Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Mattermost versions 11.0.x <= 11.0.2, 10.12.x <= 10.12.1, 10.11.x <= 10.11.4, 10.5.x <= 10.5.12 fail to to verify that the token used during the code exchange originates from the same authentication flow, which allows an authenticated user to perform account takeover via a specially crafted email…
Opis źródłowy NVD · ENCVSS 9,9 · EPSS 0,35 % · rekomendacja wg zapisanej polityki
Mattermost versions 10.12.x <= 10.12.1, 10.11.x <= 10.11.4, 10.5.x <= 10.5.12, 11.0.x <= 11.0.3 fail to properly validate OAuth state tokens during OpenID Connect authentication which allows an authenticated attacker with team creation privileges to take over a user account via manipulation of…
Opis źródłowy NVD · ENCVSS 9,9 · EPSS 0,35 % · rekomendacja wg zapisanej polityki
SQL injection vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow a low-privileged authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful exploitation could allow an attacker to run…
Opis źródłowy NVD · ENCVSS 9,9 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
Cal.com is open-source scheduling software. Prior to 5.9.8, A flaw in the login credentials provider allows an attacker to bypass password verification when a TOTP code is provided, potentially gaining unauthorized access to user accounts. This issue exists due to problematic conditional logic in…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,84 % · rekomendacja wg zapisanej polityki
The WP移行専用プラグイン for CPI plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the Cpiwm_Import_Controller::import function in all versions up to, and including, 1.0.2. This makes it possible for unauthenticated attackers to upload arbitrary files on…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,84 % · rekomendacja wg zapisanej polityki
The KiotViet Sync plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the create_media() function in all versions up to, and including, 1.8.5. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,84 % · rekomendacja wg zapisanej polityki
A command injection vulnerability exists in Security Center where a remote, unauthenticated attacker could exploit this issue to execute arbitrary commands on the underlying operating system with the privileges of the service account.
Opis źródłowy NVD · ENCVSS 9,4 · EPSS 2,84 % · rekomendacja wg zapisanej polityki
Dancer2::Plugin::Auth::Extensible versions through 0.713 for Perl allow password reset link poisoning via the request Host header in _default_email_password_reset and _default_welcome_send.
Both default emails emit a link of the form `$base/login/$code`, whose authority comes from the request…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,84 % · rekomendacja wg zapisanej polityki
A Kubernetes tenant with create permission on Console custom resources can set spec.containers.api.spec.image to an arbitrary container image. The operator deploys this image into a pod whose ServiceAccount is bound via ClusterRoleBinding to a ClusterRole granting cluster-wide get/list/watch on…
Opis źródłowy NVD · ENCVSS 9,9 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
Mattermost versions 11.0.x <= 11.0.2, 10.12.x <= 10.12.1, 10.11.x <= 10.11.4, 10.5.x <= 10.5.12 fail to to verify that the token used during the code exchange originates from the same authentication flow, which allows an authenticated user to perform account takeover via a specially crafted email…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,9 · EPSS 0,35 % · rekomendacja wg zapisanej polityki
Mattermost versions 10.12.x <= 10.12.1, 10.11.x <= 10.11.4, 10.5.x <= 10.5.12, 11.0.x <= 11.0.3 fail to properly validate OAuth state tokens during OpenID Connect authentication which allows an authenticated attacker with team creation privileges to take over a user account via manipulation of…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,9 · EPSS 0,35 % · rekomendacja wg zapisanej polityki
SQL injection vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow a low-privileged authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful exploitation could allow an attacker to run…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,9 · EPSS 0,34 % · rekomendacja wg zapisanej polityki
Cal.com is open-source scheduling software. Prior to 5.9.8, A flaw in the login credentials provider allows an attacker to bypass password verification when a TOTP code is provided, potentially gaining unauthorized access to user accounts. This issue exists due to problematic conditional logic in…
Opis źródłowy NVD · EN
Pilne działanie
CVSS 9,8 · EPSS 0,84 % · rekomendacja wg zapisanej polityki
The WP移行専用プラグイン for CPI plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the Cpiwm_Import_Controller::import function in all versions up to, and including, 1.0.2. This makes it possible for unauthenticated attackers to upload arbitrary files on…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,84 % · rekomendacja wg zapisanej polityki
The KiotViet Sync plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the create_media() function in all versions up to, and including, 1.8.5. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,84 % · rekomendacja wg zapisanej polityki
A command injection vulnerability exists in Security Center where a remote, unauthenticated attacker could exploit this issue to execute arbitrary commands on the underlying operating system with the privileges of the service account.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,4 · EPSS 2,84 % · rekomendacja wg zapisanej polityki
Dancer2::Plugin::Auth::Extensible versions through 0.713 for Perl allow password reset link poisoning via the request Host header in _default_email_password_reset and _default_welcome_send.
Both default emails emit a link of the form `$base/login/$code`, whose authority comes from the request…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,84 % · rekomendacja wg zapisanej polityki
A Kubernetes tenant with create permission on Console custom resources can set spec.containers.api.spec.image to an arbitrary container image. The operator deploys this image into a pod whose ServiceAccount is bound via ClusterRoleBinding to a ClusterRole granting cluster-wide get/list/watch on…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,9 · EPSS 0,34 % · rekomendacja wg zapisanej polityki