Publikacje w kolejności czasu

The ONVIF service on the E3 can be rendered unresponsive by sending malformed or incomplete requests to certain operations. The affected service stops accepting new connections while the rest of the device continues operating normally, and will recover automatically after a period. This can be…

CVSS 6,9 · EPSS 0,52 % · rekomendacja wg zapisanej polityki

The ONVIF device service on affected Kiloview E3 NDI encoder firmware accepts hostname, DNS, and NTP configuration write operations without requiring authentication, regardless of the device's configured authentication setting for this service. A remote, unauthenticated attacker can alter the…

CVSS 8,7 · EPSS 0,41 % · rekomendacja wg zapisanej polityki

The system control service on affected Kiloview E3 NDI encoder firmware fails to sanitize the hostname parameter accepted by its device naming endpoint, passing it unquoted into a shell command. An authenticated web user with access to this function can embed characters to execute arbitrary…

CVSS 9,4 · EPSS 0,51 % · rekomendacja wg zapisanej polityki

Authentication tokens issued by the E3's web management interface on login are given an expiration time far beyond any reasonable session lifetime, effectively making them non-expiring. A token obtained through interception or device compromise remains valid for authenticated access for an…

CVSS 8,3 · EPSS 0,37 % · rekomendacja wg zapisanej polityki

Stack-based buffer overflow in Microsoft Exchange Online allows an authorized attacker to execute code over a network.

CVSS 7,5 · EPSS 0,54 % · rekomendacja wg zapisanej polityki

A flaw was found in the OpenShift client oc. When extracting container image layers with oc image extract, the application fails to properly sanitize symbolic and hard link targets pointing to absolute paths or to sibling directories of the extraction destination. An attacker who supplies a…

CVSS 5,5 · EPSS 0,16 % · rekomendacja wg zapisanej polityki

A flaw was found in libslirp. When handling ICMP echo requests, the reply length is not updated to match the actual data received from the host. Under specific conditions where the normal ICMP socket is unavailable, this length mismatch causes the host's real IP address to be leaked to the guest…

CVSS 3,5 · EPSS 0,24 % · rekomendacja wg zapisanej polityki

InterSystems IRIS for Health has TLS/SSL encryption turned off by default, which may enable an attacker to view transmitted data and use that data to log into the device.

CVSS 9,2 · EPSS 0,19 % · rekomendacja wg zapisanej polityki

The ONVIF device service on the E3 responds to certain informational requests without requiring authentication. A remote, unauthenticated party can retrieve detailed device identifiers along with a list of configured user accounts and their privilege levels. This aids attackers in fingerprinting…

CVSS 6,9 · EPSS 0,39 % · rekomendacja wg zapisanej polityki

The network management service on affected Kiloview E3 NDI encoder firmware fails to sanitize one field used when configuring static routes via the web management API. An authenticated web user with permission to configure static routes can exploit this to execute arbitrary operating system…

CVSS 9,4 · EPSS 0,52 % · rekomendacja wg zapisanej polityki

Improper neutralization of special elements used in a command ('command injection') in Azure Pipelines allows an unauthorized attacker to execute code over a network.

CVSS 9,1 · EPSS 0,67 % · rekomendacja wg zapisanej polityki

A vulnerability exists in the the time zone parameter and does not properly validate user input, which may allow an authenticated user to cause /etc/localtime to point to a file outside the intended zoneinfo directory .

CVSS 6,0 · EPSS 0,39 % · rekomendacja wg zapisanej polityki

VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed…

Potwierdzone wykorzystanie · CISA KEV

libexpat through 2.9.0 contains a denial of service vulnerability because billion laughs protection in accountingDiffTolerated() in xmlparse.c detects entity amplification too late. Attackers can supply a moderately sized XML document with a large DTD and nested entity expansions to consume tens…

CVSS 8,7 · EPSS 0,46 % · rekomendacja wg zapisanej polityki

Vikunja 2.2.0 before 2.7.1 contains an HTML injection vulnerability in CreateConversationalHeader in pkg/notifications/mail.go that interpolates display names and task and project titles raw into email anchors. Authenticated users can craft titles or display names that close the anchor and inject…

CVSS 3,5 · EPSS 0,2 % · rekomendacja wg zapisanej polityki

Motor.NET before 0.19.0 contains a denial of service vulnerability that allows a remote attacker who can publish to a consumed queue to crash the service permanently by sending a message with crafted cloudEvents headers. Attackers can supply an invalid cloudEvents:motorversion, a single…

CVSS 8,7 · EPSS 0,68 % · rekomendacja wg zapisanej polityki

Motor.NET before 0.19.0 contains a denial-of-service vulnerability that allows a remote attacker who can produce records to a consumed topic to crash the service permanently by sending a single crafted record. By setting the content-type header to application/cloudevents+json and omitting required…

CVSS 7,5 · EPSS 0,68 % · rekomendacja wg zapisanej polityki

Unrestricted network access between execution contexts in KNIME Business Hub before version 1.19.0 allows an authenticated remote user to access open network ports on executors in different execution contexts. This only poses a security issue if the IP address of the attacked executor is know and…

CVSS 6,4 · EPSS 0,43 % · rekomendacja wg zapisanej polityki

Missing security attributes on sensitive cookies in KNIME Business Hub before version 1.19.0 allow an unauthenticated remote attacker to compromise user sessions if other security issues such as a cross-site scripting vulnerability or a man-in-the-middle attack are present. A workaround is not…

CVSS 2,1 · EPSS 0,19 % · rekomendacja wg zapisanej polityki

OS command injection in the Terraform hook in AWS SAM CLI before 1.166.2 might allow an actor who can influence the Terraform configuration or plan file consumed by a build to execute arbitrary commands as the build user on the host running the build via a crafted Terraform resource address. To…

CVSS 8,4 · EPSS 0,88 % · rekomendacja wg zapisanej polityki

Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0.1 contains a denial of service vulnerability in wasmtime-wasi that allows guest WASI programs to panic the host via overflowing filesystem timestamps. Attackers can pass atim or mtim values whose sub-second field overflows the…

CVSS 6,2 · EPSS 0,11 % · rekomendacja wg zapisanej polityki

Wasmtime 47.0.0 before 48.0.3 and 49.0.0 before 49.0.1 contains a fuel accounting flaw in Cranelift-compiled call_ref and try_table catch paths. Malicious guests can reset consumed fuel after calls to run exponentially long on linear fuel, evading timeouts and periodic yields for denial of service.

CVSS 6,9 · EPSS 0,24 % · rekomendacja wg zapisanej polityki

Wasmtime 46.0.0 before 46.0.3 and 47.0.0 before 47.0.4 contains an uncontrolled resource allocation vulnerability in its WASIp3 implementation that buffers guest-specified-length writes on the host without limit. Malicious guests can offer large buffers to WASIp3 file or HTTP write streams,…

CVSS 5,8 · EPSS 0,17 % · rekomendacja wg zapisanej polityki

Wasmtime 46.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a denial-of-service vulnerability in its wasi:http implementation that allows guests to panic the host. Guests can specify a zero between-bytes-timeout request option, which is forwarded directly to a Tokio API that panics, crashing…

CVSS 5,9 · EPSS 0,28 % · rekomendacja wg zapisanej polityki

Wasmtime 47.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains an improper validation vulnerability that accepts components whose core modules import WebAssembly tags with a subtype of the original type. Malicious guests can mis-type exception object payloads to corrupt the GC heap, causing…

CVSS 4,8 · EPSS 0,18 % · rekomendacja wg zapisanej polityki