Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Several stack-based buffer overflow vulnerabilities exists in the MFER parsing functionality of The Biosig Project libbiosig 3.9.1. A specially crafted MFER file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger these vulnerabilities.When Tag is 133
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,71 % · rekomendacja wg zapisanej polityki
Several stack-based buffer overflow vulnerabilities exists in the MFER parsing functionality of The Biosig Project libbiosig 3.9.1. A specially crafted MFER file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger these vulnerabilities.When Tag is 3
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,71 % · rekomendacja wg zapisanej polityki
The MountDev AI MCP Connector for WordPress plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.6.1. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,71 % · rekomendacja wg zapisanej polityki
AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 include a web administration component (F2MAdmin) that exposes an unauthenticated script-management endpoint at AudioCodes_files/utils/IVR/diagram/ajaxScript.php. The saveScript action writes…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,71 % · rekomendacja wg zapisanej polityki
The Easy Form Builder by WhiteStudio plugin for WordPress is vulnerable to Unauthenticated Privilege Escalation to Administrator in versions up to, and including, 4.0.11 This is due to the password recovery flow using the publicly-visible session identifier ('sid') as the password reset token…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,71 % · rekomendacja wg zapisanej polityki
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to version 1.0.8.7, the password reset functionality is vulnerable to an Authentication Bypass due to insufficient validation of the user and token GET parameters. This issue has been…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,71 % · rekomendacja wg zapisanej polityki
A critical authentication bypass vulnerability exists in Ollama platform's API endpoints in versions prior to and including v0.12.3. The platform exposes multiple API endpoints without requiring authentication, enabling remote attackers to perform unauthorized model management operations.
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,71 % · rekomendacja wg zapisanej polityki
The Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 4.8.6. This is due to the handle_email_otp_return() function returning the secret magic login token in the…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,71 % · rekomendacja wg zapisanej polityki
Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, does not correctly verify the name of an attacker-controlled WSDL service, leading to insecure reflection. This can result in remote code execution through either invocation of arbitrary methods or…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,71 % · rekomendacja wg zapisanej polityki
Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, exposes a .NET Remoting service that is insufficiently protected against deserialization of arbitrary types. This can lead to remote code execution.
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,71 % · rekomendacja wg zapisanej polityki
oobabooga text-generation-webui trust_remote_code Reliance on Untrusted Inputs Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of oobabooga text-generation-webui. Authentication is not required to exploit this…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,71 % · rekomendacja wg zapisanej polityki
oobabooga text-generation-webui trust_remote_code Reliance on Untrusted Inputs Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of oobabooga text-generation-webui. Authentication is not required to exploit this…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,71 % · rekomendacja wg zapisanej polityki
MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.12.0rc0 until 3.17.0, third-party scorer deserialization in mlflow/genai/scorers/base.py accepts request-selected descendants of THIRD_PARTY_SCORER_ALLOWED_MODULES rather than…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,7 % · rekomendacja wg zapisanej polityki
CVSS
9,8
EPSS
0,7 %
Poprawka
Status poprawki nieustalony
Publikacja
Aktualizacja NVD
Podatności: opis, rekomendacja, CVSS, EPSS i daty źródłowe. Rekomendacja nie potwierdza podatności własnego zasobu.
Several stack-based buffer overflow vulnerabilities exists in the MFER parsing functionality of The Biosig Project libbiosig 3.9.1. A specially crafted MFER file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger these vulnerabilities.When Tag is 133
Opis źródłowy NVD · EN
Pilne działanie
CVSS 9,8 · EPSS 0,71 % · rekomendacja wg zapisanej polityki
Several stack-based buffer overflow vulnerabilities exists in the MFER parsing functionality of The Biosig Project libbiosig 3.9.1. A specially crafted MFER file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger these vulnerabilities.When Tag is 3
Opis źródłowy NVD · EN
Pilne działanie
CVSS 9,8 · EPSS 0,71 % · rekomendacja wg zapisanej polityki
The MountDev AI MCP Connector for WordPress plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.6.1. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,71 % · rekomendacja wg zapisanej polityki
AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 include a web administration component (F2MAdmin) that exposes an unauthenticated script-management endpoint at AudioCodes_files/utils/IVR/diagram/ajaxScript.php. The saveScript action writes…
Opis źródłowy NVD · EN
Pilne działanie
CVSS 9,8 · EPSS 0,71 % · rekomendacja wg zapisanej polityki
The Easy Form Builder by WhiteStudio plugin for WordPress is vulnerable to Unauthenticated Privilege Escalation to Administrator in versions up to, and including, 4.0.11 This is due to the password recovery flow using the publicly-visible session identifier ('sid') as the password reset token…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,71 % · rekomendacja wg zapisanej polityki
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to version 1.0.8.7, the password reset functionality is vulnerable to an Authentication Bypass due to insufficient validation of the user and token GET parameters. This issue has been…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,71 % · rekomendacja wg zapisanej polityki
A critical authentication bypass vulnerability exists in Ollama platform's API endpoints in versions prior to and including v0.12.3. The platform exposes multiple API endpoints without requiring authentication, enabling remote attackers to perform unauthorized model management operations.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,71 % · rekomendacja wg zapisanej polityki
The Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 4.8.6. This is due to the handle_email_otp_return() function returning the secret magic login token in the…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,71 % · rekomendacja wg zapisanej polityki
Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, does not correctly verify the name of an attacker-controlled WSDL service, leading to insecure reflection. This can result in remote code execution through either invocation of arbitrary methods or…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,71 % · rekomendacja wg zapisanej polityki
Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, exposes a .NET Remoting service that is insufficiently protected against deserialization of arbitrary types. This can lead to remote code execution.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,71 % · rekomendacja wg zapisanej polityki
oobabooga text-generation-webui trust_remote_code Reliance on Untrusted Inputs Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of oobabooga text-generation-webui. Authentication is not required to exploit this…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,71 % · rekomendacja wg zapisanej polityki
oobabooga text-generation-webui trust_remote_code Reliance on Untrusted Inputs Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of oobabooga text-generation-webui. Authentication is not required to exploit this…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,71 % · rekomendacja wg zapisanej polityki
MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.12.0rc0 until 3.17.0, third-party scorer deserialization in mlflow/genai/scorers/base.py accepts request-selected descendants of THIRD_PARTY_SCORER_ALLOWED_MODULES rather than…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,7 % · rekomendacja wg zapisanej polityki
9,8
0,7 %
Publikacja
Aktualizacja NVD
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
NVD · publikacjeOstatnie przetworzenie zakończone
NVD · aktualizacjePrzetwarzanie niepełne
CISA KEVOstatnie przetworzenie zakończone
FIRST EPSSOstatnie przetworzenie zakończoneData modelu znajduje się przy rekordzie.