Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
In Progress® Telerik® Report Server prior to version 12.2.26.1007, a stored cross-site scripting vulnerability in the shared reporting engine allows an authenticated report author to embed javascript: or vbscript: URLs in report navigation actions or HTML text box links. When another user views…
Opis źródłowy NVD · ENCVSS 8,9 · EPSS 0,2 % · rekomendacja wg zapisanej polityki
The MDJM Event Management plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.7.8.4. This is due to missing capability checks and nonce verification in the `MDJM_Permissions::set_permissions()` and `MDJM_Employee_Manager::init()` functions, combined…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,7 % · rekomendacja wg zapisanej polityki
Sharp before 0.35.4 bundles a vulnerable libheif dependency that allows attackers to achieve possible remote code execution on glibc-based Linux by supplying crafted images. Attackers can submit malicious AVIF/HEIF input to applications processing untrusted images with sharp, triggering libheif…
Opis źródłowy NVD · ENCVSS 8,9 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
The URL Image Importer plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in all versions up to, and including, 1.0.6. This is due to the plugin relying on a user-controlled Content-Type HTTP header to validate file uploads in the…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,69 % · rekomendacja wg zapisanej polityki
WeasyPrint helps web developers to create PDF documents. Prior to 70.0, the image-loading path in weasyprint/images.py passes fetched image bytes from HTML img URLs, CSS image values, SVG image references, and data URIs to Pillow's generic image dispatcher without excluding EPS or PostScript…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,69 % · rekomendacja wg zapisanej polityki
The WPeMatico RSS Feed Fetcher plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the wpematico_import_settings function in all versions up to, and including, 2.8.24. This makes it possible for…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,69 % · rekomendacja wg zapisanej polityki
In Progress® Telerik® Report Server prior to version 12.2.26.1007, a stored cross-site scripting vulnerability in the shared reporting engine allows an authenticated report author to embed javascript: or vbscript: URLs in report navigation actions or HTML text box links. When another user views…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,9 · EPSS 0,2 % · rekomendacja wg zapisanej polityki
The MDJM Event Management plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.7.8.4. This is due to missing capability checks and nonce verification in the `MDJM_Permissions::set_permissions()` and `MDJM_Employee_Manager::init()` functions, combined…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,7 % · rekomendacja wg zapisanej polityki
Sharp before 0.35.4 bundles a vulnerable libheif dependency that allows attackers to achieve possible remote code execution on glibc-based Linux by supplying crafted images. Attackers can submit malicious AVIF/HEIF input to applications processing untrusted images with sharp, triggering libheif…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,9 · EPSS 0,19 % · rekomendacja wg zapisanej polityki
The URL Image Importer plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in all versions up to, and including, 1.0.6. This is due to the plugin relying on a user-controlled Content-Type HTTP header to validate file uploads in the…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,69 % · rekomendacja wg zapisanej polityki
WeasyPrint helps web developers to create PDF documents. Prior to 70.0, the image-loading path in weasyprint/images.py passes fetched image bytes from HTML img URLs, CSS image values, SVG image references, and data URIs to Pillow's generic image dispatcher without excluding EPS or PostScript…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,69 % · rekomendacja wg zapisanej polityki
The WPeMatico RSS Feed Fetcher plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the wpematico_import_settings function in all versions up to, and including, 2.8.24. This makes it possible for…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,69 % · rekomendacja wg zapisanej polityki