Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
The WPCOM Member plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.7.27 via the `uuid` and `code` parameters of the social-login callback handler registered on the `init` hook. The vulnerability exists because the `login` function's social-login…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
A vulnerability in the MPLS Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Net::OAuth versions before 0.33 for Perl allow the sender to choose the signature algorithm in verify.
verify resolves the signature method class from the signature_method parameter of the incoming message. signature_method is required on every request, so the algorithm used to check a signature…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have an insecure default cryptographic key. The JWT signing secret defaults to the hardcoded literal `"dev-secret-change-me"` when `PLATFORM_JWT_SECRET` is unset. A safety check exists but…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy.
Authentication bypass occurs when the URL ends with Authentication with certain function calls. This bypass allows assigning arbitrary permission to any user existing in…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
There is a SQL injection vulnerability in Esri ArcGIS Server versions 12.1 and earlier on Windows and Linux that may allow a remote attacker with privileges to access the service (which could, depending on the service being configured in a non-default access configuration “public”, include an…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the guest cart persistent meta_value in all versions up to, and including, 10.8.0 due to insufficient escaping on user supplied data and lack of sufficient preparation on the existing SQL query in the…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
HCL BigFix Service Management is affected by an Improper Authentication validation vulnerability related to inadequate account lockouts, which could allow an unauthenticated attacker to execute sustained brute-force attacks against the login interface, resulting in unauthorized system access.
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
seg6: separate dst_cache for input and output paths in seg6 lwtunnel
The seg6 lwtunnel uses a single dst_cache per encap route, shared
between seg6_input_core() and seg6_output_core(). These two paths
can perform the post-encap…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,44 % · rekomendacja wg zapisanej polityki
The Ultimate Multisite WordPress plugin before 2.17.0 does not require authentication before a logged-out checkout is linked to, and logged in as, an existing WordPress account matching the submitted email address, and its duplicate-account check normalizes that address differently from the…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,44 % · rekomendacja wg zapisanej polityki
Invalid pointer in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,44 % · rekomendacja wg zapisanej polityki
CVSS
9,8
EPSS
0,44 %
Poprawka
Status poprawki nieustalony
Publikacja
Aktualizacja NVD
Podatności: opis, rekomendacja, CVSS, EPSS i daty źródłowe. Rekomendacja nie potwierdza podatności własnego zasobu.
The WPCOM Member plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.7.27 via the `uuid` and `code` parameters of the social-login callback handler registered on the `init` hook. The vulnerability exists because the `login` function's social-login…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
A vulnerability in the MPLS Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
Net::OAuth versions before 0.33 for Perl allow the sender to choose the signature algorithm in verify.
verify resolves the signature method class from the signature_method parameter of the incoming message. signature_method is required on every request, so the algorithm used to check a signature…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have an insecure default cryptographic key. The JWT signing secret defaults to the hardcoded literal `"dev-secret-change-me"` when `PLATFORM_JWT_SECRET` is unset. A safety check exists but…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy.
Authentication bypass occurs when the URL ends with Authentication with certain function calls. This bypass allows assigning arbitrary permission to any user existing in…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
There is a SQL injection vulnerability in Esri ArcGIS Server versions 12.1 and earlier on Windows and Linux that may allow a remote attacker with privileges to access the service (which could, depending on the service being configured in a non-default access configuration “public”, include an…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the guest cart persistent meta_value in all versions up to, and including, 10.8.0 due to insufficient escaping on user supplied data and lack of sufficient preparation on the existing SQL query in the…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
HCL BigFix Service Management is affected by an Improper Authentication validation vulnerability related to inadequate account lockouts, which could allow an unauthenticated attacker to execute sustained brute-force attacks against the login interface, resulting in unauthorized system access.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,45 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
seg6: separate dst_cache for input and output paths in seg6 lwtunnel
The seg6 lwtunnel uses a single dst_cache per encap route, shared
between seg6_input_core() and seg6_output_core(). These two paths
can perform the post-encap…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,44 % · rekomendacja wg zapisanej polityki
The Ultimate Multisite WordPress plugin before 2.17.0 does not require authentication before a logged-out checkout is linked to, and logged in as, an existing WordPress account matching the submitted email address, and its duplicate-account check normalizes that address differently from the…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,44 % · rekomendacja wg zapisanej polityki
Invalid pointer in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,44 % · rekomendacja wg zapisanej polityki
9,8
0,44 %
Publikacja
Aktualizacja NVD
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.