Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Denver SHO-110 IP cameras expose a secondary HTTP service on TCP port 8001 that provides access to a '/snapshot' endpoint without authentication. While the primary web interface on port 80 enforces authentication, the backdoor service allows any remote attacker to retrieve image snapshots by…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,63 % · rekomendacja wg zapisanej polityki
Motor.NET before 0.19.0 contains an uncaught exception vulnerability in JsonNetDeserializer.Deserialize that allows a remote attacker who can publish to a consumed queue or topic to crash the service permanently by sending structurally valid JSON that does not match the handler's expected type.…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,63 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
KVM: s390: vsie: zero stale crypto bits
When shadowing crypto access bits from a format0 apcb (crycb 0 or 1),
the bits 64..255 are unchanged from whatever is in the vsie page in the
crycb and thus in the apcb. This gives a…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
vxlan: do not arm the ageing timer on a device that is down
vxlan_changelink() arms vxlan->age_timer whenever the requested ageing
interval differs from the configured one:
if (conf.age_interval !=…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
ImpressCMS contains an authenticated remote code execution vulnerability in the custom tag module that allows authenticated administrators to execute arbitrary PHP code by storing a malicious payload in a custom tag with PHP type enabled. The application decodes HTML-encoded content via…
Opis źródłowy NVD · ENCVSS 8,6 · EPSS 1,13 % · rekomendacja wg zapisanej polityki
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.
The…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
boneIO Black contains a TOCTOU race condition in the create_timedatectl_sudoers_file() function in boneio/webui/routes/timezone_sudoers.py. The function writes sudoers rules to a predictable temporary file, validates them, then installs them with root privileges. A local attacker can exploit the…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,12 % · rekomendacja wg zapisanej polityki
Crawlab fails to verify user ownership or administrative role on the password-change endpoint, allowing any authenticated user to reset any account's password. Attackers can enumerate user accounts through the user listing endpoint and change administrator credentials to achieve full account…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,62 % · rekomendacja wg zapisanej polityki
Denver SHO-110 IP cameras expose a secondary HTTP service on TCP port 8001 that provides access to a '/snapshot' endpoint without authentication. While the primary web interface on port 80 enforces authentication, the backdoor service allows any remote attacker to retrieve image snapshots by…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,63 % · rekomendacja wg zapisanej polityki
Motor.NET before 0.19.0 contains an uncaught exception vulnerability in JsonNetDeserializer.Deserialize that allows a remote attacker who can publish to a consumed queue or topic to crash the service permanently by sending structurally valid JSON that does not match the handler's expected type.…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,63 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
KVM: s390: vsie: zero stale crypto bits
When shadowing crypto access bits from a format0 apcb (crycb 0 or 1),
the bits 64..255 are unchanged from whatever is in the vsie page in the
crycb and thus in the apcb. This gives a…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
vxlan: do not arm the ageing timer on a device that is down
vxlan_changelink() arms vxlan->age_timer whenever the requested ageing
interval differs from the configured one:
if (conf.age_interval !=…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
ImpressCMS contains an authenticated remote code execution vulnerability in the custom tag module that allows authenticated administrators to execute arbitrary PHP code by storing a malicious payload in a custom tag with PHP type enabled. The application decodes HTML-encoded content via…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,6 · EPSS 1,13 % · rekomendacja wg zapisanej polityki
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.
The…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
boneIO Black contains a TOCTOU race condition in the create_timedatectl_sudoers_file() function in boneio/webui/routes/timezone_sudoers.py. The function writes sudoers rules to a predictable temporary file, validates them, then installs them with root privileges. A local attacker can exploit the…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,12 % · rekomendacja wg zapisanej polityki
Crawlab fails to verify user ownership or administrative role on the password-change endpoint, allowing any authenticated user to reset any account's password. Attackers can enumerate user accounts through the user listing endpoint and change administrator credentials to achieve full account…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,62 % · rekomendacja wg zapisanej polityki