Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Data publikacji: ostatnie 7 dni. Starsze wpisy dostępne w pełnym katalogu i widoku KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
SvelteKit (@sveltejs/kit) from 2.10.0 before 3.0.0 contains a path traversal vulnerability in the vite preview server on Windows that allows unauthenticated attackers to read files outside the prerendered output directory. Attackers who can reach the preview server through network access or a…
Opis źródłowy NVD · ENCVSS 7,5 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
In Eclipse ioFog Controller versions 3.8.0 through 3.9.1, POST, PUT, and PATCH bodies on routes that enable template substitution are rendered by an uncapped Liquid engine before authentication and RBAC. The bearer check does not reject a missing or invalid token, and the auth rate limit applies…
Opis źródłowy NVD · ENCVSS 7,5 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle…
Opis źródłowy NVD · ENCVSS 7,5 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle…
Opis źródłowy NVD · ENCVSS 7,5 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Deployment.…
Opis źródłowy NVD · ENCVSS 7,5 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Deployment.…
Opis źródłowy NVD · ENCVSS 7,5 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards…
Opis źródłowy NVD · ENCVSS 7,5 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle SOA Suite.…
Opis źródłowy NVD · ENCVSS 7,5 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Image Packaging System). The supported version that is affected is 11.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Solaris. Successful attacks of…
Opis źródłowy NVD · ENCVSS 7,5 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
Opis źródłowy NVD · ENCVSS 7,5 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Python). The supported version that is affected is 26.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors. Successful…
Opis źródłowy NVD · ENCVSS 7,5 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Workflow Events). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Shipping…
Opis źródłowy NVD · ENCVSS 7,5 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: BRM Server). Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with…
Opis źródłowy NVD · ENCVSS 7,5 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (component: Security). Supported versions that are affected are 7.5.0, 7.5.1, 7.6.0, 7.7.0, 7.8.0 and 8.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network…
Opis źródłowy NVD · ENCVSS 7,5 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Oracle Diagnostics Interfaces). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
Opis źródłowy NVD · ENCVSS 7,5 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server). Supported versions that are affected are 8.2.0.0.0 and 26.01.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
Opis źródłowy NVD · ENCVSS 7,5 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: UIF Open UI). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM End User. Successful attacks…
Opis źródłowy NVD · ENCVSS 7,5 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Cloud Gateway). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Deployment. Successful…
Opis źródłowy NVD · ENCVSS 7,5 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Siebel CRM Deployment.…
Opis źródłowy NVD · ENCVSS 7,5 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Deployment.…
Opis źródłowy NVD · ENCVSS 7,5 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR). Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools.…
Opis źródłowy NVD · ENCVSS 7,5 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution). Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft…
Opis źródłowy NVD · ENCVSS 7,5 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
vLLM after 0.24.0 and before 0.31.0 contains a memory exhaustion vulnerability in MOSS-Audio model serving that caches a processor for every distinct request-controlled mm_processor_kwargs value in an unbounded dictionary. Unauthenticated attackers can send distinct or oversized mel_config values…
Opis źródłowy NVD · ENCVSS 7,5 · EPSS 0,39 % · rekomendacja wg zapisanej polityki
Cherry Plugin for WordPress before 1.2.7 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files via the 'file' parameter. Attackers can send GET requests to /admin/import-export/download-content.php with traversal sequences like…
Opis źródłowy NVD · ENCVSS 7,5 · EPSS 0,39 % · rekomendacja wg zapisanej polityki
EyeLock nano NXT 3.05.1193, 3.04.1108, 3.03.944, and 3.01.646 contain a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files via the 'path' parameter. Attackers can send GET requests to /scripts/logdownload.php with traversal sequences like ../../etc/passwd,…
Opis źródłowy NVD · ENCVSS 7,5 · EPSS 0,39 % · rekomendacja wg zapisanej polityki
CVSS
7,5
EPSS
0,39 %
Poprawka
Status poprawki nieustalony
Publikacja
Aktualizacja NVD
Podatności: opis, rekomendacja, CVSS, EPSS i daty źródłowe. Rekomendacja nie potwierdza podatności własnego zasobu.
SvelteKit (@sveltejs/kit) from 2.10.0 before 3.0.0 contains a path traversal vulnerability in the vite preview server on Windows that allows unauthenticated attackers to read files outside the prerendered output directory. Attackers who can reach the preview server through network access or a…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,5 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
In Eclipse ioFog Controller versions 3.8.0 through 3.9.1, POST, PUT, and PATCH bodies on routes that enable template substitution are rendered by an uncapped Liquid engine before authentication and RBAC. The bearer check does not reject a missing or invalid token, and the auth rate limit applies…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,5 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,5 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,5 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Deployment.…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,5 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Deployment.…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,5 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,5 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle SOA Suite.…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,5 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Image Packaging System). The supported version that is affected is 11.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Solaris. Successful attacks of…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,5 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,5 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Python). The supported version that is affected is 26.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors. Successful…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,5 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Workflow Events). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Shipping…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,5 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: BRM Server). Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,5 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (component: Security). Supported versions that are affected are 7.5.0, 7.5.1, 7.6.0, 7.7.0, 7.8.0 and 8.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,5 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Oracle Diagnostics Interfaces). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,5 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server). Supported versions that are affected are 8.2.0.0.0 and 26.01.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,5 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: UIF Open UI). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM End User. Successful attacks…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,5 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Cloud Gateway). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Deployment. Successful…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,5 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Siebel CRM Deployment.…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,5 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Deployment.…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,5 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR). Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools.…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,5 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution). Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,5 · EPSS 0,4 % · rekomendacja wg zapisanej polityki
vLLM after 0.24.0 and before 0.31.0 contains a memory exhaustion vulnerability in MOSS-Audio model serving that caches a processor for every distinct request-controlled mm_processor_kwargs value in an unbounded dictionary. Unauthenticated attackers can send distinct or oversized mel_config values…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,5 · EPSS 0,39 % · rekomendacja wg zapisanej polityki
Cherry Plugin for WordPress before 1.2.7 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files via the 'file' parameter. Attackers can send GET requests to /admin/import-export/download-content.php with traversal sequences like…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,5 · EPSS 0,39 % · rekomendacja wg zapisanej polityki
EyeLock nano NXT 3.05.1193, 3.04.1108, 3.03.944, and 3.01.646 contain a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files via the 'path' parameter. Attackers can send GET requests to /scripts/logdownload.php with traversal sequences like ../../etc/passwd,…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,5 · EPSS 0,39 % · rekomendacja wg zapisanej polityki
7,5
0,39 %
Publikacja
Aktualizacja NVD
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
NVD · publikacjeOpóźnione lub nieustalone
NVD · aktualizacjeOpóźnione lub nieustalone
CISA KEVOstatnie przetworzenie zakończone
FIRST EPSSOpóźnione lub nieustaloneData modelu znajduje się przy rekordzie.