Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
A vulnerability in the export policies functionality of Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to access sensitive files on an affected device. To exploit this vulnerability, the attacker must have valid administrative…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
Zephyr's Precision Time Protocol receive handler ptp_msg_post_recv() in subsys/net/lib/ptp/msg.c takes the 4-bit message type straight off the wire via ptp_msg_type() (msg->header.type_major_sdo_id & 0xF, range 0-15) and uses it to index the msg_size[] table. That table only defines entries up to…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
IBM watsonx.data 2.2 through 2.2.1 could allow an authenticated user to cause a denial of service through ingestion pods due to improper allocation of resources without limits.
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 could allow an authenticated user to cause a denial of service due to improper validation of a specified quantity size input.
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
The AI ChatBot with ChatGPT and Content Generator by AYS plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.7.0 via the ays_chatgpt_pinecone_upsert function. This makes it possible for unauthenticated attackers to make web requests to…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
A broken access control (BAC) vulnerability in the web-based management interface could allow an authenticated remote attacker with low privileges to view sensitive information. Successful exploitation of this vulnerability could enable the attacker to disclose sensitive data.
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal Central Authentication System (CAS) Server allows Fake the Source of Data. This issue affects Central Authentication System (CAS) Server versions: from 0.0.0 to 2.0.4, from 2.1.0 to 2.1.3.
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
Incorrect provision of specified functionality in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. (Chromium security severity: Medium)
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. For example a constraint that excludes the subdomain test.example.com does not prevent a leaf certificate from claiming the SAN *.example.com.
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
Missing authorization in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via UI Interaction. (Chromium security severity: Medium)
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to…
Opis źródłowy NVD · ENCVSS 6,5 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
A vulnerability in the export policies functionality of Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to access sensitive files on an affected device. To exploit this vulnerability, the attacker must have valid administrative…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
Zephyr's Precision Time Protocol receive handler ptp_msg_post_recv() in subsys/net/lib/ptp/msg.c takes the 4-bit message type straight off the wire via ptp_msg_type() (msg->header.type_major_sdo_id & 0xF, range 0-15) and uses it to index the msg_size[] table. That table only defines entries up to…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
IBM watsonx.data 2.2 through 2.2.1 could allow an authenticated user to cause a denial of service through ingestion pods due to improper allocation of resources without limits.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 could allow an authenticated user to cause a denial of service due to improper validation of a specified quantity size input.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
The AI ChatBot with ChatGPT and Content Generator by AYS plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.7.0 via the ays_chatgpt_pinecone_upsert function. This makes it possible for unauthenticated attackers to make web requests to…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
A broken access control (BAC) vulnerability in the web-based management interface could allow an authenticated remote attacker with low privileges to view sensitive information. Successful exploitation of this vulnerability could enable the attacker to disclose sensitive data.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal Central Authentication System (CAS) Server allows Fake the Source of Data. This issue affects Central Authentication System (CAS) Server versions: from 0.0.0 to 2.0.4, from 2.1.0 to 2.1.3.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
Incorrect provision of specified functionality in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. (Chromium security severity: Medium)
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. For example a constraint that excludes the subdomain test.example.com does not prevent a leaf certificate from claiming the SAN *.example.com.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
Missing authorization in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via UI Interaction. (Chromium security severity: Medium)
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,28 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,5 · EPSS 0,28 % · rekomendacja wg zapisanej polityki