Chronologiczny przegląd publikacji. Ostatnie modyfikacje są w osobnym widoku.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
An incomplete list of disallowed inputs in the Python code validator of the run_script tool in AWS MCP Server might allow an authenticated remote user to execute arbitrary code within their own isolated session environment via a crafted script.
AWS fixed this issue service-side. No customer…
Opis źródłowy NVD · ENCVSS 5,3 · EPSS 0,31 % · rekomendacja wg zapisanej polityki
Tandoor Recipes before 2.7.0 contains an improper cache-key design in cookbook/helper/permission_helper.py that allows authenticated users to retain stale group-based permissions across different spaces by exploiting a cache key keyed only on user id while omitting the active space, with the…
Opis źródłowy NVD · ENCVSS 7,1 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
Relative path traversal during model archive extraction in Amazon Web Services Multi Model Server 1.1.11 and earlier might allow remote actors to execute arbitrary code via a crafted model archive.
Multi Model Server is end of life and no fixed version is available. Users should discontinue use…
Opis źródłowy NVD · ENCVSS 9,3 · EPSS 0,53 % · rekomendacja wg zapisanej polityki
Server-side request forgery in the model download path in Amazon Web Services Multi Model Server 1.1.11 and earlier might allow remote actors to send requests to internal network destinations via a crafted model URL.
Multi Model Server is end of life and no fixed version is available. Users…
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,36 % · rekomendacja wg zapisanej polityki
ConnMan through 2.0 has a stack-based buffer overflow via a DHCPv6 Reply message. This occurs in get_domains in gdhcp/client.c. It copies a fixed NS_MAXDNAME (1025) bytes from a DHCPv6 DOMAIN_LIST (option 24) value into a 1026-byte stack buffer dns_name regardless of the actual option length, then…
Opis źródłowy NVD · ENCVSS 7,6 · EPSS 0,3 % · rekomendacja wg zapisanej polityki
A flaw was found in Kruize Autotune. Its REST API ships without an authentication layer, and the endpoints that return datasource configuration — the list-datasources endpoint (GET /datasources) and the datasource-metadata endpoint — serialized datasource objects using a default Gson configuration…
Opis źródłowy NVD · ENCVSS 7,4 · EPSS 0,25 % · rekomendacja wg zapisanej polityki
A flaw in Node.js Permission Model filesystem enforcement can grant access to paths that do not match a wildcard `--allow-fs-read` or `--allow-fs-write` rule.
When the requested path is shorter than the prefix of a wildcard grant, the radix tree lookup stops comparing early and treats the path as…
Opis źródłowy NVD · ENCVSS 3,6 · EPSS 0,2 % · rekomendacja wg zapisanej polityki
A flaw in Node.js TLS hostname verification allows a certificate with only a DNS SAN to authenticate an IP endpoint when the client connects using a non-canonical IPv4 spelling, such as `0177.0.0.1`, `0x7f.0.0.1`, `2130706433` or `127.1`.
`tls.checkServerIdentity()` did not classify these hosts…
Opis źródłowy NVD · ENCVSS 6,7 · EPSS 0,62 % · rekomendacja wg zapisanej polityki
A flaw in Node.js Permission Model filesystem enforcement leaves `fs.realpathSync()` without the required read permission checks. This is an incomplete fix of CVE-2026-21715, which only covered `fs.realpathSync.native()`.
As a result, code running under `--permission` with restricted…
Opis źródłowy NVD · ENCVSS 3,3 · EPSS 0,25 % · rekomendacja wg zapisanej polityki
A flaw in Node.js `crypto` causes the internal entropy caches used by `crypto.randomUUID()`, `crypto.randomUUIDv7()`, and `crypto.randomInt()` to be saved into user-land startup snapshots (`--build-snapshot`) and single executable applications built with `useSnapshot`.
If any of these functions,…
Opis źródłowy NVD · ENCVSS 4,8 · EPSS 0,33 % · rekomendacja wg zapisanej polityki
A flaw in Node.js HTTP Agent connection reuse can cause a client to accept as valid a response that was sent before the client has sent the request. This is an incomplete fix of CVE-2026-48931.
The guard that destroys idle keep-alive sockets when unexpected data arrives only runs when the event…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
A flaw in Node.js DNS resolution allows hostnames containing a NUL byte to be silently truncated by the dns.resolve*() functions and dns.reverse(). This is an incomplete fix of CVE-2026-48930, which only covered dns.lookup() and the net/tls host options.
Because the name is passed to c-ares as…
Opis źródłowy NVD · ENCVSS 7,4 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
A flaw in Node.js TLS hostname verification allows a certificate without a matching IP address SAN to authenticate a connection to an IPv4 address when the host is written with non-ASCII characters, such as fullwidth digits (`１２７.0.0.1`).
`tls.checkServerIdentity()` did not recognize such hosts…
Opis źródłowy NVD · ENCVSS 7,4 · EPSS 0,3 % · rekomendacja wg zapisanej polityki
A flaw in Node.js TLS hostname verification can cause a server certificate to be validated against a different IP address than the one the client connected to, when the host is a non-canonical IPv4 literal with a leading zero, such as `0127.0.0.1`.
`tls.checkServerIdentity()` normalizes the host…
Opis źródłowy NVD · ENCVSS 7,4 · EPSS 0,3 % · rekomendacja wg zapisanej polityki
A flaw in the Node.js `zlib.ZipFile` API can cause it to return bytes that do not belong to the requested entry after the local and central header validation fails.
When `zipEntry.modified` is read on an archive whose local header does not match its central directory, either directly or while…
Opis źródłowy NVD · ENCVSS 3,7 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
Uni-CLI gives people and agents one command interface for websites, browsers, desktop applications, local tools, and MCP. Prior to version 0.225.2, Uni-CLI exposed the legacy JSON-RPC-over-HTTP MCP transport on loopback without validating browser Origin headers before routing requests. A malicious…
Opis źródłowy NVD · ENCVSS 8,6 · EPSS 0,26 % · rekomendacja wg zapisanej polityki
The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From version 25.01 to before version 26.05, AuthenticationEndpoint.verifyOpenIdToken builds its verifier as JWT.require(algorithm).withIssuer(issuer).build() and does not enforce the aud claim…
Opis źródłowy NVD · ENCVSS 7,4 · EPSS 0,21 % · rekomendacja wg zapisanej polityki
Conda Organization Infrastructure is a centralized location for infrastructure codes. Prior to commit 9c0f238, a GitHub Actions Pwn Request vulnerability appears to remain present in conda/conda. The affected workflow is .github/workflows/update.yml. It is triggered by issue_comment events…
Opis źródłowy NVD · ENCVSS 9,9 · EPSS 0,33 % · rekomendacja wg zapisanej polityki
Isar is an integration system for automated root filesystem generation. In versions 0.11 and newer, /etc/apt/trusted.gpg.d is created manually during bootstrap setup to be able to deploy local keys. By that, the directory is owned by the calling user (the one that executes Isar) instead of root.…
Opis źródłowy NVD · ENCVSS 5,1 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. Prior to version 26.05, the password reset token is predictably based on the time of the reset request. An attacker who knows the target's email address can request a reset and then brute-force…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,33 % · rekomendacja wg zapisanej polityki
GFI Archiver before 15.14 contains a stored cross-site scripting vulnerability in the MailInsights scheduled report configuration that allows authenticated attackers to inject arbitrary web script or HTML via the report name parameter to /Archiver/MailInsights.aspx. The injected payload is stored…
Opis źródłowy NVD · ENCVSS 5,4 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
A local privilege escalation vulnerability in the optional dnscache package of Zimbra Collaboration Suite (ZCS) allows the Unix zimbra account to access files with root privileges. The passwordless sudo policy permits arbitrary arguments to zmunbound, whose wrapper forwards them to Unbound without…
Opis źródłowy NVD · ENCVSS 7,8 · EPSS 0,12 % · rekomendacja wg zapisanej polityki
CVSS
7,8
EPSS
0,12 %
Poprawka
Status poprawki nieustalony
Publikacja
Aktualizacja NVD
Podatności: opis, rekomendacja, CVSS, EPSS i daty źródłowe. Rekomendacja nie potwierdza podatności własnego zasobu.
An incomplete list of disallowed inputs in the Python code validator of the run_script tool in AWS MCP Server might allow an authenticated remote user to execute arbitrary code within their own isolated session environment via a crafted script.
AWS fixed this issue service-side. No customer…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,3 · EPSS 0,31 % · rekomendacja wg zapisanej polityki
Tandoor Recipes before 2.7.0 contains an improper cache-key design in cookbook/helper/permission_helper.py that allows authenticated users to retain stale group-based permissions across different spaces by exploiting a cache key keyed only on user id while omitting the active space, with the…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,1 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
Relative path traversal during model archive extraction in Amazon Web Services Multi Model Server 1.1.11 and earlier might allow remote actors to execute arbitrary code via a crafted model archive.
Multi Model Server is end of life and no fixed version is available. Users should discontinue use…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,3 · EPSS 0,53 % · rekomendacja wg zapisanej polityki
Server-side request forgery in the model download path in Amazon Web Services Multi Model Server 1.1.11 and earlier might allow remote actors to send requests to internal network destinations via a crafted model URL.
Multi Model Server is end of life and no fixed version is available. Users…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,36 % · rekomendacja wg zapisanej polityki
ConnMan through 2.0 has a stack-based buffer overflow via a DHCPv6 Reply message. This occurs in get_domains in gdhcp/client.c. It copies a fixed NS_MAXDNAME (1025) bytes from a DHCPv6 DOMAIN_LIST (option 24) value into a 1026-byte stack buffer dns_name regardless of the actual option length, then…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,6 · EPSS 0,3 % · rekomendacja wg zapisanej polityki
A flaw was found in Kruize Autotune. Its REST API ships without an authentication layer, and the endpoints that return datasource configuration — the list-datasources endpoint (GET /datasources) and the datasource-metadata endpoint — serialized datasource objects using a default Gson configuration…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,4 · EPSS 0,25 % · rekomendacja wg zapisanej polityki
A flaw in Node.js Permission Model filesystem enforcement can grant access to paths that do not match a wildcard `--allow-fs-read` or `--allow-fs-write` rule.
When the requested path is shorter than the prefix of a wildcard grant, the radix tree lookup stops comparing early and treats the path as…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 3,6 · EPSS 0,2 % · rekomendacja wg zapisanej polityki
A flaw in Node.js TLS hostname verification allows a certificate with only a DNS SAN to authenticate an IP endpoint when the client connects using a non-canonical IPv4 spelling, such as `0177.0.0.1`, `0x7f.0.0.1`, `2130706433` or `127.1`.
`tls.checkServerIdentity()` did not classify these hosts…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,7 · EPSS 0,62 % · rekomendacja wg zapisanej polityki
A flaw in Node.js Permission Model filesystem enforcement leaves `fs.realpathSync()` without the required read permission checks. This is an incomplete fix of CVE-2026-21715, which only covered `fs.realpathSync.native()`.
As a result, code running under `--permission` with restricted…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 3,3 · EPSS 0,25 % · rekomendacja wg zapisanej polityki
A flaw in Node.js `crypto` causes the internal entropy caches used by `crypto.randomUUID()`, `crypto.randomUUIDv7()`, and `crypto.randomInt()` to be saved into user-land startup snapshots (`--build-snapshot`) and single executable applications built with `useSnapshot`.
If any of these functions,…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 4,8 · EPSS 0,33 % · rekomendacja wg zapisanej polityki
A flaw in Node.js HTTP Agent connection reuse can cause a client to accept as valid a response that was sent before the client has sent the request. This is an incomplete fix of CVE-2026-48931.
The guard that destroys idle keep-alive sockets when unexpected data arrives only runs when the event…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,32 % · rekomendacja wg zapisanej polityki
A flaw in Node.js DNS resolution allows hostnames containing a NUL byte to be silently truncated by the dns.resolve*() functions and dns.reverse(). This is an incomplete fix of CVE-2026-48930, which only covered dns.lookup() and the net/tls host options.
Because the name is passed to c-ares as…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,4 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
A flaw in Node.js TLS hostname verification allows a certificate without a matching IP address SAN to authenticate a connection to an IPv4 address when the host is written with non-ASCII characters, such as fullwidth digits (`１２７.0.0.1`).
`tls.checkServerIdentity()` did not recognize such hosts…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,4 · EPSS 0,3 % · rekomendacja wg zapisanej polityki
A flaw in Node.js TLS hostname verification can cause a server certificate to be validated against a different IP address than the one the client connected to, when the host is a non-canonical IPv4 literal with a leading zero, such as `0127.0.0.1`.
`tls.checkServerIdentity()` normalizes the host…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,4 · EPSS 0,3 % · rekomendacja wg zapisanej polityki
A flaw in the Node.js `zlib.ZipFile` API can cause it to return bytes that do not belong to the requested entry after the local and central header validation fails.
When `zipEntry.modified` is read on an archive whose local header does not match its central directory, either directly or while…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 3,7 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
Uni-CLI gives people and agents one command interface for websites, browsers, desktop applications, local tools, and MCP. Prior to version 0.225.2, Uni-CLI exposed the legacy JSON-RPC-over-HTTP MCP transport on loopback without validating browser Origin headers before routing requests. A malicious…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,6 · EPSS 0,26 % · rekomendacja wg zapisanej polityki
The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From version 25.01 to before version 26.05, AuthenticationEndpoint.verifyOpenIdToken builds its verifier as JWT.require(algorithm).withIssuer(issuer).build() and does not enforce the aud claim…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,4 · EPSS 0,21 % · rekomendacja wg zapisanej polityki
Conda Organization Infrastructure is a centralized location for infrastructure codes. Prior to commit 9c0f238, a GitHub Actions Pwn Request vulnerability appears to remain present in conda/conda. The affected workflow is .github/workflows/update.yml. It is triggered by issue_comment events…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,9 · EPSS 0,33 % · rekomendacja wg zapisanej polityki
Isar is an integration system for automated root filesystem generation. In versions 0.11 and newer, /etc/apt/trusted.gpg.d is created manually during bootstrap setup to be able to deploy local keys. By that, the directory is owned by the calling user (the one that executes Isar) instead of root.…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,1 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. Prior to version 26.05, the password reset token is predictably based on the time of the reset request. An attacker who knows the target's email address can request a reset and then brute-force…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,33 % · rekomendacja wg zapisanej polityki
GFI Archiver before 15.14 contains a stored cross-site scripting vulnerability in the MailInsights scheduled report configuration that allows authenticated attackers to inject arbitrary web script or HTML via the report name parameter to /Archiver/MailInsights.aspx. The injected payload is stored…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,4 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
A local privilege escalation vulnerability in the optional dnscache package of Zimbra Collaboration Suite (ZCS) allows the Unix zimbra account to access files with root privileges. The passwordless sudo policy permits arbitrary arguments to zmunbound, whose wrapper forwards them to Unbound without…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,8 · EPSS 0,12 % · rekomendacja wg zapisanej polityki
7,8
0,12 %
Publikacja
Aktualizacja NVD
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
NVD · publikacjeOstatnie przetworzenie zakończone
NVD · aktualizacjePrzetwarzanie niepełne
CISA KEVOstatnie przetworzenie zakończone
FIRST EPSSOstatnie przetworzenie zakończoneData modelu znajduje się przy rekordzie.