Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
AnyDesk 7.0.15 and 9.0.1 contains an unquoted service path vulnerability that allows local non-privileged users to potentially execute code with elevated SYSTEM privileges. Attackers can exploit the unquoted service path configuration to inject malicious executables that will be run with…
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,43 % · rekomendacja wg zapisanej polityki
In Eclipse Jetty, across various versions of `jetty-security`, and `jetty-eeN-security`, and `jetty-eeN-servlet`, the Jakarta Spec constraints defined as `http-method-omission` can be bypassed by using substrings of the defined HTTP Methods.
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,43 % · rekomendacja wg zapisanej polityki
libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.19, `decoder_context::decode_slice_unit_tiles` (libde265/decctx.cc:920) reads `pps.CtbAddrRStoTS[ctbAddrRS]` at line 966 where `ctbAddrRS = ctbY * ctbsWidth + ctbX` is computed from PPS-supplied…
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,43 % · rekomendacja wg zapisanej polityki
Joomla Extension - themexpert.com - Information disclosure in Quix Page Builder < 6.2.1 - The Joomla extension Quix Page Builder Pro is vulnerable to an information disclosure. Raw exceptions reflected in AJAX handler responses.
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,43 % · rekomendacja wg zapisanej polityki
CentreStack before 17.4 contains a session variable injection vulnerability that allows unauthenticated attackers to inject arbitrary session variables by embedding newline and tab characters into a crafted AccountName parameter posted to the SelectProvider.aspx endpoint. Attackers can exploit the…
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,43 % · rekomendacja wg zapisanej polityki
libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.0.19 have a heap buffer overflow (out-of-bounds READ) exists in `decoder_context::decode_slice_unit_WPP()` in `libde265/decctx.cc`. When decoding a WPP (Wavefront Parallel Processing) HEVC slice, `ctbAddrRS` is…
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,43 % · rekomendacja wg zapisanej polityki
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a stack overflow in the MSL decoder caused by an incorrect depth check that fails to limit recursion. Attackers can supply a set of crafted MSL images that exhaust the stack when one of them is read, crashing the process and causing a…
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,42 % · rekomendacja wg zapisanej polityki
djangoSIGE through 1.10 (commit a6fe7e8) contains a user enumeration vulnerability in ForgotPasswordView within djangosige/apps/login/views.py that allows unauthenticated attackers to identify valid accounts by observing distinct error messages returned by the password reset endpoint. Attackers…
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,42 % · rekomendacja wg zapisanej polityki
SGLang through 0.5.22 in prefill/decode disaggregation mode contains a server-side request forgery vulnerability that allows unauthenticated attackers to trigger outbound requests via client-supplied bootstrap_host and bootstrap_port fields. Attackers sending crafted requests to the Decode…
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,42 % · rekomendacja wg zapisanej polityki
SvelteKit before 2.69.1 fails to properly validate remote form function payload sizes, allowing attackers to crash the Node process by sending large payloads. Repeated exploitation causes denial of service by repeatedly crashing the application process.
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,42 % · rekomendacja wg zapisanej polityki
Strands Agents is an open-source Python SDK for building and running AI agents. The strands-agents-tools package provides pre-built tools for use with the SDK, including the elasticsearch_memory tool for agent memory storage. We identified CVE-2026-15746, a server-side request forgery (SSRF) issue…
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,42 % · rekomendacja wg zapisanej polityki
AnyDesk 7.0.15 and 9.0.1 contains an unquoted service path vulnerability that allows local non-privileged users to potentially execute code with elevated SYSTEM privileges. Attackers can exploit the unquoted service path configuration to inject malicious executables that will be run with…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,43 % · rekomendacja wg zapisanej polityki
In Eclipse Jetty, across various versions of `jetty-security`, and `jetty-eeN-security`, and `jetty-eeN-servlet`, the Jakarta Spec constraints defined as `http-method-omission` can be bypassed by using substrings of the defined HTTP Methods.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,43 % · rekomendacja wg zapisanej polityki
libde265 is an open source implementation of the h.265 video codec. Prior to version 1.0.19, `decoder_context::decode_slice_unit_tiles` (libde265/decctx.cc:920) reads `pps.CtbAddrRStoTS[ctbAddrRS]` at line 966 where `ctbAddrRS = ctbY * ctbsWidth + ctbX` is computed from PPS-supplied…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,43 % · rekomendacja wg zapisanej polityki
Joomla Extension - themexpert.com - Information disclosure in Quix Page Builder < 6.2.1 - The Joomla extension Quix Page Builder Pro is vulnerable to an information disclosure. Raw exceptions reflected in AJAX handler responses.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,43 % · rekomendacja wg zapisanej polityki
CentreStack before 17.4 contains a session variable injection vulnerability that allows unauthenticated attackers to inject arbitrary session variables by embedding newline and tab characters into a crafted AccountName parameter posted to the SelectProvider.aspx endpoint. Attackers can exploit the…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,43 % · rekomendacja wg zapisanej polityki
libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.0.19 have a heap buffer overflow (out-of-bounds READ) exists in `decoder_context::decode_slice_unit_WPP()` in `libde265/decctx.cc`. When decoding a WPP (Wavefront Parallel Processing) HEVC slice, `ctbAddrRS` is…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,43 % · rekomendacja wg zapisanej polityki
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a stack overflow in the MSL decoder caused by an incorrect depth check that fails to limit recursion. Attackers can supply a set of crafted MSL images that exhaust the stack when one of them is read, crashing the process and causing a…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,42 % · rekomendacja wg zapisanej polityki
djangoSIGE through 1.10 (commit a6fe7e8) contains a user enumeration vulnerability in ForgotPasswordView within djangosige/apps/login/views.py that allows unauthenticated attackers to identify valid accounts by observing distinct error messages returned by the password reset endpoint. Attackers…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,42 % · rekomendacja wg zapisanej polityki
SGLang through 0.5.22 in prefill/decode disaggregation mode contains a server-side request forgery vulnerability that allows unauthenticated attackers to trigger outbound requests via client-supplied bootstrap_host and bootstrap_port fields. Attackers sending crafted requests to the Decode…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,42 % · rekomendacja wg zapisanej polityki
SvelteKit before 2.69.1 fails to properly validate remote form function payload sizes, allowing attackers to crash the Node process by sending large payloads. Repeated exploitation causes denial of service by repeatedly crashing the application process.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,42 % · rekomendacja wg zapisanej polityki
Strands Agents is an open-source Python SDK for building and running AI agents. The strands-agents-tools package provides pre-built tools for use with the SDK, including the elasticsearch_memory tool for agent memory storage. We identified CVE-2026-15746, a server-side request forgery (SSRF) issue…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,42 % · rekomendacja wg zapisanej polityki