Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
The Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.4.5 via the extcf7_submit function. This is due to missing file extension, MIME type, and size validation in the…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,66 % · rekomendacja wg zapisanej polityki
In EmberZNet 9.1.1 and earlier, a malformed Publish Price Matrix command can result in an out-of-bounds write potentially leading to remote code execution. These messages must come from a device that has already joined the network. Only devices supporting the Price Cluster are impacted.
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,66 % · rekomendacja wg zapisanej polityki
In EmberZNet 9.1.1 and earlier, a malformed Simple_Desc_req response can result in an out-of-bounds write potentially leading to remote code execution. This response must come from a device that has already joined the network, and the attacker must wait for a Simple_Desc_req before the attack can…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,66 % · rekomendacja wg zapisanej polityki
Homer is open source telecom observability software. Prior to version 11.0.283, on every fresh Homer deployment using internal authentication, the bootstrap process automatically creates an `admin` account with the password `sipcapture` (stored as a legacy SHA-256 hex hash). There is no…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,65 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix tree connection use-after-free in smb2_tree_connect()
ksmbd_tree_conn_connect() publishes a new tree connection in
sess->tree_conns with a single reference and returns its pointer to
smb2_tree_connect(). The handler…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,65 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
nfs: use nfsi->rwsem to protect traversal of the file lock list
Lingfeng identified a bug and suggested two solutions, but both appear
to have issues.
Generally, we cannot release flc_lock while iterating over the file…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,65 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix use-after-free of fp->owner.name in durable handle owner check
Two concurrent SMB2 durable reconnects (DH2C/DHnC) on the same
persistent_id race the fp->owner.name compare-read in
ksmbd_vfs_compare_durable_owner()…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,65 % · rekomendacja wg zapisanej polityki
The Easy Upload Files During Checkout plugin for WordPress is vulnerable to arbitrary JavaScript file uploads due to missing file type validation in the 'file_during_checkout' function in all versions up to, and including, 2.9.8. This makes it possible for unauthenticated attackers to upload…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,65 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
ovpn: finish crypto callback cleanup before peer release
Crypto completion callbacks hold both key-slot and peer references. The
peer reference pins the netdev, and dropping the last peer reference can
let netdev unregistration…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,65 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
ovpn: skip rehash for peers already removed from by_id
ovpn_nl_peer_set_doit() resolves the target peer via
ovpn_peer_get_by_id() before taking ovpn->lock. In the window between
the lookup (which only takes a refcount) and the…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,65 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
dibs: initialise dibs->lock in dibs_dev_alloc()
dibs->lock is initialised by dibs_dev_add(), but a dibs device can
already take interrupts before that call: ism_probe() runs
ism_dev_init(), and hence request_irq(), before it…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,65 % · rekomendacja wg zapisanej polityki
CVSS
9,8
EPSS
0,65 %
Poprawka
Status poprawki nieustalony
Publikacja
Aktualizacja NVD
Podatności: opis, rekomendacja, CVSS, EPSS i daty źródłowe. Rekomendacja nie potwierdza podatności własnego zasobu.
The Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.4.5 via the extcf7_submit function. This is due to missing file extension, MIME type, and size validation in the…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,66 % · rekomendacja wg zapisanej polityki
In EmberZNet 9.1.1 and earlier, a malformed Publish Price Matrix command can result in an out-of-bounds write potentially leading to remote code execution. These messages must come from a device that has already joined the network. Only devices supporting the Price Cluster are impacted.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,66 % · rekomendacja wg zapisanej polityki
In EmberZNet 9.1.1 and earlier, a malformed Simple_Desc_req response can result in an out-of-bounds write potentially leading to remote code execution. This response must come from a device that has already joined the network, and the attacker must wait for a Simple_Desc_req before the attack can…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,66 % · rekomendacja wg zapisanej polityki
Homer is open source telecom observability software. Prior to version 11.0.283, on every fresh Homer deployment using internal authentication, the bootstrap process automatically creates an `admin` account with the password `sipcapture` (stored as a legacy SHA-256 hex hash). There is no…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,65 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix tree connection use-after-free in smb2_tree_connect()
ksmbd_tree_conn_connect() publishes a new tree connection in
sess->tree_conns with a single reference and returns its pointer to
smb2_tree_connect(). The handler…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,65 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
nfs: use nfsi->rwsem to protect traversal of the file lock list
Lingfeng identified a bug and suggested two solutions, but both appear
to have issues.
Generally, we cannot release flc_lock while iterating over the file…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,65 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix use-after-free of fp->owner.name in durable handle owner check
Two concurrent SMB2 durable reconnects (DH2C/DHnC) on the same
persistent_id race the fp->owner.name compare-read in
ksmbd_vfs_compare_durable_owner()…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,65 % · rekomendacja wg zapisanej polityki
The Easy Upload Files During Checkout plugin for WordPress is vulnerable to arbitrary JavaScript file uploads due to missing file type validation in the 'file_during_checkout' function in all versions up to, and including, 2.9.8. This makes it possible for unauthenticated attackers to upload…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,65 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
ovpn: finish crypto callback cleanup before peer release
Crypto completion callbacks hold both key-slot and peer references. The
peer reference pins the netdev, and dropping the last peer reference can
let netdev unregistration…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,65 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
ovpn: skip rehash for peers already removed from by_id
ovpn_nl_peer_set_doit() resolves the target peer via
ovpn_peer_get_by_id() before taking ovpn->lock. In the window between
the lookup (which only takes a refcount) and the…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,65 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
dibs: initialise dibs->lock in dibs_dev_alloc()
dibs->lock is initialised by dibs_dev_add(), but a dibs device can
already take interrupts before that call: ism_probe() runs
ism_dev_init(), and hence request_irq(), before it…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,65 % · rekomendacja wg zapisanej polityki
9,8
0,65 %
Publikacja
Aktualizacja NVD
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.