej polityki
FreeRDP before 3.32.1 on Windows contains a heap out-of-bounds read in client_cli_present_gateway_message that passes a byte count as wide-character printf precision. A malicious RD Gateway can send pre-authentication consent or service messages, causing the client to read twice the buffer size,…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
FreeRDP 3.32.0 contains a use-after-free vulnerability in the drdynvc channel that frees a pool-owned stream with the owned-stream deallocator when totalLength is smaller than the chunk size. A malicious RDP server can send a single well-formed Virtual Channel PDU to trigger the free and crash the…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,25 % · rekomendacja wg zapisanej polityki
6,5
0,25 %
Publikacja
Aktualizacja NVD
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
NVD · publikacjeOpóźnione lub nieustalone
NVD · aktualizacjeOpóźnione lub nieustalone
CISA KEVOstatnie przetworzenie zakończone
FIRST EPSSOpóźnione lub nieustaloneData modelu znajduje się przy rekordzie.