Chronologiczny przegląd publikacji. Ostatnie modyfikacje są w osobnym widoku.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
A Unsigned Firmware vulnerability exists in the boa Firmware Update functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted firmware binary can lead to arbitrary firmware update. An attacker can make an authenticated HTTP request to trigger this…
Opis źródłowy NVD · ENCVSS 9,1 · EPSS 0,41 % · rekomendacja wg zapisanej polityki
The PEAK-System PCAN type 0x4030 processing path fails to validate a selected/returned object pointer before dereferencing fixed fields during post-processing.
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,11 % · rekomendacja wg zapisanej polityki
An OS command injection vulnerability exists in the boa formPasswordSetup functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this…
Opis źródłowy NVD · ENCVSS 9,1 · EPSS 1,15 % · rekomendacja wg zapisanej polityki
A stack-based buffer overflow vulnerability exists in the boa formIpQos mac functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this…
Opis źródłowy NVD · ENCVSS 9,1 · EPSS 0,95 % · rekomendacja wg zapisanej polityki
PEAK-System PCAN contains a vulnerable operation involving a variable-length receive-record copy. The driver uses a requested or queued record count without sufficiently capping the copy to the actual caller-supplied output length.
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,11 % · rekomendacja wg zapisanej polityki
When curl is built with GnuTLS, a malicious WebSocket server can make curl
send memory past its send buffer. This is due to an out of bounds read
following when `gnutls_record_send()` returns a number of bytes sent **greater
than the number of bytes it was given to send**. GnuTLS does that after…
Opis źródłowy NVD · ENOcena niepełna · brak pełnych danych nie oznacza niskiego ryzyka
When `CURLOPT_INTERFACE` (or the command line tool's `--interface` option) is
set with one of the documented prefixes (`if!`, `host!`, `ifhost!`), that
binding is not part of the connection reuse key, so a later transfer asking
for a different source can silently reuse an existing connection and…
Opis źródłowy NVD · ENOcena niepełna · brak pełnych danych nie oznacza niskiego ryzyka
The parser in PEAK-System PCAN driver correctly detected the malformed record, but the loop iterating the record list advanced its processed-bytes counter even when a record had been rejected as invalid.
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,12 % · rekomendacja wg zapisanej polityki
Cherry Plugin for WordPress before 1.2.7 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files via the 'file' parameter. Attackers can send GET requests to /admin/import-export/download-content.php with traversal sequences like…
Opis źródłowy NVD · ENCVSS 7,5 · EPSS 0,39 % · rekomendacja wg zapisanej polityki
EyeLock nano NXT 3.05.1193, 3.04.1108, 3.03.944, and 3.01.646 contain a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files via the 'path' parameter. Attackers can send GET requests to /scripts/logdownload.php with traversal sequences like ../../etc/passwd,…
Opis źródłowy NVD · ENCVSS 7,5 · EPSS 0,39 % · rekomendacja wg zapisanej polityki
The PEAK-System PCAN parser indexes a length table using attacker-controlled DLC without enforcing DLC <= 0x0f, then copies attacker payload from record+0x1c into a fixed-size stack destination.
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
Aspose Importer & Exporter plugin for WordPress before 3.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files via the unsanitized 'file' parameter. Attackers can send GET requests to aspose_import_export_download.php with traversal sequences…
Opis źródłowy NVD · ENCVSS 7,5 · EPSS 0,39 % · rekomendacja wg zapisanej polityki
Aspose PDF Exporter plugin for WordPress before 2.0 contains a path traversal vulnerability that allows unauthenticated attackers to download files through the unsanitized 'file' parameter passed to readfile(). Attackers can send GET requests to aspose_pdf_exporter_download.php with traversal…
Opis źródłowy NVD · ENCVSS 7,5 · EPSS 0,41 % · rekomendacja wg zapisanej polityki
FooSun DotNetCMS 1.0 and 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate MSSQL queries through the CityId parameter. Attackers can send GET requests to /user/City_ajax.aspx with UNION SELECT payloads in CityId, concatenated unsanitized into the…
Opis źródłowy NVD · ENCVSS 8,2 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
Memphis Documents Library plugin for WordPress before 3.1.6 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files via the mdocs-img-preview parameter. Attackers can send GET requests with traversal sequences to mdocs_img_preview() in…
Opis źródłowy NVD · ENCVSS 7,5 · EPSS 0,41 % · rekomendacja wg zapisanej polityki
Issuu Panel plugin for WordPress before 1.6.6 contains a PHP file inclusion vulnerability that allows unauthenticated attackers to include remote or local files through the 'abspath' parameter. Attackers can send GET requests to menu/documento/requests/ajax-docs.php with a crafted abspath value…
Opis źródłowy NVD · ENCVSS 8,1 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
JavaMelody before 1.60.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject script by supplying crafted values in the graph parameter of /monitoring?part=graph. Attackers can include a closing script tag in the graph value, which is only…
Opis źródłowy NVD · ENCVSS 6,1 · EPSS 0,21 % · rekomendacja wg zapisanej polityki
SocialFit plugin for WordPress through 1.2.2 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts via the unsanitized msg parameter. Attackers can craft GET requests to /wp-content/plugins/socialfit/popup.php with service=googleplus and…
Opis źródłowy NVD · ENCVSS 6,1 · EPSS 0,21 % · rekomendacja wg zapisanej polityki
DedeCMS 5.6 and 5.7 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject script by supplying unsanitized input to the adminDirHand parameter. Attackers can send crafted GET requests to /include/dialog/config.php that close the generated script tag…
Opis źródłowy NVD · ENCVSS 6,1 · EPSS 0,21 % · rekomendacja wg zapisanej polityki
Blogroll Fun plugin for WordPress before 0.8.5 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts through the 'k' parameter in blogroll.php. Attackers can craft GET requests to /wp-content/plugins/blogroll-fun/blogroll.php with malicious…
Opis źródłowy NVD · ENCVSS 6,1 · EPSS 0,21 % · rekomendacja wg zapisanej polityki
NativeChurch theme for WordPress before 1.6.2 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files through the file parameter of download.php. Attackers can send GET requests with directory traversal sequences in the file parameter to retrieve…
Opis źródłowy NVD · ENCVSS 7,5 · EPSS 0,68 % · rekomendacja wg zapisanej polityki
ChurcHope theme for WordPress before 2.2 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files through the 'file' parameter of /wp-content/themes/churchope/lib/downloadlink.php. Attackers can supply directory traversal sequences to read sensitive…
Opis źródłowy NVD · ENCVSS 7,5 · EPSS 0,64 % · rekomendacja wg zapisanej polityki
Aspose Doc Exporter plugin for WordPress before 2.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files by passing unsanitized paths to readfile(). Attackers can send GET requests to aspose_doc_exporter_download.php with the 'file' parameter…
Opis źródłowy NVD · ENCVSS 7,5 · EPSS 0,41 % · rekomendacja wg zapisanej polityki
Custom Tables plugin for WordPress before 3.4.6 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts through the unsanitized 'key' parameter in iframe.php. Attackers can craft GET requests to /wp-content/plugins/custom-tables/iframe.php…
Opis źródłowy NVD · ENCVSS 6,1 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
CVSS
6,1
EPSS
0,22 %
Poprawka
Status poprawki nieustalony
Publikacja
Aktualizacja NVD
Podatności: opis, rekomendacja, CVSS, EPSS i daty źródłowe. Rekomendacja nie potwierdza podatności własnego zasobu.
A Unsigned Firmware vulnerability exists in the boa Firmware Update functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted firmware binary can lead to arbitrary firmware update. An attacker can make an authenticated HTTP request to trigger this…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,1 · EPSS 0,41 % · rekomendacja wg zapisanej polityki
The PEAK-System PCAN type 0x4030 processing path fails to validate a selected/returned object pointer before dereferencing fixed fields during post-processing.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,11 % · rekomendacja wg zapisanej polityki
An OS command injection vulnerability exists in the boa formPasswordSetup functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,1 · EPSS 1,15 % · rekomendacja wg zapisanej polityki
A stack-based buffer overflow vulnerability exists in the boa formIpQos mac functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,1 · EPSS 0,95 % · rekomendacja wg zapisanej polityki
PEAK-System PCAN contains a vulnerable operation involving a variable-length receive-record copy. The driver uses a requested or queued record count without sufficiently capping the copy to the actual caller-supplied output length.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,11 % · rekomendacja wg zapisanej polityki
When curl is built with GnuTLS, a malicious WebSocket server can make curl
send memory past its send buffer. This is due to an out of bounds read
following when `gnutls_record_send()` returns a number of bytes sent **greater
than the number of bytes it was given to send**. GnuTLS does that after…
Opis źródłowy NVD · EN
Do weryfikacji
Ocena niepełna · brak pełnych danych nie oznacza niskiego ryzyka
When `CURLOPT_INTERFACE` (or the command line tool's `--interface` option) is
set with one of the documented prefixes (`if!`, `host!`, `ifhost!`), that
binding is not part of the connection reuse key, so a later transfer asking
for a different source can silently reuse an existing connection and…
Opis źródłowy NVD · EN
Do weryfikacji
Ocena niepełna · brak pełnych danych nie oznacza niskiego ryzyka
The parser in PEAK-System PCAN driver correctly detected the malformed record, but the loop iterating the record list advanced its processed-bytes counter even when a record had been rejected as invalid.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,12 % · rekomendacja wg zapisanej polityki
Cherry Plugin for WordPress before 1.2.7 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files via the 'file' parameter. Attackers can send GET requests to /admin/import-export/download-content.php with traversal sequences like…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,5 · EPSS 0,39 % · rekomendacja wg zapisanej polityki
EyeLock nano NXT 3.05.1193, 3.04.1108, 3.03.944, and 3.01.646 contain a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files via the 'path' parameter. Attackers can send GET requests to /scripts/logdownload.php with traversal sequences like ../../etc/passwd,…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,5 · EPSS 0,39 % · rekomendacja wg zapisanej polityki
The PEAK-System PCAN parser indexes a length table using attacker-controlled DLC without enforcing DLC <= 0x0f, then copies attacker payload from record+0x1c into a fixed-size stack destination.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
Aspose Importer & Exporter plugin for WordPress before 3.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files via the unsanitized 'file' parameter. Attackers can send GET requests to aspose_import_export_download.php with traversal sequences…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,5 · EPSS 0,39 % · rekomendacja wg zapisanej polityki
Aspose PDF Exporter plugin for WordPress before 2.0 contains a path traversal vulnerability that allows unauthenticated attackers to download files through the unsanitized 'file' parameter passed to readfile(). Attackers can send GET requests to aspose_pdf_exporter_download.php with traversal…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,5 · EPSS 0,41 % · rekomendacja wg zapisanej polityki
FooSun DotNetCMS 1.0 and 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate MSSQL queries through the CityId parameter. Attackers can send GET requests to /user/City_ajax.aspx with UNION SELECT payloads in CityId, concatenated unsanitized into the…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,2 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
Memphis Documents Library plugin for WordPress before 3.1.6 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files via the mdocs-img-preview parameter. Attackers can send GET requests with traversal sequences to mdocs_img_preview() in…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,5 · EPSS 0,41 % · rekomendacja wg zapisanej polityki
Issuu Panel plugin for WordPress before 1.6.6 contains a PHP file inclusion vulnerability that allows unauthenticated attackers to include remote or local files through the 'abspath' parameter. Attackers can send GET requests to menu/documento/requests/ajax-docs.php with a crafted abspath value…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,1 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
JavaMelody before 1.60.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject script by supplying crafted values in the graph parameter of /monitoring?part=graph. Attackers can include a closing script tag in the graph value, which is only…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,1 · EPSS 0,21 % · rekomendacja wg zapisanej polityki
SocialFit plugin for WordPress through 1.2.2 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts via the unsanitized msg parameter. Attackers can craft GET requests to /wp-content/plugins/socialfit/popup.php with service=googleplus and…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,1 · EPSS 0,21 % · rekomendacja wg zapisanej polityki
DedeCMS 5.6 and 5.7 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject script by supplying unsanitized input to the adminDirHand parameter. Attackers can send crafted GET requests to /include/dialog/config.php that close the generated script tag…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,1 · EPSS 0,21 % · rekomendacja wg zapisanej polityki
Blogroll Fun plugin for WordPress before 0.8.5 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts through the 'k' parameter in blogroll.php. Attackers can craft GET requests to /wp-content/plugins/blogroll-fun/blogroll.php with malicious…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,1 · EPSS 0,21 % · rekomendacja wg zapisanej polityki
NativeChurch theme for WordPress before 1.6.2 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files through the file parameter of download.php. Attackers can send GET requests with directory traversal sequences in the file parameter to retrieve…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,5 · EPSS 0,68 % · rekomendacja wg zapisanej polityki
ChurcHope theme for WordPress before 2.2 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files through the 'file' parameter of /wp-content/themes/churchope/lib/downloadlink.php. Attackers can supply directory traversal sequences to read sensitive…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,5 · EPSS 0,64 % · rekomendacja wg zapisanej polityki
Aspose Doc Exporter plugin for WordPress before 2.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files by passing unsanitized paths to readfile(). Attackers can send GET requests to aspose_doc_exporter_download.php with the 'file' parameter…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,5 · EPSS 0,41 % · rekomendacja wg zapisanej polityki
Custom Tables plugin for WordPress before 3.4.6 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts through the unsanitized 'key' parameter in iframe.php. Attackers can craft GET requests to /wp-content/plugins/custom-tables/iframe.php…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,1 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
6,1
0,22 %
Publikacja
Aktualizacja NVD
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
NVD · publikacjeOpóźnione lub nieustalone
NVD · aktualizacjeOpóźnione lub nieustalone
CISA KEVOstatnie przetworzenie zakończone
FIRST EPSSOpóźnione lub nieustaloneData modelu znajduje się przy rekordzie.