Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (component: Job Profile Manager). The supported version that is affected is 9.2. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
Vulnerability in the PeopleSoft Enterprise HCM Absence Management product of Oracle PeopleSoft (component: Absence Management). The supported version that is affected is 9.2. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
RabbitMQ is a messaging and streaming broker. Prior to versions 4.2.7 and 4.3.1, pattern_to_regex maps % -> .*? and _ -> ., then compiles ^...$ with only [unicode]; re:run is called with only [{capture, none}] - no explicit match_limit. A pattern like %_%_..._%X becomes ^.*?..*?.....*?.X$ with…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
Vulnerability in Oracle REST Data Services (component: Graph QL). Supported versions that are affected are 24.2.0-26.2.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks of this vulnerability…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Payroll. Successful…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
Vulnerability in Oracle Trusted Answer Search (component: PLSQL package). The supported version that is affected is 26.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Trusted Answer Search. Successful attacks of this…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Easily exploitable vulnerability allows low privileged attacker having None privilege with network access via HTTP to compromise RDBMS. Successful attacks of this…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component: Logging). Supported versions that are affected are 21.12.0-21.12.17, 22.12.0-22.12.15, 23.12.0-23.12.16, 24.12.0-24.12.16 and 25.12.0-25.12.9. Easily exploitable vulnerability allows low privileged…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Assets product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Assets. Successful…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
Fleet is an open-source device management platform built on osquery. In versions up to and including 4.84.1, the labels host-listing endpoint (GET /api/v1/fleet/labels/{id}/hosts) allowed an authenticated user with the lowest-privilege Observer role to extract host enrollment secrets through a…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
Fleet is an open-source device management platform built on osquery. In versions up to and including 4.84.1, the Apple MDM commands listing endpoint (GET /api/v1/fleet/mdm/apple/commands) allowed an authenticated user with the lowest-privilege Observer role to extract sensitive values from joined…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
The ECS WordPress plugin before 4.3.10 does not perform ownership or post-status checks when one of its dynamic repeater data sources reads custom field values from a user-supplied post identifier, allowing users with a contributor-level account or above to read custom field values and post…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
The Simply Schedule Appointments WordPress plugin before 1.6.12.17 does not restrict the user records returned by some of its REST endpoints to those the requester is entitled to see, allowing users with a low-privileged staff role to disclose the names and email addresses of arbitrary registered…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (component: Job Profile Manager). The supported version that is affected is 9.2. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
Vulnerability in the PeopleSoft Enterprise HCM Absence Management product of Oracle PeopleSoft (component: Absence Management). The supported version that is affected is 9.2. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
RabbitMQ is a messaging and streaming broker. Prior to versions 4.2.7 and 4.3.1, pattern_to_regex maps % -> .*? and _ -> ., then compiles ^...$ with only [unicode]; re:run is called with only [{capture, none}] - no explicit match_limit. A pattern like %_%_..._%X becomes ^.*?..*?.....*?.X$ with…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
Vulnerability in Oracle REST Data Services (component: Graph QL). Supported versions that are affected are 24.2.0-26.2.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks of this vulnerability…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Payroll. Successful…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
Vulnerability in Oracle Trusted Answer Search (component: PLSQL package). The supported version that is affected is 26.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Trusted Answer Search. Successful attacks of this…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Easily exploitable vulnerability allows low privileged attacker having None privilege with network access via HTTP to compromise RDBMS. Successful attacks of this…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component: Logging). Supported versions that are affected are 21.12.0-21.12.17, 22.12.0-22.12.15, 23.12.0-23.12.16, 24.12.0-24.12.16 and 25.12.0-25.12.9. Easily exploitable vulnerability allows low privileged…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Assets product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Assets. Successful…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
Fleet is an open-source device management platform built on osquery. In versions up to and including 4.84.1, the labels host-listing endpoint (GET /api/v1/fleet/labels/{id}/hosts) allowed an authenticated user with the lowest-privilege Observer role to extract host enrollment secrets through a…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
Fleet is an open-source device management platform built on osquery. In versions up to and including 4.84.1, the Apple MDM commands listing endpoint (GET /api/v1/fleet/mdm/apple/commands) allowed an authenticated user with the lowest-privilege Observer role to extract sensitive values from joined…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
The ECS WordPress plugin before 4.3.10 does not perform ownership or post-status checks when one of its dynamic repeater data sources reads custom field values from a user-supplied post identifier, allowing users with a contributor-level account or above to read custom field values and post…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,37 % · rekomendacja wg zapisanej polityki
The Simply Schedule Appointments WordPress plugin before 1.6.12.17 does not restrict the user records returned by some of its REST endpoints to those the requester is entitled to see, allowing users with a low-privileged staff role to disclose the names and email addresses of arbitrary registered…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,37 % · rekomendacja wg zapisanej polityki