Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
AVideo before 24.0 contains a server-side request forgery vulnerability in the isSSRFSafeURL function that fails to extract embedded IPv4 addresses from NAT64, 6to4, and Teredo IPv6 transition address formats. Unauthenticated attackers can bypass SSRF protections via the LiveLinks proxy endpoint…
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that would allow an attacker on the local network to gain access to the user account by performing an arbitrary number of authentication attempts with different credentials on the /REST/shutdownnow endpoint.
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Ransomlook contains a Redis glob pattern injection vulnerability caused by insufficient neutralization of user-controlled input before it is incorporated into Redis SCAN MATCH patterns.
The /api/health/<name> endpoint attempted to resolve the supplied name to a known group or market, but when…
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
The configure command accepted any endpoint URL and stored it beside the user's access token. ConfigureCommand.execute in src/cli.ts persisted the value given to its endpoint option into the user profile without passing it through createSafeUrl in src/config.ts, the helper that already restricted…
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Pandora is affected by a stored cross-site scripting vulnerability in the PDF download functionality. The /task-download/<task_id>/.../pdf endpoint verifies that the submitted file is a PDF using Pandora's content-based file-type detection, but previously returned the file using…
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,44 % · rekomendacja wg zapisanej polityki
The payment notification endpoint for PayPal accepts incoming data without verifying that it comes from the payment provider. Any site visitor can overwrite the stored payment notification of an order that is still awaiting payment with arbitrary content. This requires a page that contains the…
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,44 % · rekomendacja wg zapisanej polityki
The order cancellation function accepts an order identifier from the request and acts on that order without checking that the caller owns it. Any site visitor can set orders that are still awaiting payment to "canceled". This requires a page that contains the shop's order plugin. Orders that are…
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,44 % · rekomendacja wg zapisanej polityki
Affected versions of Flowintel incorrectly attempted to validate login email addresses by calling Email(email). That does not perform WTForms field validation; it merely constructs a validator object.
Consequently, malformed attacker-controlled email input could continue through the login…
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,43 % · rekomendacja wg zapisanej polityki
Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an authorized attacker to disclose information over a network.
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,93 % · rekomendacja wg zapisanej polityki
Mopidy before 4.0.5 contains a path traversal vulnerability that allows unauthenticated clients to access local files outside file/media_dirs because FileLibraryProvider.lookup() lacks a containment check. Attackers can call core.library.lookup or core.tracklist.add over JSON-RPC or WebSocket with…
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,43 % · rekomendacja wg zapisanej polityki
Joomla Extension - joomgalleryfriends.net - Password-Protected Category Bypass via JSON Format in JoomGallery < 4.4.0- An unauthenticated access control bypass exists in JoomGallery's category JSON view. When a gallery category is protected with a password, the HTML view correctly enforces the…
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,43 % · rekomendacja wg zapisanej polityki
Sharp and Toshiba Tec MFPs (multifunction printers) for a certain market have been shipped with the user authentication feature disabled in the initial configuration. When used with the initial configuration, the address book editing and a range of features related to Document Filing can be…
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,43 % · rekomendacja wg zapisanej polityki
AVideo before 24.0 contains a server-side request forgery vulnerability in the isSSRFSafeURL function that fails to extract embedded IPv4 addresses from NAT64, 6to4, and Teredo IPv6 transition address formats. Unauthenticated attackers can bypass SSRF protections via the LiveLinks proxy endpoint…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that would allow an attacker on the local network to gain access to the user account by performing an arbitrary number of authentication attempts with different credentials on the /REST/shutdownnow endpoint.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Ransomlook contains a Redis glob pattern injection vulnerability caused by insufficient neutralization of user-controlled input before it is incorporated into Redis SCAN MATCH patterns.
The /api/health/<name> endpoint attempted to resolve the supplied name to a known group or market, but when…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
The configure command accepted any endpoint URL and stored it beside the user's access token. ConfigureCommand.execute in src/cli.ts persisted the value given to its endpoint option into the user profile without passing it through createSafeUrl in src/config.ts, the helper that already restricted…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Pandora is affected by a stored cross-site scripting vulnerability in the PDF download functionality. The /task-download/<task_id>/.../pdf endpoint verifies that the submitted file is a PDF using Pandora's content-based file-type detection, but previously returned the file using…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,44 % · rekomendacja wg zapisanej polityki
The payment notification endpoint for PayPal accepts incoming data without verifying that it comes from the payment provider. Any site visitor can overwrite the stored payment notification of an order that is still awaiting payment with arbitrary content. This requires a page that contains the…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,44 % · rekomendacja wg zapisanej polityki
The order cancellation function accepts an order identifier from the request and acts on that order without checking that the caller owns it. Any site visitor can set orders that are still awaiting payment to "canceled". This requires a page that contains the shop's order plugin. Orders that are…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,44 % · rekomendacja wg zapisanej polityki
Affected versions of Flowintel incorrectly attempted to validate login email addresses by calling Email(email). That does not perform WTForms field validation; it merely constructs a validator object.
Consequently, malformed attacker-controlled email input could continue through the login…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,43 % · rekomendacja wg zapisanej polityki
Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an authorized attacker to disclose information over a network.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,93 % · rekomendacja wg zapisanej polityki
Mopidy before 4.0.5 contains a path traversal vulnerability that allows unauthenticated clients to access local files outside file/media_dirs because FileLibraryProvider.lookup() lacks a containment check. Attackers can call core.library.lookup or core.tracklist.add over JSON-RPC or WebSocket with…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,43 % · rekomendacja wg zapisanej polityki
Joomla Extension - joomgalleryfriends.net - Password-Protected Category Bypass via JSON Format in JoomGallery < 4.4.0- An unauthenticated access control bypass exists in JoomGallery's category JSON view. When a gallery category is protected with a password, the HTML view correctly enforces the…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,43 % · rekomendacja wg zapisanej polityki
Sharp and Toshiba Tec MFPs (multifunction printers) for a certain market have been shipped with the user authentication feature disabled in the initial configuration. When used with the initial configuration, the address book editing and a range of features related to Document Filing can be…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,43 % · rekomendacja wg zapisanej polityki