Chronologiczny przegląd publikacji. Ostatnie modyfikacje są w osobnym widoku.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
The GeoDirectory WordPress plugin before 2.8.194 does not validate a user-supplied image URL before using it as a local file path when saving a front-end listing, allowing users with Subscriber-level access and above to read files from outside the web root and to delete files on the server,…
Opis źródłowy NVD · ENCVSS 6,4 · EPSS 0,25 % · rekomendacja wg zapisanej polityki
The GeoDirectory WordPress plugin before 2.8.194 does not perform status, ownership or password checks when loading listings for one of its unauthenticated AJAX handlers, allowing unauthenticated users to disclose the content of non-public (draft, pending and private) listings by supplying their…
Opis źródłowy NVD · ENCVSS 5,3 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
The GeoDirectory WordPress plugin before 2.8.194 does not sanitise and escape some of its map shortcode attributes before outputting them within a style attribute, allowing users with the Contributor role and above to perform Stored Cross-Site Scripting attacks that execute in the context of any…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,31 % · rekomendacja wg zapisanej polityki
The GeoDirectory WordPress plugin before 2.8.194 does not properly escape administrator-defined text before writing it into a generated PHP file in its own folder, allowing high privilege users such as a subsite administrator on a multisite network, who cannot otherwise run code, to achieve…
Opis źródłowy NVD · ENCVSS 7,2 · EPSS 0,6 % · rekomendacja wg zapisanej polityki
The Advanced Twenty Seventeen WordPress plugin through 1.3.1 does not perform any capability or nonce check on the action that creates and activates its bundled child , allowing any authenticated user such as a subscriber to switch the site's active site-wide, and allowing the same action to be…
Opis źródłowy NVD · ENCVSS 5,4 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
The MAS Videos WordPress plugin through 1.3.4 does not perform any capability or ownership check when handling its front-end video and playlist deletion requests, and the nonce it verifies is tied only to a static action rather than to the targeted object, allowing any authenticated user with a…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
The Pixel Tag Manager for WooCommerce WordPress plugin before 2.2.3 does not perform a capability check in one of its AJAX actions, and exposes the nonce protecting it to any user able to access the admin dashboard, allowing users with a role as low as Contributor to overwrite the Pixel Tag…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,31 % · rekomendacja wg zapisanej polityki
The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Limited Privilege Escalation in all versions up to, and including, 4.0.3. This is due to the Gutenberg Register block passing the attacker-controlled Assigned Role…
Opis źródłowy NVD · ENCVSS 7,1 · EPSS 0,21 % · rekomendacja wg zapisanej polityki
The Prime Mover – Backup and Migration plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.2.1 via deserialization of untrusted input in the migration search-and-replace routine (recursiveUnserializeReplace()). An unauthenticated attacker can store a…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,55 % · rekomendacja wg zapisanej polityki
MongoDB Compass relies on Electron, a third-party runtime that carries its own TLS root certificate store. This root certificate store has the recoverable eMudhra intermediate CA certificates. Issue is resolved by updating to Compass 1.53.1, which includes Electron 44.9.1.
Opis źródłowy NVD · ENCVSS 7,6 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
Postiz lets a signed-in user ask the backend to run a function on one of their connected channels. The backend did not restrict which functions can be requested, so a user could call internal helper functions that were never meant to be reachable from the web interface.
One of those helpers reads…
Opis źródłowy NVD · ENCVSS 9,9 · EPSS 0,49 % · rekomendacja wg zapisanej polityki
Serialize JavaScript serializes JavaScript values to a superset of JSON that includes regular expressions and functions. Prior to 7.1.3, the function-source escaping logic does not neutralize a bare closing-script prefix when attacker-influenced function source text ends exactly at that prefix.…
Opis źródłowy NVD · ENCVSS 2,1 · EPSS 0,31 % · rekomendacja wg zapisanej polityki
The app/process-api-response-headers action accepts fake Craft API response headers from any authenticated control panel user.
A non-admin user with only accessCp can place newline characters in X-Craft-Plugin-Licenses. Craft passes this value to its .env writer without removing the…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
The Mollie webhook endpoint accepts two independent, attacker-controlled parameters and never verifies that they belong together:
* commerceTransactionHash — selects which Craft Commerce transaction is completed
* id — selects which Mollie payment is queried for its status
An…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
Craft CMS allows any authenticated control panel user to submit an element-search condition whose element selector is evaluated as a sandboxed Twig object template. Craft’s allowed column filter delegates property lookup to Yii ArrayHelper, outside Twig’s SecurityPolicy. Repeated single-segment…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.12.0rc0 until 3.17.0, the scorer invoke, register, and GenAI evaluate endpoints, including unauthenticated POST /ajax-api/3.0/mlflow/scorer/invoke, accept serialized third-party…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,68 % · rekomendacja wg zapisanej polityki
GraphQL Scalars is a library of custom GraphQL scalars for creating precise type-safe GraphQL schemas. From 1.24.1 until 2.0.1, GraphQLPhoneNumber in src/scalars/PhoneNumber.ts uses ambiguous nested digit quantifiers that backtrack exponentially when a PhoneNumber value contains a run of digits…
Opis źródłowy NVD · ENCVSS 7,5 · EPSS 0,49 % · rekomendacja wg zapisanej polityki
Wasmtime is a runtime for WebAssembly. Prior to 36.0.19 and 43.0.0, the Cranelift compiler backend bit-packs SSA value indices in a way that can silently overflow in release builds when compiling a sufficiently large or specially crafted Wasm function with many SSA values. The overflow can make…
Opis źródłowy NVD · ENCVSS 9,9 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Wasmtime is a runtime for WebAssembly. From 46.0.0 until 48.0.7 and 49.0.4, lowering a host-created component-model stream or future into a guest can omit a required payload-type check after the value passes through guest code and returns through StreamAny, FutureAny, Val::Stream, Val::Future, or…
Opis źródłowy NVD · ENCVSS 5,7 · EPSS 0,43 % · rekomendacja wg zapisanej polityki
Wasmtime is a runtime for WebAssembly. Prior to 36.0.19, 48.0.7, and 49.0.4, the Cranelift compiler backend on aarch64 can compile a Wasm br_table instruction with more than approximately 256,000 targets so that it has an incorrect conditional branch target. The branch can then jump to arbitrary…
Opis źródłowy NVD · ENCVSS 9,9 · EPSS 0,99 % · rekomendacja wg zapisanej polityki
Happy DOM is a JavaScript implementation of a web browser without its graphical user interface. From 17.0.0 until 21.0.4, packages/happy-dom/src/module/ECMAScriptModuleCompiler.ts accepts a named ESM import alias without validating that it is a JavaScript binding identifier before inserting it…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
A security flaw has been discovered in Kakao khaiii up to 0.4. The impacted element is the function khaiii::nn::Linear::open of the file src/main/cpp/khaiii/nn/Linear.cpp of the component JSON Config File Handler. The manipulation of the argument hidden_dim/class_num results in out-of-bounds read.…
Opis źródłowy NVD · ENCVSS 1,9 · EPSS 0,11 % · rekomendacja wg zapisanej polityki
LangGraph checkpoint savers provide Postgres- and SQLite-backed state persistence for LangGraph workflows and agents. Prior to langgraph-checkpoint-postgres 3.1.3 and langgraph-checkpoint-sqlite 3.1.2, PostgresStore, AsyncPostgresStore, SqliteStore, and AsyncSqliteStore flatten namespace labels…
Opis źródłowy NVD · ENCVSS 6,0 · EPSS 0,3 % · rekomendacja wg zapisanej polityki
The LangGraph CLI is the official command-line interface for LangGraph. From 0.4.15 until 0.4.32, langgraph deploy --verbose passes a temporary registry push token on standard input to docker login --password-stdin, but the CLI subprocess helper prints command input in verbose mode. Anyone who can…
Opis źródłowy NVD · ENCVSS 4,1 · EPSS 0,11 % · rekomendacja wg zapisanej polityki
OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 2.2.2, an attacker overbooks an agent, placing multiple appointments into a single time slot that the system is designed to keep exclusive. The number of overlapping…
Opis źródłowy NVD · ENCVSS 5,4 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
CVSS
5,4
EPSS
0,27 %
Poprawka
Status poprawki nieustalony
Publikacja
Aktualizacja NVD
Podatności: opis, rekomendacja, CVSS, EPSS i daty źródłowe. Rekomendacja nie potwierdza podatności własnego zasobu.
The GeoDirectory WordPress plugin before 2.8.194 does not validate a user-supplied image URL before using it as a local file path when saving a front-end listing, allowing users with Subscriber-level access and above to read files from outside the web root and to delete files on the server,…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,4 · EPSS 0,25 % · rekomendacja wg zapisanej polityki
The GeoDirectory WordPress plugin before 2.8.194 does not perform status, ownership or password checks when loading listings for one of its unauthenticated AJAX handlers, allowing unauthenticated users to disclose the content of non-public (draft, pending and private) listings by supplying their…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,3 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
The GeoDirectory WordPress plugin before 2.8.194 does not sanitise and escape some of its map shortcode attributes before outputting them within a style attribute, allowing users with the Contributor role and above to perform Stored Cross-Site Scripting attacks that execute in the context of any…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,31 % · rekomendacja wg zapisanej polityki
The GeoDirectory WordPress plugin before 2.8.194 does not properly escape administrator-defined text before writing it into a generated PHP file in its own folder, allowing high privilege users such as a subsite administrator on a multisite network, who cannot otherwise run code, to achieve…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,2 · EPSS 0,6 % · rekomendacja wg zapisanej polityki
The Advanced Twenty Seventeen WordPress plugin through 1.3.1 does not perform any capability or nonce check on the action that creates and activates its bundled child , allowing any authenticated user such as a subscriber to switch the site's active site-wide, and allowing the same action to be…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,4 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
The MAS Videos WordPress plugin through 1.3.4 does not perform any capability or ownership check when handling its front-end video and playlist deletion requests, and the nonce it verifies is tied only to a static action rather than to the targeted object, allowing any authenticated user with a…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
The Pixel Tag Manager for WooCommerce WordPress plugin before 2.2.3 does not perform a capability check in one of its AJAX actions, and exposes the nonce protecting it to any user able to access the admin dashboard, allowing users with a role as low as Contributor to overwrite the Pixel Tag…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,31 % · rekomendacja wg zapisanej polityki
The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Limited Privilege Escalation in all versions up to, and including, 4.0.3. This is due to the Gutenberg Register block passing the attacker-controlled Assigned Role…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,1 · EPSS 0,21 % · rekomendacja wg zapisanej polityki
The Prime Mover – Backup and Migration plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.2.1 via deserialization of untrusted input in the migration search-and-replace routine (recursiveUnserializeReplace()). An unauthenticated attacker can store a…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,55 % · rekomendacja wg zapisanej polityki
MongoDB Compass relies on Electron, a third-party runtime that carries its own TLS root certificate store. This root certificate store has the recoverable eMudhra intermediate CA certificates. Issue is resolved by updating to Compass 1.53.1, which includes Electron 44.9.1.
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,6 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
Postiz lets a signed-in user ask the backend to run a function on one of their connected channels. The backend did not restrict which functions can be requested, so a user could call internal helper functions that were never meant to be reachable from the web interface.
One of those helpers reads…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,9 · EPSS 0,49 % · rekomendacja wg zapisanej polityki
Serialize JavaScript serializes JavaScript values to a superset of JSON that includes regular expressions and functions. Prior to 7.1.3, the function-source escaping logic does not neutralize a bare closing-script prefix when attacker-influenced function source text ends exactly at that prefix.…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 2,1 · EPSS 0,31 % · rekomendacja wg zapisanej polityki
The app/process-api-response-headers action accepts fake Craft API response headers from any authenticated control panel user.
A non-admin user with only accessCp can place newline characters in X-Craft-Plugin-Licenses. Craft passes this value to its .env writer without removing the…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
The Mollie webhook endpoint accepts two independent, attacker-controlled parameters and never verifies that they belong together:
* commerceTransactionHash — selects which Craft Commerce transaction is completed
* id — selects which Mollie payment is queried for its status
An…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,17 % · rekomendacja wg zapisanej polityki
Craft CMS allows any authenticated control panel user to submit an element-search condition whose element selector is evaluated as a sandboxed Twig object template. Craft’s allowed column filter delegates property lookup to Yii ArrayHelper, outside Twig’s SecurityPolicy. Repeated single-segment…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.12.0rc0 until 3.17.0, the scorer invoke, register, and GenAI evaluate endpoints, including unauthenticated POST /ajax-api/3.0/mlflow/scorer/invoke, accept serialized third-party…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,68 % · rekomendacja wg zapisanej polityki
GraphQL Scalars is a library of custom GraphQL scalars for creating precise type-safe GraphQL schemas. From 1.24.1 until 2.0.1, GraphQLPhoneNumber in src/scalars/PhoneNumber.ts uses ambiguous nested digit quantifiers that backtrack exponentially when a PhoneNumber value contains a run of digits…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,5 · EPSS 0,49 % · rekomendacja wg zapisanej polityki
Wasmtime is a runtime for WebAssembly. Prior to 36.0.19 and 43.0.0, the Cranelift compiler backend bit-packs SSA value indices in a way that can silently overflow in release builds when compiling a sufficiently large or specially crafted Wasm function with many SSA values. The overflow can make…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,9 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Wasmtime is a runtime for WebAssembly. From 46.0.0 until 48.0.7 and 49.0.4, lowering a host-created component-model stream or future into a guest can omit a required payload-type check after the value passes through guest code and returns through StreamAny, FutureAny, Val::Stream, Val::Future, or…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,7 · EPSS 0,43 % · rekomendacja wg zapisanej polityki
Wasmtime is a runtime for WebAssembly. Prior to 36.0.19, 48.0.7, and 49.0.4, the Cranelift compiler backend on aarch64 can compile a Wasm br_table instruction with more than approximately 256,000 targets so that it has an incorrect conditional branch target. The branch can then jump to arbitrary…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,9 · EPSS 0,99 % · rekomendacja wg zapisanej polityki
Happy DOM is a JavaScript implementation of a web browser without its graphical user interface. From 17.0.0 until 21.0.4, packages/happy-dom/src/module/ECMAScriptModuleCompiler.ts accepts a named ESM import alias without validating that it is a JavaScript binding identifier before inserting it…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,47 % · rekomendacja wg zapisanej polityki
A security flaw has been discovered in Kakao khaiii up to 0.4. The impacted element is the function khaiii::nn::Linear::open of the file src/main/cpp/khaiii/nn/Linear.cpp of the component JSON Config File Handler. The manipulation of the argument hidden_dim/class_num results in out-of-bounds read.…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 1,9 · EPSS 0,11 % · rekomendacja wg zapisanej polityki
LangGraph checkpoint savers provide Postgres- and SQLite-backed state persistence for LangGraph workflows and agents. Prior to langgraph-checkpoint-postgres 3.1.3 and langgraph-checkpoint-sqlite 3.1.2, PostgresStore, AsyncPostgresStore, SqliteStore, and AsyncSqliteStore flatten namespace labels…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,0 · EPSS 0,3 % · rekomendacja wg zapisanej polityki
The LangGraph CLI is the official command-line interface for LangGraph. From 0.4.15 until 0.4.32, langgraph deploy --verbose passes a temporary registry push token on standard input to docker login --password-stdin, but the CLI subprocess helper prints command input in verbose mode. Anyone who can…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 4,1 · EPSS 0,11 % · rekomendacja wg zapisanej polityki
OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 2.2.2, an attacker overbooks an agent, placing multiple appointments into a single time slot that the system is designed to keep exclusive. The number of overlapping…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,4 · EPSS 0,27 % · rekomendacja wg zapisanej polityki
5,4
0,27 %
Publikacja
Aktualizacja NVD
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.