Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
In the Linux kernel, the following vulnerability has been resolved:
vxlan: use neigh_ha_snapshot() in route_shortcircuit()
The neighbour hardware address n->ha can be updated asynchronously by the
neighbour subsystem, protected by n->ha_lock seqlock. Reading n->ha without
holding the seqlock…
Opis źródłowy NVD · ENCVSS 10,0 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Unrestricted Upload of File with Dangerous Type vulnerability in KingAddons.com King Addons for Elementor king-addons allows Upload a Web Shell to a Web Server.This issue affects King Addons for Elementor: from n/a through <= 51.1.36.
Opis źródłowy NVD · ENCVSS 10,0 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Joomla Extension - dj-extensions.com - Unauthenticated arbitrary file upload in DJ-Classifieds < 3.11.2 - The Joomla extension DJ-Classifieds is vulnerable to an unauthenticated file upload, leading to full RCE.
Opis źródłowy NVD · ENCVSS 10,0 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Joomla Extension - dj-extensions.com - Unauthenticated arbitrary file upload in DJ-jDownloads < 4.1.6 - The Joomla extension JDownloads is vulnerable to an unauthenticated file upload, leading to full RCE.
Opis źródłowy NVD · ENCVSS 10,0 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Joomla Extension - regularlabs.com - Unauthenticated RCE through unverified reflected user input in Sourcerer < 16.0.0 - Regular Labs Sourcerer before 16.0.0 processes {source} blocks found in Joomla’s final rendered HTML without reliably determining where that code originated.
Opis źródłowy NVD · ENCVSS 10,0 · EPSS 0,44 % · rekomendacja wg zapisanej polityki
Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. From 3.0.0 until 3.2.4, a missing comma in BLOCKED_PATTERNS concatenates the /lab and /api/terminals regular-expression literals. Requests to /api/terminals therefore bypass the anonymous endpoint…
Opis źródłowy NVD · ENCVSS 10,0 · EPSS 0,44 % · rekomendacja wg zapisanej polityki
Net::DNS versions through 1.55 for Perl allow remote execution injection via EDNS EXTENDED ERROR.
Net::DNS::RR::OPT::EXTENDED_ERROR::_decompose parses the EXTRA-TEXT field of an EDNS EXTENDED-ERROR option (RFC 8914) by tokenising the raw bytes and passing the result to Perl's eval. There is some…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 1,44 % · rekomendacja wg zapisanej polityki
Payload is a free and open source headless content management system. In @payloadcms/plugin-form-builder versions before 3.90.0 and canary versions before 4.0.0-canary.34, an attacker can craft a form submission that executes code remotely on the server. This issue is fixed in versions 3.90.0 and…
Opis źródłowy NVD · ENCVSS 10,0 · EPSS 0,43 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
vxlan: use neigh_ha_snapshot() in route_shortcircuit()
The neighbour hardware address n->ha can be updated asynchronously by the
neighbour subsystem, protected by n->ha_lock seqlock. Reading n->ha without
holding the seqlock…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 10,0 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Unrestricted Upload of File with Dangerous Type vulnerability in KingAddons.com King Addons for Elementor king-addons allows Upload a Web Shell to a Web Server.This issue affects King Addons for Elementor: from n/a through <= 51.1.36.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 10,0 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Joomla Extension - dj-extensions.com - Unauthenticated arbitrary file upload in DJ-Classifieds < 3.11.2 - The Joomla extension DJ-Classifieds is vulnerable to an unauthenticated file upload, leading to full RCE.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 10,0 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Joomla Extension - dj-extensions.com - Unauthenticated arbitrary file upload in DJ-jDownloads < 4.1.6 - The Joomla extension JDownloads is vulnerable to an unauthenticated file upload, leading to full RCE.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 10,0 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Joomla Extension - regularlabs.com - Unauthenticated RCE through unverified reflected user input in Sourcerer < 16.0.0 - Regular Labs Sourcerer before 16.0.0 processes {source} blocks found in Joomla’s final rendered HTML without reliably determining where that code originated.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 10,0 · EPSS 0,44 % · rekomendacja wg zapisanej polityki
Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. From 3.0.0 until 3.2.4, a missing comma in BLOCKED_PATTERNS concatenates the /lab and /api/terminals regular-expression literals. Requests to /api/terminals therefore bypass the anonymous endpoint…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 10,0 · EPSS 0,44 % · rekomendacja wg zapisanej polityki
Net::DNS versions through 1.55 for Perl allow remote execution injection via EDNS EXTENDED ERROR.
Net::DNS::RR::OPT::EXTENDED_ERROR::_decompose parses the EXTRA-TEXT field of an EDNS EXTENDED-ERROR option (RFC 8914) by tokenising the raw bytes and passing the result to Perl's eval. There is some…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 1,44 % · rekomendacja wg zapisanej polityki
Payload is a free and open source headless content management system. In @payloadcms/plugin-form-builder versions before 3.90.0 and canary versions before 4.0.0-canary.34, an attacker can craft a form submission that executes code remotely on the server. This issue is fixed in versions 3.90.0 and…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 10,0 · EPSS 0,43 % · rekomendacja wg zapisanej polityki