KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Craft CMS 5.10.13.2 contains an authenticated remote code execution vulnerability in the Control Panel action app/render-components. Any authenticated user with basic Control Panel access can submit request-controlled component classes and property overrides. By first overriding…
Trigger.dev through 4.7.6 contains a missing authentication vulnerability in the supervisor workload server that allows workloads to manipulate runs belonging to other deployments without ownership verification. Attackers with network access and a valid run/snapshot pair can call the…
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through User-Controlled Key vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.
ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction.…
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables vgic_v3_save_pending_tables() iterates dist->lpi_xa using xa_for_each() and dereferences the returned struct vgic_irq in the loop body without holding a…
Wykorzystanie luki w PipeWire pozwala na ucieczkę z aplikacji w piaskownicy i wykonanie kodu.
Multiple DrayTek VigorSwitch models contain a pre-authentication null pointer dereference vulnerability in the setget.cgi interface. The vulnerability is caused by missing validation when the pass field is absent. A remote attacker can trigger this vulnerability via a crafted request to crash the…
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The…
Nieprawidłowa izolacja zasobów w pamięci podręcznej procesora AMD Zen2 może prowadzić do uszkodzenia instrukcji.
In the Linux kernel, the following vulnerability has been resolved: iommufd: Do not add the same hwpt to the ioas->hwpt_list twice The hwpt is added to the hwpt_list only during its creation, it is never added again. This hunk is some missed leftover from rework. Adding it twice will corrupt the…
Redash is a package for data visualization and sharing. From versions after 8.0.0 until 26.9.0, the Query Results query runner in redash/query_runner/query_results.py accepts param_query_N_{key=value} parameters and passed attacker-controlled values to replace_query_parameters() for raw…
Brak limitów przy alokacji zasobów w sterowniku ODBC Amazon Athena może prowadzić do odmowy usługi.
W Streambert przed 2.5.0 podatny renderer może kopiować pliki do wybranej lokalizacji, narażając dane.
Nieprawidłowe ograniczenie ścieżki w narzędziu get_resource w Amazon awslabs.aws-transform-mcp-server pozwala na zapis plików poza zamierzonym…
Wykonanie zdalnego kodu w OpenKM umożliwia administratorom uruchamianie dowolnych poleceń.
AnkiMCP is an Anki addon that implements an MCP server, enabling AI assistants to interact with the Anki flashcard application. Prior to version 0.21.0, `anki_mcp_server/mcp_server.py` globally disables FastMCP DNS-rebinding protection through `TransportSecuritySettings` with…
Cross-Site Request Forgery (CSRF) vulnerability in Xpro Xpro Elementor Addons xpro-elementor-addons allows Cross Site Request Forgery.This issue affects Xpro Elementor Addons: from n/a through 1.7.10.
snappy-java through 1.1.10.8 contains a buffer overflow vulnerability in Snappy.compress(ByteBuffer, ByteBuffer) that writes past the end of the destination buffer. Attackers can supply incompressible data that exceeds the destination buffer's remaining capacity, corrupting off-heap memory and…
XSA-501 was about issues with v1 -> v2 and v2 -> v1 changes racing certain other grant table operations. Sadly a v2 -> v1 -> v2 change has yet another effect which wasn't accounted for: During the first change, status pages would be freed. During the second change they would be allocated again.…
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial of service, Information disclosure, and Remote…
Nieprawidłowa kontrola dostępu w Pexip Infinity pozwala na zdalne wykonanie kodu przez lokalnego atakującego.
Luka w HPE IceWall umożliwia manipulację odpowiedziami SAML, co pozwala na podszywanie się pod użytkowników.
Podatność CSRF w MISP pozwala na nieautoryzowane usunięcie wydarzeń bez interakcji użytkownika.
Włączenie funkcjonalności z niezaufanego źródła w Dell PowerStore pozwala na wykonanie kodu jako root.
Podatność CSRF w Cotonti Siena pozwala atakującym na modyfikację konfiguracji administratora.
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Craft CMS 5.10.13.2 contains an authenticated remote code execution vulnerability in the Control Panel action app/render-components. | Craft CMS 5.10.13.2 contains an authenticated remote code execution vulnerability in the Control Panel action app/render-components. Any authenticated user with basic Control Panel access can submit request-controlled component classes and property overrides. By first overriding… |
Obserwuj | 8,7 | 0,69 % | ||
| Trigger.dev through 4.7.6 contains a missing authentication vulnerability in the supervisor workload server that allows workloads to… | Trigger.dev through 4.7.6 contains a missing authentication vulnerability in the supervisor workload server that allows workloads to manipulate runs belonging to other deployments without ownership verification. Attackers with network access and a valid run/snapshot pair can call the… |
Obserwuj | 8,8 | 0,19 % | ||
| Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through User-Controlled… | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through User-Controlled Key vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges. |
Obserwuj | 8,8 | 0,19 % | ||
| ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the… | ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction.… |
Obserwuj | 8,8 | 0,19 % | ||
| In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-v3: take an LPI reference in… | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables vgic_v3_save_pending_tables() iterates dist->lpi_xa using xa_for_each() and dereferences the returned struct vgic_irq in the loop body without holding a… |
Obserwuj | 8,8 | 0,19 % | ||
| Wykorzystanie luki w PipeWire pozwala na ucieczkę z aplikacji w piaskownicy i wykonanie kodu. | Wykorzystanie luki w PipeWire pozwala na ucieczkę z aplikacji w piaskownicy i wykonanie kodu. |
Obserwuj | 8,8 | 0,19 % | ||
| Multiple DrayTek VigorSwitch models contain a pre-authentication null pointer dereference vulnerability in the setget.cgi interface. | Multiple DrayTek VigorSwitch models contain a pre-authentication null pointer dereference vulnerability in the setget.cgi interface. The vulnerability is caused by missing validation when the pass field is absent. A remote attacker can trigger this vulnerability via a crafted request to crash the… |
Obserwuj | 8,7 | 0,69 % | ||
| As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a… | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The… |
Obserwuj | 8,8 | 0,18 % | ||
| Nieprawidłowa izolacja zasobów w pamięci podręcznej procesora AMD Zen2 może prowadzić do uszkodzenia instrukcji. | Nieprawidłowa izolacja zasobów w pamięci podręcznej procesora AMD Zen2 może prowadzić do uszkodzenia instrukcji. |
Obserwuj | 8,8 | 0,18 % | ||
| In the Linux kernel, the following vulnerability has been resolved: iommufd: Do not add the same hwpt to the ioas->hwpt_list twice The… | In the Linux kernel, the following vulnerability has been resolved: iommufd: Do not add the same hwpt to the ioas->hwpt_list twice The hwpt is added to the hwpt_list only during its creation, it is never added again. This hunk is some missed leftover from rework. Adding it twice will corrupt the… |
Obserwuj | 8,8 | 0,18 % | ||
| Redash is a package for data visualization and sharing. | Redash is a package for data visualization and sharing. From versions after 8.0.0 until 26.9.0, the Query Results query runner in redash/query_runner/query_results.py accepts param_query_N_{key=value} parameters and passed attacker-controlled values to replace_query_parameters() for raw… |
Obserwuj | 8,7 | 0,68 % | ||
| Brak limitów przy alokacji zasobów w sterowniku ODBC Amazon Athena może prowadzić do odmowy usługi. | Brak limitów przy alokacji zasobów w sterowniku ODBC Amazon Athena może prowadzić do odmowy usługi. |
Obserwuj | 8,7 | 0,68 % | ||
| W Streambert przed 2.5.0 podatny renderer może kopiować pliki do wybranej lokalizacji, narażając dane. | W Streambert przed 2.5.0 podatny renderer może kopiować pliki do wybranej lokalizacji, narażając dane. |
Obserwuj | 8,8 | 0,18 % | ||
| Nieprawidłowe ograniczenie ścieżki w narzędziu get_resource w Amazon awslabs.aws-transform-mcp-server pozwala na zapis plików poza… | Nieprawidłowe ograniczenie ścieżki w narzędziu get_resource w Amazon awslabs.aws-transform-mcp-server pozwala na zapis plików poza zamierzonym… |
Obserwuj | 8,8 | 0,18 % | ||
| Wykonanie zdalnego kodu w OpenKM umożliwia administratorom uruchamianie dowolnych poleceń. | Wykonanie zdalnego kodu w OpenKM umożliwia administratorom uruchamianie dowolnych poleceń. |
Obserwuj | 8,6 | 1,18 % | ||
| AnkiMCP is an Anki addon that implements an MCP server, enabling AI assistants to interact with the Anki flashcard application. | AnkiMCP is an Anki addon that implements an MCP server, enabling AI assistants to interact with the Anki flashcard application. Prior to version 0.21.0, `anki_mcp_server/mcp_server.py` globally disables FastMCP DNS-rebinding protection through `TransportSecuritySettings` with… |
Obserwuj | 8,8 | 0,18 % | ||
| Cross-Site Request Forgery (CSRF) vulnerability in Xpro Xpro Elementor Addons xpro-elementor-addons allows Cross Site Request Forgery.This… | Cross-Site Request Forgery (CSRF) vulnerability in Xpro Xpro Elementor Addons xpro-elementor-addons allows Cross Site Request Forgery.This issue affects Xpro Elementor Addons: from n/a through 1.7.10. |
Obserwuj | 8,8 | 0,18 % | ||
| snappy-java through 1.1.10.8 contains a buffer overflow vulnerability in Snappy.compress(ByteBuffer, ByteBuffer) that writes past the end… | snappy-java through 1.1.10.8 contains a buffer overflow vulnerability in Snappy.compress(ByteBuffer, ByteBuffer) that writes past the end of the destination buffer. Attackers can supply incompressible data that exceeds the destination buffer's remaining capacity, corrupting off-heap memory and… |
Obserwuj | 8,7 | 0,68 % | ||
| XSA-501 was about issues with v1 -> v2 and v2 -> v1 changes racing certain other grant table operations. Sadly a v2 -> v1 -> v2 change… | XSA-501 was about issues with v1 -> v2 and v2 -> v1 changes racing certain other grant table operations. Sadly a v2 -> v1 -> v2 change has yet another effect which wasn't accounted for: During the first change, status pages would be freed. During the second change they would be allocated again.… |
Obserwuj | 8,8 | 0,18 % | ||
| Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Certificate Validation vulnerability. | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial of service, Information disclosure, and Remote… |
Obserwuj | 8,8 | 0,18 % | ||
| Nieprawidłowa kontrola dostępu w Pexip Infinity pozwala na zdalne wykonanie kodu przez lokalnego atakującego. | Nieprawidłowa kontrola dostępu w Pexip Infinity pozwala na zdalne wykonanie kodu przez lokalnego atakującego. |
Obserwuj | 8,8 | 0,18 % | ||
| Luka w HPE IceWall umożliwia manipulację odpowiedziami SAML, co pozwala na podszywanie się pod użytkowników. | Luka w HPE IceWall umożliwia manipulację odpowiedziami SAML, co pozwala na podszywanie się pod użytkowników. |
Obserwuj | 8,8 | 0,18 % | ||
| Podatność CSRF w MISP pozwala na nieautoryzowane usunięcie wydarzeń bez interakcji użytkownika. | Podatność CSRF w MISP pozwala na nieautoryzowane usunięcie wydarzeń bez interakcji użytkownika. |
Obserwuj | 8,8 | 0,18 % | ||
| Włączenie funkcjonalności z niezaufanego źródła w Dell PowerStore pozwala na wykonanie kodu jako root. | Włączenie funkcjonalności z niezaufanego źródła w Dell PowerStore pozwala na wykonanie kodu jako root. |
Obserwuj | 8,8 | 0,18 % | ||
| Podatność CSRF w Cotonti Siena pozwala atakującym na modyfikację konfiguracji administratora. | Podatność CSRF w Cotonti Siena pozwala atakującym na modyfikację konfiguracji administratora. |
Obserwuj | 8,8 | 0,18 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.