Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
A zero-click remote code execution (RCE) vulnerability in the /Terminal/Notification.hs component of SimpleX Chat before v6.5 allows attackers to execute arbitrary commands in the context of the application without user interaction via sending a crafted payload in a text message.
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 1,08 % · rekomendacja wg zapisanej polityki
The Admin and Site Enhancements (ASE) Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 8.9.0 via the recursive_html function. This is due to the frontend save handler enforces only a publicly emitted nonce with no authentication check, CAPTCHA…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 1,07 % · rekomendacja wg zapisanej polityki
Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user…
Opis źródłowy NVD · ENCVSS 9,9 · EPSS 0,57 % · rekomendacja wg zapisanej polityki
An issue in EcoOnline EHS (com.airsweb.v10) application for Android, version 0.2.499 allows a remote attacker to obtain sensitive information and execute arbitrary code via the AndroidManifest.xml component
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 1,07 % · rekomendacja wg zapisanej polityki
The Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the set_featured_image_from_external_url() function in all versions up to, and including, 1.1.32. This makes it…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 1,07 % · rekomendacja wg zapisanej polityki
A zero-click remote code execution (RCE) vulnerability in the /Terminal/Notification.hs component of SimpleX Chat before v6.5 allows attackers to execute arbitrary commands in the context of the application without user interaction via sending a crafted payload in a text message.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 1,08 % · rekomendacja wg zapisanej polityki
The Admin and Site Enhancements (ASE) Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 8.9.0 via the recursive_html function. This is due to the frontend save handler enforces only a publicly emitted nonce with no authentication check, CAPTCHA…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 1,07 % · rekomendacja wg zapisanej polityki
Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,9 · EPSS 0,57 % · rekomendacja wg zapisanej polityki
An issue in EcoOnline EHS (com.airsweb.v10) application for Android, version 0.2.499 allows a remote attacker to obtain sensitive information and execute arbitrary code via the AndroidManifest.xml component
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 1,07 % · rekomendacja wg zapisanej polityki
The Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the set_featured_image_from_external_url() function in all versions up to, and including, 1.1.32. This makes it…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 1,07 % · rekomendacja wg zapisanej polityki