Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
In the Linux kernel, the following vulnerability has been resolved:
batman-adv: tt: prevent TVLV OOB check overflow
A TT unicast TVLV contains the number of VLANs stored in it. This number is
an u16 and gets multiplied by the size of the struct
batadv_tvlv_tt_vlan_data (8 bytes). The size can…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,76 % · rekomendacja wg zapisanej polityki
An authentication bypass vulnerability in the SSH daemon of AOS-8 allows an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation allows an attacker to gain administrative privileges leading to complete compromise of the AOS-8 host.
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,75 % · rekomendacja wg zapisanej polityki
The JAY Login & Register plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.4.01. This is due to incorrect authentication checking in the 'jay_login_register_process_switch_back' function with the 'jay_login_register_process_switch_back' cookie value.…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,75 % · rekomendacja wg zapisanej polityki
An issue in Greek Universities Network (GUnet) Open eClass Platform v.3.15 allows a remote attacker to execute arbitrary code via the chat input field in the course module.
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,75 % · rekomendacja wg zapisanej polityki
Postiz signs its session, invitation and password reset tokens with one shared secret and without any marker of what a token is for. A route that refreshes the credentials of a browser-extension channel signed data taken from the request itself and stored the result where the requesting user can…
Opis źródłowy NVD · ENCVSS 9,9 · EPSS 0,25 % · rekomendacja wg zapisanej polityki
Video-stitch before 2.0.0-beta.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying file names interpolated unquoted into shell-executed ffmpeg command lines. Attackers who influence file names passed to concat(), cut(), or merge() can inject…
Opis źródłowy NVD · ENCVSS 9,3 · EPSS 3,25 % · rekomendacja wg zapisanej polityki
IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,75 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
gue: validate REMCSUM private option length
GUE private flags can indicate that remote checksum offload metadata is
present. The private flags field itself is accounted for by
guehdr_flags_len(), but guehdr_priv_flags_len()…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,75 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
qede: fix off-by-one in BD ring consumption on build_skb failure
qede_rx_build_skb() and qede_tpa_rx_build_skb() do not check for a
NULL return from qede_build_skb(). When it returns NULL under memory
pressure, the functions…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,75 % · rekomendacja wg zapisanej polityki
Radiometrics VizAir is vulnerable to a lack of authentication mechanisms for critical functions, such as admin access and API requests. Attackers can modify configurations without authentication, potentially manipulating active runway settings and misleading air traffic control (ATC) and pilots.…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,75 % · rekomendacja wg zapisanej polityki
Buffer overflow vulnerabilities exist in an underlying service of AOS-8 that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port 8211. Successful exploitation could allow an attacker to…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
CVSS
9,8
EPSS
0,74 %
Poprawka
Status poprawki nieustalony
Publikacja
Aktualizacja NVD
Podatności: opis, rekomendacja, CVSS, EPSS i daty źródłowe. Rekomendacja nie potwierdza podatności własnego zasobu.
In the Linux kernel, the following vulnerability has been resolved:
batman-adv: tt: prevent TVLV OOB check overflow
A TT unicast TVLV contains the number of VLANs stored in it. This number is
an u16 and gets multiplied by the size of the struct
batadv_tvlv_tt_vlan_data (8 bytes). The size can…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,76 % · rekomendacja wg zapisanej polityki
An authentication bypass vulnerability in the SSH daemon of AOS-8 allows an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation allows an attacker to gain administrative privileges leading to complete compromise of the AOS-8 host.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,75 % · rekomendacja wg zapisanej polityki
The JAY Login & Register plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.4.01. This is due to incorrect authentication checking in the 'jay_login_register_process_switch_back' function with the 'jay_login_register_process_switch_back' cookie value.…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,75 % · rekomendacja wg zapisanej polityki
An issue in Greek Universities Network (GUnet) Open eClass Platform v.3.15 allows a remote attacker to execute arbitrary code via the chat input field in the course module.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,75 % · rekomendacja wg zapisanej polityki
Postiz signs its session, invitation and password reset tokens with one shared secret and without any marker of what a token is for. A route that refreshes the credentials of a browser-extension channel signed data taken from the request itself and stored the result where the requesting user can…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,9 · EPSS 0,25 % · rekomendacja wg zapisanej polityki
Video-stitch before 2.0.0-beta.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying file names interpolated unquoted into shell-executed ffmpeg command lines. Attackers who influence file names passed to concat(), cut(), or merge() can inject…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,3 · EPSS 3,25 % · rekomendacja wg zapisanej polityki
IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,75 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
gue: validate REMCSUM private option length
GUE private flags can indicate that remote checksum offload metadata is
present. The private flags field itself is accounted for by
guehdr_flags_len(), but guehdr_priv_flags_len()…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,75 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
qede: fix off-by-one in BD ring consumption on build_skb failure
qede_rx_build_skb() and qede_tpa_rx_build_skb() do not check for a
NULL return from qede_build_skb(). When it returns NULL under memory
pressure, the functions…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,75 % · rekomendacja wg zapisanej polityki
Radiometrics VizAir is vulnerable to a lack of authentication mechanisms for critical functions, such as admin access and API requests. Attackers can modify configurations without authentication, potentially manipulating active runway settings and misleading air traffic control (ATC) and pilots.…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,75 % · rekomendacja wg zapisanej polityki
Buffer overflow vulnerabilities exist in an underlying service of AOS-8 that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port 8211. Successful exploitation could allow an attacker to…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
9,8
0,74 %
Publikacja
Aktualizacja NVD
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.