Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
HCL BigFix AEX is affected by an Information Disclosure vulnerability due to improper handling of errors or exceptional conditions. This could allow an attacker to obtain sensitive technical information, including stack traces, system details, or internal paths, potentially facilitating further…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
The WP Visitor Statistics (Real Time Traffic) plugin for WordPress is vulnerable to SQL Injection via the 'from' (and sibling 'to'/'first'/'second') shortcode attribute of the [wsm_showTrafficStatsList] shortcode in versions up to, and including, 8.8 This is due to insufficient escaping on the…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
A broken access control vulnerability exists in the Mautic Stats API (/api/stats/{table}). The endpoint did not enforce permissions for several internal tables: an intended administrator-only restriction was never applied, and tables without an explicit permission mapping were readable by default.…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, and Splunk Secure Gateway versions below 3.10.12, 3.9.26, and 3.8.73, a low-privileged user that does not hold the "admin" Splunk role or the "sc_admin" Splunk Secure Gateway role could read mobile alert notification data for…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
Out of bounds read in Installer in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
RabbitMQ is a messaging and streaming broker. Prior to versions 4.0.22, 4.1.11, 4.2.6, and 4.3.0, accept_content/2 at line 56 calls rabbit_stream_manager:create_super_stream/... directly after is_authorized (which only checks the management tag + vhost access via is_authorized_vhost). The…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have an authorization bypass enabling workspace metadata + settings tampering. The `PATCH /workspaces/{workspace_id}` endpoint is gated only by `require_workspace_member(workspace_id)`…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
A NULL pointer dereference flaw was found in 389-ds-base. This flaw occurs when a ModifyDN (rename) operation uses an attribute's schema alias name (such as "commonName") instead of its canonical name (such as "cn") as the new relative distinguished name. An authenticated attacker with the…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,33 % · rekomendacja wg zapisanej polityki
The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. Prior to version 26.05, the password reset token is predictably based on the time of the reset request. An attacker who knows the target's email address can request a reset and then brute-force…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,33 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Security Framework). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,33 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Security). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,33 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,33 % · rekomendacja wg zapisanej polityki
HCL BigFix AEX is affected by an Information Disclosure vulnerability due to improper handling of errors or exceptional conditions. This could allow an attacker to obtain sensitive technical information, including stack traces, system details, or internal paths, potentially facilitating further…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
The WP Visitor Statistics (Real Time Traffic) plugin for WordPress is vulnerable to SQL Injection via the 'from' (and sibling 'to'/'first'/'second') shortcode attribute of the [wsm_showTrafficStatsList] shortcode in versions up to, and including, 8.8 This is due to insufficient escaping on the…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
A broken access control vulnerability exists in the Mautic Stats API (/api/stats/{table}). The endpoint did not enforce permissions for several internal tables: an intended administrator-only restriction was never applied, and tables without an explicit permission mapping were readable by default.…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, and Splunk Secure Gateway versions below 3.10.12, 3.9.26, and 3.8.73, a low-privileged user that does not hold the "admin" Splunk role or the "sc_admin" Splunk Secure Gateway role could read mobile alert notification data for…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
Out of bounds read in Installer in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
RabbitMQ is a messaging and streaming broker. Prior to versions 4.0.22, 4.1.11, 4.2.6, and 4.3.0, accept_content/2 at line 56 calls rabbit_stream_manager:create_super_stream/... directly after is_authorized (which only checks the management tag + vhost access via is_authorized_vhost). The…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have an authorization bypass enabling workspace metadata + settings tampering. The `PATCH /workspaces/{workspace_id}` endpoint is gated only by `require_workspace_member(workspace_id)`…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
A NULL pointer dereference flaw was found in 389-ds-base. This flaw occurs when a ModifyDN (rename) operation uses an attribute's schema alias name (such as "commonName") instead of its canonical name (such as "cn") as the new relative distinguished name. An authenticated attacker with the…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,33 % · rekomendacja wg zapisanej polityki
The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. Prior to version 26.05, the password reset token is predictably based on the time of the reset request. An attacker who knows the target's email address can request a reset and then brute-force…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,33 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Security Framework). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,33 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Security). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,33 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,33 % · rekomendacja wg zapisanej polityki