Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
In the Linux kernel, the following vulnerability has been resolved:
dm-integrity: fix a bug if the bio is out of limits
If dm_integrity_check_limits fails, the code would exit with
DM_MAPIO_KILL. However, the range would be already locked at this point,
and it wouldn't be unlocked, resulting in…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,6 % · rekomendacja wg zapisanej polityki
FreePBX is an open source IP PBX. Prior to versions 16.0.10 and 17.0.5, a critical vulnerability exists in the sound language upload and conversion functionality that allows an authenticated attacker to perform arbitrary file writes, leading directly to remote code execution (RCE). Authentication…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,6 % · rekomendacja wg zapisanej polityki
IBM Planning Analytics 2.0 and 2.1 are vulnerable to a stack-based buffer overflow, caused by improper bounds checking. An attacker could overflow the buffer and execute arbitrary code on the system.
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,6 % · rekomendacja wg zapisanej polityki
The Blubrry PowerPress plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in all versions up to, and including, 11.15.2. This is due to the plugin validating file extensions but not halting execution when validation fails in the…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,6 % · rekomendacja wg zapisanej polityki
Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the CephX authentication protocol encrypts tickets with AES-128-CBC in an unauthenticated mode that uses a hard-coded initialization vector and no message…
Opis źródłowy NVD · ENCVSS 8,9 · EPSS 0,09 % · rekomendacja wg zapisanej polityki
Risesoft-y9 Digital-Infrastructure 9.6.5 through 9.6.11 contains a path traversal vulnerability in the fileManager storeFile endpoint that allows unauthenticated attackers to write arbitrary files. Attackers can send crafted fullPath and fileName parameters to POST /rest/storeFile to create or…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,59 % · rekomendacja wg zapisanej polityki
The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.29.9. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,59 % · rekomendacja wg zapisanej polityki
The Security Hardener plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 2.4.4. The vulnerability exists because the plugin's user-enumeration protection, which is enabled by default, hooks the rest_endpoints filter via secure_user_endpoints() and…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,59 % · rekomendacja wg zapisanej polityki
CVSS
8,8
EPSS
0,59 %
Poprawka
Status poprawki nieustalony
Publikacja
Aktualizacja NVD
Podatności: opis, rekomendacja, CVSS, EPSS i daty źródłowe. Rekomendacja nie potwierdza podatności własnego zasobu.
In the Linux kernel, the following vulnerability has been resolved:
dm-integrity: fix a bug if the bio is out of limits
If dm_integrity_check_limits fails, the code would exit with
DM_MAPIO_KILL. However, the range would be already locked at this point,
and it wouldn't be unlocked, resulting in…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,6 % · rekomendacja wg zapisanej polityki
FreePBX is an open source IP PBX. Prior to versions 16.0.10 and 17.0.5, a critical vulnerability exists in the sound language upload and conversion functionality that allows an authenticated attacker to perform arbitrary file writes, leading directly to remote code execution (RCE). Authentication…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,6 % · rekomendacja wg zapisanej polityki
IBM Planning Analytics 2.0 and 2.1 are vulnerable to a stack-based buffer overflow, caused by improper bounds checking. An attacker could overflow the buffer and execute arbitrary code on the system.
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,6 % · rekomendacja wg zapisanej polityki
The Blubrry PowerPress plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in all versions up to, and including, 11.15.2. This is due to the plugin validating file extensions but not halting execution when validation fails in the…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,6 % · rekomendacja wg zapisanej polityki
Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the CephX authentication protocol encrypts tickets with AES-128-CBC in an unauthenticated mode that uses a hard-coded initialization vector and no message…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,9 · EPSS 0,09 % · rekomendacja wg zapisanej polityki
Risesoft-y9 Digital-Infrastructure 9.6.5 through 9.6.11 contains a path traversal vulnerability in the fileManager storeFile endpoint that allows unauthenticated attackers to write arbitrary files. Attackers can send crafted fullPath and fileName parameters to POST /rest/storeFile to create or…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,59 % · rekomendacja wg zapisanej polityki
The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.29.9. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,59 % · rekomendacja wg zapisanej polityki
The Security Hardener plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 2.4.4. The vulnerability exists because the plugin's user-enumeration protection, which is enabled by default, hooks the rest_endpoints filter via secure_user_endpoints() and…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,59 % · rekomendacja wg zapisanej polityki
8,8
0,59 %
Publikacja
Aktualizacja NVD
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
NVD · publikacjeOpóźnione lub nieustalone
NVD · aktualizacjeOpóźnione lub nieustalone
CISA KEVOstatnie przetworzenie zakończone
FIRST EPSSOpóźnione lub nieustaloneData modelu znajduje się przy rekordzie.