Chronologiczny przegląd publikacji. Ostatnie modyfikacje są w osobnym widoku.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
An authentication bypass vulnerability in the public onPhase/ frevvo registration form version 11.0.14 allows an unauthenticated remote attacker to authenticate as an arbitrary tenant user, obtain TenantAdmin and Designer privileges, and execute arbitrary operating system commands via manipulation…
Opis źródłowy NVD · ENCVSS 9,3 · EPSS 0,53 % · rekomendacja wg zapisanej polityki
A server-side request forgery (SSRF) vulnerability in the unauthenticated form service in version 11.0.14 in onPhase Forms allows an unauthenticated remote attacker to access sensitive internal Apache Solr data via an attacker-controlled URL supplied to a publicly accessible form.
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,39 % · rekomendacja wg zapisanej polityki
A vulnerability was identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. The affected element is the function sistem.php::simpan of the file application/modules/admin/controllers/sistem.php of the component Settings Handler. The manipulation of the argument…
Opis źródłowy NVD · ENCVSS 1,9 · EPSS 0,21 % · rekomendacja wg zapisanej polityki
A flaw was found in the iscsiuio component of open-iscsi. The DHCPv4 option parser incorrectly calculates the length of the options data, causing it to read beyond the allocated buffer into adjacent heap memory. An attacker on the same network segment can send a crafted DHCP response to crash the…
Opis źródłowy NVD · ENCVSS 7,6 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
A flaw was found in the iscsiuio component of open-iscsi. The DHCPv6 option parser calls strlen() on raw network data without ensuring a NUL terminator is present, causing it to read past the buffer into heap memory. This can result in a daemon crash, a 1-byte heap overwrite, or corruption of the…
Opis źródłowy NVD · ENCVSS 6,3 · EPSS 0,2 % · rekomendacja wg zapisanej polityki
A flaw was found in the iscsiuio component of open-iscsi. The IPv6 Neighbor Discovery handler accesses link-layer address options at a fixed offset without verifying the packet contains them. Additionally, the ARP table is updated unconditionally with attacker-controlled addresses from the packet…
Opis źródłowy NVD · ENCVSS 7,1 · EPSS 0,21 % · rekomendacja wg zapisanej polityki
A vulnerability was determined in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Impacted is the function kirim of the file application/modules/web/controllers/contact.php of the component Contact Form. Executing a manipulation of the argument…
Opis źródłowy NVD · ENCVSS 2,1 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
The authentication framework used by affected Kiloview E3 NDI encoder firmware signs session JSON Web Tokens using an HMAC-SHA256 secret hardcoded as a static string within the firmware image, identical across all deployed devices. An attacker with access to the publicly distributed firmware can…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,38 % · rekomendacja wg zapisanej polityki
The network management service on affected Kiloview E3 NDI encoder firmware fails to validate the network interface name accepted by its link maintenance address configuration endpoint before passing it to a shell command, unlike sibling handlers that perform the same validation. An authenticated…
Opis źródłowy NVD · ENCVSS 9,4 · EPSS 0,51 % · rekomendacja wg zapisanej polityki
The ONVIF service on the E3 can be rendered unresponsive by sending malformed or incomplete requests to certain operations. The affected service stops accepting new connections while the rest of the device continues operating normally, and will recover automatically after a period. This can be…
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,52 % · rekomendacja wg zapisanej polityki
The ONVIF device service on affected Kiloview E3 NDI encoder firmware accepts hostname, DNS, and NTP configuration write operations without requiring authentication, regardless of the device's configured authentication setting for this service. A remote, unauthenticated attacker can alter the…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,41 % · rekomendacja wg zapisanej polityki
The system control service on affected Kiloview E3 NDI encoder firmware fails to sanitize the hostname parameter accepted by its device naming endpoint, passing it unquoted into a shell command. An authenticated web user with access to this function can embed characters to execute arbitrary…
Opis źródłowy NVD · ENCVSS 9,4 · EPSS 0,51 % · rekomendacja wg zapisanej polityki
Authentication tokens issued by the E3's web management interface on login are given an expiration time far beyond any reasonable session lifetime, effectively making them non-expiring. A token obtained through interception or device compromise remains valid for authenticated access for an…
Opis źródłowy NVD · ENCVSS 8,3 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
Missing authentication for critical function in Azure Kubernetes Configuration Service allows an unauthorized attacker to elevate privileges over a network.
Opis źródłowy NVD · ENCVSS 10,0 · EPSS 0,71 % · rekomendacja wg zapisanej polityki
A flaw was found in FreeIPA. An improper authorization check allows an authenticated host to retrieve and revoke digital certificates assigned to other users or services. This issue occurs because FreeIPA verifies ownership solely by matching the host name to the certificate's subject Common Name…
Opis źródłowy NVD · ENCVSS 5,4 · EPSS 0,15 % · rekomendacja wg zapisanej polityki
A flaw was found in the OpenShift client oc. When extracting container image layers with oc image extract, the application fails to properly sanitize symbolic and hard link targets pointing to absolute paths or to sibling directories of the extraction destination. An attacker who supplies a…
Opis źródłowy NVD · ENCVSS 5,5 · EPSS 0,16 % · rekomendacja wg zapisanej polityki
A flaw was found in libslirp. When handling ICMP echo requests, the reply length is not updated to match the actual data received from the host. Under specific conditions where the normal ICMP socket is unavailable, this length mismatch causes the host's real IP address to be leaked to the guest…
Opis źródłowy NVD · ENCVSS 3,5 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.0, Authlib's RFC 9101 JWTAuthenticationRequest passes the unauthenticated, client-controlled request_uri parameter to the abstract get_request_object() hook before applying a destination or registration policy;…
Opis źródłowy NVD · ENCVSS 5,4 · EPSS 0,39 % · rekomendacja wg zapisanej polityki
Authlib is a Python library which builds OAuth and OpenID Connect servers. From 1.3.1 until 1.9.0, OctKey.import_key() checks asymmetric-key markers only at byte zero while Authlib's PEM loaders accept leading whitespace, comments, or a byte-order mark. In deployments that use the documented mixed…
Opis źródłowy NVD · ENCVSS 9,1 · EPSS 0,21 % · rekomendacja wg zapisanej polityki
Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.1, Authlib's OctKey.import_key() and HMAC signing and verification path accept zero-length key material. If an application's secret lookup can return an empty string or empty bytes, a remote attacker can…
Opis źródłowy NVD · ENCVSS 9,1 · EPSS 0,3 % · rekomendacja wg zapisanej polityki
Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.0, OpenIDMixin.parse_id_token() reads the nonce_supported decision from the untrusted ID token being validated and sets the expected nonce to null when that claim is the JSON boolean false. In implicit and…
Opis źródłowy NVD · ENCVSS 4,2 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.0, the default RFC 7523 JWTBearerGrant.get_audiences() returns an empty list, causing JWTBearerGrant.verify_claims() to require only that an aud claim exists without matching the current authorization server.…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,35 % · rekomendacja wg zapisanej polityki
Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.0, OpenIDImplicitGrant.validate_authorization_request() checks the client-controlled raw request.payload.scope for openid after the parent grant has filtered allowed scopes into request.scope. A registered…
Opis źródłowy NVD · ENCVSS 4,6 · EPSS 0,16 % · rekomendacja wg zapisanej polityki
CVSS
4,6
EPSS
0,16 %
Poprawka
Status poprawki nieustalony
Publikacja
Aktualizacja NVD
Podatności: opis, rekomendacja, CVSS, EPSS i daty źródłowe. Rekomendacja nie potwierdza podatności własnego zasobu.
An authentication bypass vulnerability in the public onPhase/ frevvo registration form version 11.0.14 allows an unauthenticated remote attacker to authenticate as an arbitrary tenant user, obtain TenantAdmin and Designer privileges, and execute arbitrary operating system commands via manipulation…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,3 · EPSS 0,53 % · rekomendacja wg zapisanej polityki
A server-side request forgery (SSRF) vulnerability in the unauthenticated form service in version 11.0.14 in onPhase Forms allows an unauthenticated remote attacker to access sensitive internal Apache Solr data via an attacker-controlled URL supplied to a publicly accessible form.
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,39 % · rekomendacja wg zapisanej polityki
A vulnerability was identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. The affected element is the function sistem.php::simpan of the file application/modules/admin/controllers/sistem.php of the component Settings Handler. The manipulation of the argument…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 1,9 · EPSS 0,21 % · rekomendacja wg zapisanej polityki
A flaw was found in the iscsiuio component of open-iscsi. The DHCPv4 option parser incorrectly calculates the length of the options data, causing it to read beyond the allocated buffer into adjacent heap memory. An attacker on the same network segment can send a crafted DHCP response to crash the…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,6 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
A flaw was found in the iscsiuio component of open-iscsi. The DHCPv6 option parser calls strlen() on raw network data without ensuring a NUL terminator is present, causing it to read past the buffer into heap memory. This can result in a daemon crash, a 1-byte heap overwrite, or corruption of the…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,3 · EPSS 0,2 % · rekomendacja wg zapisanej polityki
A flaw was found in the iscsiuio component of open-iscsi. The IPv6 Neighbor Discovery handler accesses link-layer address options at a fixed offset without verifying the packet contains them. Additionally, the ARP table is updated unconditionally with attacker-controlled addresses from the packet…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,1 · EPSS 0,21 % · rekomendacja wg zapisanej polityki
A vulnerability was determined in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Impacted is the function kirim of the file application/modules/web/controllers/contact.php of the component Contact Form. Executing a manipulation of the argument…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 2,1 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
The authentication framework used by affected Kiloview E3 NDI encoder firmware signs session JSON Web Tokens using an HMAC-SHA256 secret hardcoded as a static string within the firmware image, identical across all deployed devices. An attacker with access to the publicly distributed firmware can…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,38 % · rekomendacja wg zapisanej polityki
The network management service on affected Kiloview E3 NDI encoder firmware fails to validate the network interface name accepted by its link maintenance address configuration endpoint before passing it to a shell command, unlike sibling handlers that perform the same validation. An authenticated…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,4 · EPSS 0,51 % · rekomendacja wg zapisanej polityki
The ONVIF service on the E3 can be rendered unresponsive by sending malformed or incomplete requests to certain operations. The affected service stops accepting new connections while the rest of the device continues operating normally, and will recover automatically after a period. This can be…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,52 % · rekomendacja wg zapisanej polityki
The ONVIF device service on affected Kiloview E3 NDI encoder firmware accepts hostname, DNS, and NTP configuration write operations without requiring authentication, regardless of the device's configured authentication setting for this service. A remote, unauthenticated attacker can alter the…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,41 % · rekomendacja wg zapisanej polityki
The system control service on affected Kiloview E3 NDI encoder firmware fails to sanitize the hostname parameter accepted by its device naming endpoint, passing it unquoted into a shell command. An authenticated web user with access to this function can embed characters to execute arbitrary…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,4 · EPSS 0,51 % · rekomendacja wg zapisanej polityki
Authentication tokens issued by the E3's web management interface on login are given an expiration time far beyond any reasonable session lifetime, effectively making them non-expiring. A token obtained through interception or device compromise remains valid for authenticated access for an…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,3 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
Missing authentication for critical function in Azure Kubernetes Configuration Service allows an unauthorized attacker to elevate privileges over a network.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 10,0 · EPSS 0,71 % · rekomendacja wg zapisanej polityki
A flaw was found in FreeIPA. An improper authorization check allows an authenticated host to retrieve and revoke digital certificates assigned to other users or services. This issue occurs because FreeIPA verifies ownership solely by matching the host name to the certificate's subject Common Name…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,4 · EPSS 0,15 % · rekomendacja wg zapisanej polityki
A flaw was found in the OpenShift client oc. When extracting container image layers with oc image extract, the application fails to properly sanitize symbolic and hard link targets pointing to absolute paths or to sibling directories of the extraction destination. An attacker who supplies a…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,5 · EPSS 0,16 % · rekomendacja wg zapisanej polityki
A flaw was found in libslirp. When handling ICMP echo requests, the reply length is not updated to match the actual data received from the host. Under specific conditions where the normal ICMP socket is unavailable, this length mismatch causes the host's real IP address to be leaked to the guest…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 3,5 · EPSS 0,24 % · rekomendacja wg zapisanej polityki
Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.0, Authlib's RFC 9101 JWTAuthenticationRequest passes the unauthenticated, client-controlled request_uri parameter to the abstract get_request_object() hook before applying a destination or registration policy;…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,4 · EPSS 0,39 % · rekomendacja wg zapisanej polityki
Authlib is a Python library which builds OAuth and OpenID Connect servers. From 1.3.1 until 1.9.0, OctKey.import_key() checks asymmetric-key markers only at byte zero while Authlib's PEM loaders accept leading whitespace, comments, or a byte-order mark. In deployments that use the documented mixed…
Opis źródłowy NVD · EN
Pilne działanie
CVSS 9,1 · EPSS 0,21 % · rekomendacja wg zapisanej polityki
Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.1, Authlib's OctKey.import_key() and HMAC signing and verification path accept zero-length key material. If an application's secret lookup can return an empty string or empty bytes, a remote attacker can…
Opis źródłowy NVD · EN
Pilne działanie
CVSS 9,1 · EPSS 0,3 % · rekomendacja wg zapisanej polityki
Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.0, OpenIDMixin.parse_id_token() reads the nonce_supported decision from the untrusted ID token being validated and sets the expected nonce to null when that claim is the JSON boolean false. In implicit and…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 4,2 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.0, the default RFC 7523 JWTBearerGrant.get_audiences() returns an empty list, causing JWTBearerGrant.verify_claims() to require only that an aud claim exists without matching the current authorization server.…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,35 % · rekomendacja wg zapisanej polityki
Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.0, OpenIDImplicitGrant.validate_authorization_request() checks the client-controlled raw request.payload.scope for openid after the parent grant has filtered allowed scopes into request.scope. A registered…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 4,6 · EPSS 0,16 % · rekomendacja wg zapisanej polityki
4,6
0,16 %
Publikacja
Aktualizacja NVD
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.