KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Docker Buildx Bake does not request the expected fs.read approval for certain filesystem inputs. An untrusted Bake definition can expose a readable file through a pathless secret whose ID is interpreted as a client-side pathname, or consume a local OCI image layout outside the project after…
Eskalacja uprawnień w urządzeniach Teltonika umożliwia niżej uprzywilejowanemu użytkownikowi uzyskanie dostępu administracyjnego.
Certain HP DesignJet products may be potentially vulnerable to cross-site scripting (XSS), which may allow unauthenticated HTTP requests to view print job previews.
An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a limited information disclosure and availability impact to the device. Due to a wrong initialization, a process…
An issue was discovered in Django 6.1 before 6.1.2, 6.0 before 6.0.9, and 5.2 before 5.2.18. An incomplete fix for CVE-2026-15307 in Django spatial lookups allows an attacker who can supply `bytes` values to cause the Django process to make network requests via a crafted VRT document referencing…
FOSSBilling is an open source billing and client-management platform. From 0.1.0 until 0.8.7, the unauthenticated POST /api/guest/client/create endpoint reveals whether a submitted email belongs to a registered client because guest signup returns a distinct unredacted error when the submitted…
Niewystarczająca kontrola dostępu w Davantis DDFUSION pozwala nieautoryzowanym użytkownikom na dostęp do ustawień kamer.
Open OnDemand is an open-source HPC portal. Prior to versions 4.0.8 and 3.1.16, Open OnDemand packages create world writable locations in the GEM_PATH. Open OnDemand versions 4.0.8 and 3.1.16 have been patched for this vulnerability.
Podatność w pluginie Grav API umożliwia atakującym obejście walidacji hosta przez DNS rebinding.
traverse (npm) versions 0.3.6 through 0.3.9, 0.4.0 through 0.4.6, 0.5.0 through 0.5.2, and 0.6.0 through 0.6.11 allow prototype pollution through set(). When the path passed to set() crosses a primitive value, the next path segment is resolved on that primitive's built-in prototype, so an…
NetBox versions 2.9.5 before 4.7.0 contain a server-side template injection vulnerability that allows a low-privileged user with the "Can add custom links" permission to steal session cookies and API tokens of other users by exposing the raw Django HttpRequest object to the Jinja2 template…
A vulnerability was found in ZKTeco BioTime 9.5.6 Build 20260130.3206. This issue affects some unknown processing. The manipulation results in use of hard-coded cryptographic key . The attack may be launched remotely. Upgrading to version 9.5.6 Build 3623 is capable of addressing this issue. It…
Payload is a free and open source headless content management system. In versions before 3.88.0 and canary versions before 4.0.0-canary.27, an untrusted user who can query a readable collection, control its sorting, and select a protected field as the sort parameter can infer limited information…
A vulnerability was found in cemtan sar2html 4.0.0. The affected element is the function updateDb of the file sar2html.py of the component Archive Processing. The manipulation of the argument s2host results in sql injection. The attack can be launched remotely. The project was informed of the…
A vulnerability in the bulk port configuration functionality could allow an unauthenticated attacker to crash the service.
A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the on_disconnected callback function.
A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the rpc_rx_fsm function.
A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the rpc_rx_fsm function when msglen is set to 0.
An integer overflow vulnerability in the license manager service could allow an unauthenticated attacker to crash the service.
Błąd w Hospital Manager Backend Services ujawnia szczegóły konfiguracji, co ułatwia ataki.
In Eclipse Jetty, `TryPathsHandler` and `TryFilesFilter` can be configured to forward requests to template URIs such as `index?p=$path`, where `$path` is the request path in context. However, URI paths may contain characters that are reserved in URI queries so that a path of `/s&a=1` when…
Wstrzyknięcie nowej linii w rsync umożliwia lokalnym atakującym fałszowanie komunikatów protokołu.
Grav Data Manager plugin 1.4.0 through 1.4.5 contains a missing authorization vulnerability that allows unauthenticated attackers to delete stored data files via the classic Admin integration. Attackers can send a request with the delete parameter and known data type and filename to remove files…
pH7Builder (pH7 Social Dating CMS) before 19.3.0 contains a CAPTCHA bypass vulnerability that allows unauthenticated attackers to skip form validation by supplying a client-chosen form ID to PFBC Form::isValid(). Attackers can load a CAPTCHA-free form like login or search, then submit its ID with…
Błąd w weryfikacji podpisu webhooka w Appwrite pozwala na nieautoryzowane publikowanie komentarzy.
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Docker Buildx Bake does not request the expected fs.read approval for certain filesystem inputs. | Docker Buildx Bake does not request the expected fs.read approval for certain filesystem inputs. An untrusted Bake definition can expose a readable file through a pathless secret whose ID is interpreted as a client-side pathname, or consume a local OCI image layout outside the project after… |
Do wiadomości | 6,9 | 0,29 % | ||
| Eskalacja uprawnień w urządzeniach Teltonika umożliwia niżej uprzywilejowanemu użytkownikowi uzyskanie dostępu administracyjnego. | Eskalacja uprawnień w urządzeniach Teltonika umożliwia niżej uprzywilejowanemu użytkownikowi uzyskanie dostępu administracyjnego. |
Do wiadomości | 6,9 | 0,29 % | ||
| Certain HP DesignJet products may be potentially vulnerable to cross-site scripting (XSS), which may allow unauthenticated HTTP requests… | Certain HP DesignJet products may be potentially vulnerable to cross-site scripting (XSS), which may allow unauthenticated HTTP requests to view print job previews. |
Do wiadomości | 6,9 | 0,29 % | ||
| An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved allows an… | An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a limited information disclosure and availability impact to the device. Due to a wrong initialization, a process… |
Do wiadomości | 6,9 | 0,29 % | ||
| An issue was discovered in Django 6.1 before 6.1.2, 6.0 before 6.0.9, and 5.2 before 5.2.18. | An issue was discovered in Django 6.1 before 6.1.2, 6.0 before 6.0.9, and 5.2 before 5.2.18. An incomplete fix for CVE-2026-15307 in Django spatial lookups allows an attacker who can supply `bytes` values to cause the Django process to make network requests via a crafted VRT document referencing… |
Do wiadomości | 6,9 | 0,29 % | ||
| FOSSBilling is an open source billing and client-management platform. | FOSSBilling is an open source billing and client-management platform. From 0.1.0 until 0.8.7, the unauthenticated POST /api/guest/client/create endpoint reveals whether a submitted email belongs to a registered client because guest signup returns a distinct unredacted error when the submitted… |
Do wiadomości | 6,9 | 0,29 % | ||
| Niewystarczająca kontrola dostępu w Davantis DDFUSION pozwala nieautoryzowanym użytkownikom na dostęp do ustawień kamer. | Niewystarczająca kontrola dostępu w Davantis DDFUSION pozwala nieautoryzowanym użytkownikom na dostęp do ustawień kamer. |
Do wiadomości | 6,9 | 0,29 % | ||
| Open OnDemand is an open-source HPC portal. | Open OnDemand is an open-source HPC portal. Prior to versions 4.0.8 and 3.1.16, Open OnDemand packages create world writable locations in the GEM_PATH. Open OnDemand versions 4.0.8 and 3.1.16 have been patched for this vulnerability. |
Do wiadomości | 6,9 | 0,29 % | ||
| Podatność w pluginie Grav API umożliwia atakującym obejście walidacji hosta przez DNS rebinding. | Podatność w pluginie Grav API umożliwia atakującym obejście walidacji hosta przez DNS rebinding. |
Do wiadomości | 6,9 | 0,28 % | ||
| traverse (npm) versions 0.3.6 through 0.3.9, 0.4.0 through 0.4.6, 0.5.0 through 0.5.2, and 0.6.0 through 0.6.11 allow prototype pollution… | traverse (npm) versions 0.3.6 through 0.3.9, 0.4.0 through 0.4.6, 0.5.0 through 0.5.2, and 0.6.0 through 0.6.11 allow prototype pollution through set(). When the path passed to set() crosses a primitive value, the next path segment is resolved on that primitive's built-in prototype, so an… |
Do wiadomości | 6,9 | 0,28 % | ||
| NetBox versions 2.9.5 before 4.7.0 contain a server-side template injection vulnerability that allows a low-privileged user with the "Can… | NetBox versions 2.9.5 before 4.7.0 contain a server-side template injection vulnerability that allows a low-privileged user with the "Can add custom links" permission to steal session cookies and API tokens of other users by exposing the raw Django HttpRequest object to the Jinja2 template… |
Do wiadomości | 6,9 | 0,28 % | ||
| A vulnerability was found in ZKTeco BioTime 9.5.6 Build 20260130.3206. | A vulnerability was found in ZKTeco BioTime 9.5.6 Build 20260130.3206. This issue affects some unknown processing. The manipulation results in use of hard-coded cryptographic key . The attack may be launched remotely. Upgrading to version 9.5.6 Build 3623 is capable of addressing this issue. It… |
Do wiadomości | 6,9 | 0,28 % | ||
| Payload is a free and open source headless content management system. | Payload is a free and open source headless content management system. In versions before 3.88.0 and canary versions before 4.0.0-canary.27, an untrusted user who can query a readable collection, control its sorting, and select a protected field as the sort parameter can infer limited information… |
Do wiadomości | 6,9 | 0,28 % | ||
| A vulnerability was found in cemtan sar2html 4.0.0. | A vulnerability was found in cemtan sar2html 4.0.0. The affected element is the function updateDb of the file sar2html.py of the component Archive Processing. The manipulation of the argument s2host results in sql injection. The attack can be launched remotely. The project was informed of the… |
Do wiadomości | 6,9 | 0,27 % | ||
| A vulnerability in the bulk port configuration functionality could allow an unauthenticated attacker to crash the service. | A vulnerability in the bulk port configuration functionality could allow an unauthenticated attacker to crash the service. |
Do wiadomości | 6,9 | 0,27 % | ||
| A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via… | A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the on_disconnected callback function. |
Do wiadomości | 6,9 | 0,27 % | ||
| A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via… | A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the rpc_rx_fsm function. |
Do wiadomości | 6,9 | 0,27 % | ||
| A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via… | A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the rpc_rx_fsm function when msglen is set to 0. |
Do wiadomości | 6,9 | 0,27 % | ||
| An integer overflow vulnerability in the license manager service could allow an unauthenticated attacker to crash the service. | An integer overflow vulnerability in the license manager service could allow an unauthenticated attacker to crash the service. |
Do wiadomości | 6,9 | 0,27 % | ||
| Błąd w Hospital Manager Backend Services ujawnia szczegóły konfiguracji, co ułatwia ataki. | Błąd w Hospital Manager Backend Services ujawnia szczegóły konfiguracji, co ułatwia ataki. |
Do wiadomości | 6,9 | 0,27 % | ||
| In Eclipse Jetty, `TryPathsHandler` and `TryFilesFilter` can be configured to forward requests to template URIs such as `index?p=$path`,… | In Eclipse Jetty, `TryPathsHandler` and `TryFilesFilter` can be configured to forward requests to template URIs such as `index?p=$path`, where `$path` is the request path in context. However, URI paths may contain characters that are reserved in URI queries so that a path of `/s&a=1` when… |
Do wiadomości | 6,9 | 0,27 % | ||
| Wstrzyknięcie nowej linii w rsync umożliwia lokalnym atakującym fałszowanie komunikatów protokołu. | Wstrzyknięcie nowej linii w rsync umożliwia lokalnym atakującym fałszowanie komunikatów protokołu. |
Do wiadomości | 6,9 | 0,27 % | ||
| Grav Data Manager plugin 1.4.0 through 1.4.5 contains a missing authorization vulnerability that allows unauthenticated attackers to… | Grav Data Manager plugin 1.4.0 through 1.4.5 contains a missing authorization vulnerability that allows unauthenticated attackers to delete stored data files via the classic Admin integration. Attackers can send a request with the delete parameter and known data type and filename to remove files… |
Do wiadomości | 6,9 | 0,27 % | ||
| pH7Builder (pH7 Social Dating CMS) before 19.3.0 contains a CAPTCHA bypass vulnerability that allows unauthenticated attackers to skip… | pH7Builder (pH7 Social Dating CMS) before 19.3.0 contains a CAPTCHA bypass vulnerability that allows unauthenticated attackers to skip form validation by supplying a client-chosen form ID to PFBC Form::isValid(). Attackers can load a CAPTCHA-free form like login or search, then submit its ID with… |
Do wiadomości | 6,9 | 0,27 % | ||
| Błąd w weryfikacji podpisu webhooka w Appwrite pozwala na nieautoryzowane publikowanie komentarzy. | Błąd w weryfikacji podpisu webhooka w Appwrite pozwala na nieautoryzowane publikowanie komentarzy. |
Do wiadomości | 6,9 | 0,27 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.