KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Buffer overflow in PDFium in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Aimeos 2021.10 LTS contains a SQL injection vulnerability in the json api 'sort' parameter that allows attackers to inject malicious database queries. Attackers can manipulate the sort parameter to reveal table and column names by sending crafted GET requests to the jsonapi/review endpoint.
The Mementor Core plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.2.5. This is due to plugin not properly handling the user switch back function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to…
IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a heap buffer overflow when processing MQPUT operations with malformed message options.
IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a heap buffer overflow when processing MQPUT or MQPUT1 operations with malformed message handle properties.
Subscriber Broken Access Control in Progress Planner <= 1.10.0 versions.
Subscriber Privilege Escalation in JobZilla - Job Board WordPress Theme <= 2.2 versions.
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Hold vport_slock for host map update in report ID acquisition qla24xx_report_id_acquisition() format-1 handling drops vport_slock after taking the vport reference and then calls qla_update_host_map() without the…
Nieograniczony upload niebezpiecznych plików w Specto CM umożliwia zdalne włączenie kodu.
When password or public key authentication is used with the Windows port of wolfSSHd, the Windows logon token acquired for one authenticated connection is not released before a token is acquired for a subsequent connection, resulting in user login poisoning between connections. A less privileged…
An issue was discovered in Wekan The Open Source kanban board system up to version 18.15, fixed in 18.16. Authenticated users can update their entire user document (beyond profile fields), including orgs/teams and loginDisabled, due to missing server-side authorization checks; this enables…
IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to gain unauthorized administrative access due to improper authentication.
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The…
Użycie po zwolnieniu blokady w jądrze Linuxa może prowadzić do wykorzystania po zwolnieniu.
A weakness in Automated Logic and Carrier i-Vu Gen5 router on driver version drv_gen5_106-01-2380, allows malformed packets to be sent through BACnet MS/TP network causing the devices to enter a fault state. This fault state requires a manual power cycle to return the device to network…
W OpenStack Swift występuje podatność na DoS przez złośliwy nagłówek Accept, co prowadzi do wyczerpania zasobów.
In Eclipse Jetty, across various versions of `jetty-annotations`, and `jetty-eeN-annotations`, the Jakarta Spec authoritative url-pattern rules for mixed `@ServletSecurity` annotation, and `web.xml` defined `security-constraint` on the same `url-pattern` were not being applied if the `web.xml` had…
Nieograniczony upload niebezpiecznych plików w aplikacji webowej umożliwia zdalne wykonanie kodu.
Błąd use after free w Google Chrome umożliwia zdalne wykonanie kodu przez złośliwy plik wideo.
XAgent contains a path traversal vulnerability in the workspace file endpoint that allows self-registered or default-credential users to read arbitrary files on the host by supplying parent-directory segments in the `file_name` form field with no path containment check. Attackers can register an…
The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.9 This is due to a missing ownership and capability check on the `user` parameter within the `process_edit()` function, which allows any…
Loco Translate w WordPressie jest podatny na atak CSRF, co umożliwia wykonanie kodu PHP.
Missing authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)
Incorrect authorization in Autofill in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Initialize NVMe abort_work once at submission qla_nvme_fcp_abort() and qla_nvme_ls_abort() ran INIT_WORK() on priv->abort_work immediately before schedule_work(). INIT_WORK() reinitializes the work_struct,…
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Buffer overflow in PDFium in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox… | Buffer overflow in PDFium in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) |
Obserwuj | 8,8 | 0,34 % | ||
| Aimeos 2021.10 LTS contains a SQL injection vulnerability in the json api 'sort' parameter that allows attackers to inject malicious… | Aimeos 2021.10 LTS contains a SQL injection vulnerability in the json api 'sort' parameter that allows attackers to inject malicious database queries. Attackers can manipulate the sort parameter to reveal table and column names by sending crafted GET requests to the jsonapi/review endpoint. |
Obserwuj | 8,8 | 0,34 % | ||
| The Mementor Core plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.2.5. | The Mementor Core plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.2.5. This is due to plugin not properly handling the user switch back function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to… |
Obserwuj | 8,8 | 0,34 % | ||
| IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a heap buffer… | IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a heap buffer overflow when processing MQPUT operations with malformed message options. |
Obserwuj | 8,8 | 0,34 % | ||
| IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a heap buffer… | IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a heap buffer overflow when processing MQPUT or MQPUT1 operations with malformed message handle properties. |
Obserwuj | 8,8 | 0,34 % | ||
| Subscriber Broken Access Control in Progress Planner <= 1.10.0 versions. | Subscriber Broken Access Control in Progress Planner <= 1.10.0 versions. |
Obserwuj | 8,8 | 0,34 % | ||
| Subscriber Privilege Escalation in JobZilla - Job Board WordPress Theme <= 2.2 versions. | Subscriber Privilege Escalation in JobZilla - Job Board WordPress Theme <= 2.2 versions. |
Obserwuj | 8,8 | 0,34 % | ||
| In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Hold vport_slock for host map update in report ID… | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Hold vport_slock for host map update in report ID acquisition qla24xx_report_id_acquisition() format-1 handling drops vport_slock after taking the vport reference and then calls qla_update_host_map() without the… |
Obserwuj | 8,8 | 0,34 % | ||
| Nieograniczony upload niebezpiecznych plików w Specto CM umożliwia zdalne włączenie kodu. | Nieograniczony upload niebezpiecznych plików w Specto CM umożliwia zdalne włączenie kodu. |
Obserwuj | 8,8 | 0,34 % | ||
| When password or public key authentication is used with the Windows port of wolfSSHd, the Windows logon token acquired for one… | When password or public key authentication is used with the Windows port of wolfSSHd, the Windows logon token acquired for one authenticated connection is not released before a token is acquired for a subsequent connection, resulting in user login poisoning between connections. A less privileged… |
Obserwuj | 8,8 | 0,34 % | ||
| An issue was discovered in Wekan The Open Source kanban board system up to version 18.15, fixed in 18.16. | An issue was discovered in Wekan The Open Source kanban board system up to version 18.15, fixed in 18.16. Authenticated users can update their entire user document (beyond profile fields), including orgs/teams and loginDisabled, due to missing server-side authorization checks; this enables… |
Obserwuj | 8,8 | 0,34 % | ||
| IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to gain unauthorized administrative access due to improper authentication. | IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to gain unauthorized administrative access due to improper authentication. |
Obserwuj | 8,8 | 0,34 % | ||
| As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a… | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The… |
Obserwuj | 8,8 | 0,34 % | ||
| Użycie po zwolnieniu blokady w jądrze Linuxa może prowadzić do wykorzystania po zwolnieniu. | Użycie po zwolnieniu blokady w jądrze Linuxa może prowadzić do wykorzystania po zwolnieniu. |
Obserwuj | 8,8 | 0,34 % | ||
| A weakness in Automated Logic and Carrier i-Vu Gen5 router on driver version drv_gen5_106-01-2380, allows malformed packets to be… | A weakness in Automated Logic and Carrier i-Vu Gen5 router on driver version drv_gen5_106-01-2380, allows malformed packets to be sent through BACnet MS/TP network causing the devices to enter a fault state. This fault state requires a manual power cycle to return the device to network… |
Obserwuj | 8,8 | 0,34 % | ||
| W OpenStack Swift występuje podatność na DoS przez złośliwy nagłówek Accept, co prowadzi do wyczerpania zasobów. | W OpenStack Swift występuje podatność na DoS przez złośliwy nagłówek Accept, co prowadzi do wyczerpania zasobów. |
Obserwuj | 8,7 | 0,84 % | ||
| In Eclipse Jetty, across various versions of `jetty-annotations`, and `jetty-eeN-annotations`, the Jakarta Spec authoritative url-pattern… | In Eclipse Jetty, across various versions of `jetty-annotations`, and `jetty-eeN-annotations`, the Jakarta Spec authoritative url-pattern rules for mixed `@ServletSecurity` annotation, and `web.xml` defined `security-constraint` on the same `url-pattern` were not being applied if the `web.xml` had… |
Obserwuj | 8,8 | 0,34 % | ||
| Nieograniczony upload niebezpiecznych plików w aplikacji webowej umożliwia zdalne wykonanie kodu. | Nieograniczony upload niebezpiecznych plików w aplikacji webowej umożliwia zdalne wykonanie kodu. |
Obserwuj | 8,8 | 0,34 % | ||
| Błąd use after free w Google Chrome umożliwia zdalne wykonanie kodu przez złośliwy plik wideo. | Błąd use after free w Google Chrome umożliwia zdalne wykonanie kodu przez złośliwy plik wideo. |
Obserwuj | 8,8 | 0,34 % | ||
| XAgent contains a path traversal vulnerability in the workspace file endpoint that allows self-registered or default-credential users to… | XAgent contains a path traversal vulnerability in the workspace file endpoint that allows self-registered or default-credential users to read arbitrary files on the host by supplying parent-directory segments in the `file_name` form field with no path containment check. Attackers can register an… |
Obserwuj | 8,7 | 0,84 % | ||
| The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to Privilege Escalation in all versions up… | The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.9 This is due to a missing ownership and capability check on the `user` parameter within the `process_edit()` function, which allows any… |
Obserwuj | 8,8 | 0,33 % | ||
| Loco Translate w WordPressie jest podatny na atak CSRF, co umożliwia wykonanie kodu PHP. | Loco Translate w WordPressie jest podatny na atak CSRF, co umożliwia wykonanie kodu PHP. |
Obserwuj | 8,8 | 0,33 % | ||
| Missing authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering… | Missing authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium) |
Obserwuj | 8,8 | 0,33 % | ||
| Incorrect authorization in Autofill in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to… | Incorrect authorization in Autofill in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium) |
Obserwuj | 8,8 | 0,33 % | ||
| In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Initialize NVMe abort_work once at… | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Initialize NVMe abort_work once at submission qla_nvme_fcp_abort() and qla_nvme_ls_abort() ran INIT_WORK() on priv->abort_work immediately before schedule_work(). INIT_WORK() reinitializes the work_struct,… |
Obserwuj | 8,8 | 0,33 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.