Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
A stack-based buffer overflow vulnerability exists in the SNMP daemon request handling of Brocade Fabric versions before 10.0.1. When processing an incoming SNMPv3 packet, an internal statistics gathering handler copies user-supplied context name data into a fixed-size buffer without properly…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
@mborne/extract before 0.2.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying shell metacharacters in archivePath or targetDir options. Attackers controlling these values passed to extract() can inject commands into unquoted shelljs exec()…
Opis źródłowy NVD · ENCVSS 9,3 · EPSS 2,73 % · rekomendacja wg zapisanej polityki
Whisper-node through 1.1.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted filePath or whisperOptions.language values to whisper(). Attackers can inject shell metacharacters or $() substitution into the command string built by…
Opis źródłowy NVD · ENCVSS 9,3 · EPSS 2,73 % · rekomendacja wg zapisanej polityki
nodejs-whisper through 0.3.1 contains an OS command injection vulnerability in convertToWavType() that allows attackers to execute commands by supplying crafted audio file paths. Attackers can provide file names containing $() command substitution or closing quotes, which are interpolated into an…
Opis źródłowy NVD · ENCVSS 9,3 · EPSS 2,73 % · rekomendacja wg zapisanej polityki
doc-recog through 1.1.6 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted document paths to recog() or tag(). Attackers can embed $(...) or backtick command substitution in the file path, which DocData._readPDF passes to a shell-based…
Opis źródłowy NVD · ENCVSS 9,3 · EPSS 2,73 % · rekomendacja wg zapisanej polityki
IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to buffer overflow.
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote unauthenticated attacker to view and modify sensitive information and cause a denial of service due to improper authorization.
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An attacker with control of a network file server may be able to cause unexpected system termination.
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
Heap buffer overflow in the HLL sketch deserialization of Apache DataSketches C++ (repo: datasketches-cpp).
When deserializing a sketch in LIST mode, from either a byte buffer or a stream, the coupon count was read from the input and used as the number of entries to copy into a fixed buffer of 8…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,21 % · rekomendacja wg zapisanej polityki
A stack-based buffer overflow vulnerability exists in the SNMP daemon request handling of Brocade Fabric versions before 10.0.1. When processing an incoming SNMPv3 packet, an internal statistics gathering handler copies user-supplied context name data into a fixed-size buffer without properly…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
@mborne/extract before 0.2.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying shell metacharacters in archivePath or targetDir options. Attackers controlling these values passed to extract() can inject commands into unquoted shelljs exec()…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,3 · EPSS 2,73 % · rekomendacja wg zapisanej polityki
Whisper-node through 1.1.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted filePath or whisperOptions.language values to whisper(). Attackers can inject shell metacharacters or $() substitution into the command string built by…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,3 · EPSS 2,73 % · rekomendacja wg zapisanej polityki
nodejs-whisper through 0.3.1 contains an OS command injection vulnerability in convertToWavType() that allows attackers to execute commands by supplying crafted audio file paths. Attackers can provide file names containing $() command substitution or closing quotes, which are interpolated into an…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,3 · EPSS 2,73 % · rekomendacja wg zapisanej polityki
doc-recog through 1.1.6 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted document paths to recog() or tag(). Attackers can embed $(...) or backtick command substitution in the file path, which DocData._readPDF passes to a shell-based…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,3 · EPSS 2,73 % · rekomendacja wg zapisanej polityki
IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to buffer overflow.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote unauthenticated attacker to view and modify sensitive information and cause a denial of service due to improper authorization.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An attacker with control of a network file server may be able to cause unexpected system termination.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,22 % · rekomendacja wg zapisanej polityki
Heap buffer overflow in the HLL sketch deserialization of Apache DataSketches C++ (repo: datasketches-cpp).
When deserializing a sketch in LIST mode, from either a byte buffer or a stream, the coupon count was read from the input and used as the number of entries to copy into a fixed buffer of 8…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,21 % · rekomendacja wg zapisanej polityki