Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
SQL injection in the NetBoard CRM demo platform; specifically, the vulnerable component is the ‘user-name’ POST parameter in the ‘/module/auth/recovery.php’ endpoint. The parameter is vulnerable to blind attacks based on Boolean, error, time-based and UNION techniques. Exploitation allows…
Opis źródłowy NVD · ENCVSS 10,0 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
A vulnerability was determined in UTT 进取 512W up to 3.1.7.7-171114. This impacts the function strcpy of the file /goform/formNatStaticMap of the component Endpoint. Executing manipulation of the argument NatBind can lead to buffer overflow. The attack can be launched remotely. The exploit has been…
Opis źródłowy NVD · ENCVSS 8,9 · EPSS 5,72 % · rekomendacja wg zapisanej polityki
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.10.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, Argo CD creates PostDelete resource hooks without applying the AppProject destination and resource authorization checks used during ordinary synchronization. The…
Opis źródłowy NVD · ENCVSS 9,9 · EPSS 0,72 % · rekomendacja wg zapisanej polityki
Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user…
Opis źródłowy NVD · ENCVSS 9,9 · EPSS 0,71 % · rekomendacja wg zapisanej polityki
A security vulnerability has been detected in Tenda AC23 16.03.07.52. Affected is the function saveParentControlInfo of the file /goform/saveParentControlInfo. Such manipulation of the argument Time leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 1,21 % · rekomendacja wg zapisanej polityki
Netgate pfSense CE 2.5.0 through 2.9.0 contains an OS command injection vulnerability in openvpn.learn-address.sh that allows authenticated VPN clients to execute commands as the unbound user. Attackers can embed shell metacharacters in the certificate common name or username, which is…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 6,21 % · rekomendacja wg zapisanej polityki
Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user…
Opis źródłowy NVD · ENCVSS 9,9 · EPSS 0,71 % · rekomendacja wg zapisanej polityki
Download of code without integrity check, inclusion of functionality from untrusted control sphere, and cleartext
transmission of sensitive information vulnerability in Ozols Grupa OZOLS
on Windows caused by an abandoned auto-update domain. Affected
component: the automatic update channel…
Opis źródłowy NVD · ENCVSS 10,0 · EPSS 0,21 % · rekomendacja wg zapisanej polityki
As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), has conducted a comprehensive internal security review. This review resulted in software hardening releases…
Opis źródłowy NVD · ENCVSS 10,0 · EPSS 0,2 % · rekomendacja wg zapisanej polityki
SQL injection in the NetBoard CRM demo platform; specifically, the vulnerable component is the ‘user-name’ POST parameter in the ‘/module/auth/recovery.php’ endpoint. The parameter is vulnerable to blind attacks based on Boolean, error, time-based and UNION techniques. Exploitation allows…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 10,0 · EPSS 0,23 % · rekomendacja wg zapisanej polityki
A vulnerability was determined in UTT 进取 512W up to 3.1.7.7-171114. This impacts the function strcpy of the file /goform/formNatStaticMap of the component Endpoint. Executing manipulation of the argument NatBind can lead to buffer overflow. The attack can be launched remotely. The exploit has been…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 8,9 · EPSS 5,72 % · rekomendacja wg zapisanej polityki
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.10.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, Argo CD creates PostDelete resource hooks without applying the AppProject destination and resource authorization checks used during ordinary synchronization. The…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,9 · EPSS 0,72 % · rekomendacja wg zapisanej polityki
Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,9 · EPSS 0,71 % · rekomendacja wg zapisanej polityki
A security vulnerability has been detected in Tenda AC23 16.03.07.52. Affected is the function saveParentControlInfo of the file /goform/saveParentControlInfo. Such manipulation of the argument Time leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been…
Opis źródłowy NVD · EN
Pilne działanie
CVSS 9,8 · EPSS 1,21 % · rekomendacja wg zapisanej polityki
Netgate pfSense CE 2.5.0 through 2.9.0 contains an OS command injection vulnerability in openvpn.learn-address.sh that allows authenticated VPN clients to execute commands as the unbound user. Attackers can embed shell metacharacters in the certificate common name or username, which is…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 6,21 % · rekomendacja wg zapisanej polityki
Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,9 · EPSS 0,71 % · rekomendacja wg zapisanej polityki
Download of code without integrity check, inclusion of functionality from untrusted control sphere, and cleartext
transmission of sensitive information vulnerability in Ozols Grupa OZOLS
on Windows caused by an abandoned auto-update domain. Affected
component: the automatic update channel…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 10,0 · EPSS 0,21 % · rekomendacja wg zapisanej polityki
As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), has conducted a comprehensive internal security review. This review resulted in software hardening releases…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 10,0 · EPSS 0,2 % · rekomendacja wg zapisanej polityki