Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.9 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated attacker to cause a denial of service condition by submitting specially crafted markdown content with nested formatting…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the import-export module, an authenticated importer can submit archives whose decompressed bytes, entry count, and entry sizes are not bounded before document-type authorization, and extraction or parsing failures…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
RabbitMQ is a messaging and streaming broker. From 4.1.0 until 4.3.3, 4.2.9, and 4.1.11, Stream Management Super-Stream Binding Keys Allocation Allows Low-Privilege Node Denial of Service. rabbitMQ 4.3.1 with rabbitmqstreammanagement enabled accepts PUT /api/stream/super-streams/{vhost}/{name}…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
FreshRSS is a free, self-hostable RSS aggregator. Versions prior to 1.27.1 have a logout cross-site request forgery vulnerability that can lead to denial of service via <track src>. Version 1.27.1 patches the issue.
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.77.0 until 1.107.6 and 2.44.0, the local web_fetch_tool and the WebFetch local fallback process server-controlled responses with quadratic title extraction, whitespace normalization, and…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,44 % · rekomendacja wg zapisanej polityki
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.9 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated attacker to cause a denial of service condition by submitting specially crafted markdown content with nested formatting…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the import-export module, an authenticated importer can submit archives whose decompressed bytes, entry count, and entry sizes are not bounded before document-type authorization, and extraction or parsing failures…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
RabbitMQ is a messaging and streaming broker. From 4.1.0 until 4.3.3, 4.2.9, and 4.1.11, Stream Management Super-Stream Binding Keys Allocation Allows Low-Privilege Node Denial of Service. rabbitMQ 4.3.1 with rabbitmqstreammanagement enabled accepts PUT /api/stream/super-streams/{vhost}/{name}…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
FreshRSS is a free, self-hostable RSS aggregator. Versions prior to 1.27.1 have a logout cross-site request forgery vulnerability that can lead to denial of service via <track src>. Version 1.27.1 patches the issue.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.77.0 until 1.107.6 and 2.44.0, the local web_fetch_tool and the WebFetch local fallback process server-controlled responses with quadratic title extraction, whitespace normalization, and…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,44 % · rekomendacja wg zapisanej polityki