Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Radiometrics VizAir is vulnerable to a lack of authentication mechanisms for critical functions, such as admin access and API requests. Attackers can modify configurations without authentication, potentially manipulating active runway settings and misleading air traffic control (ATC) and pilots.…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,75 % · rekomendacja wg zapisanej polityki
Buffer overflow vulnerabilities exist in an underlying service of AOS-8 that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port 8211. Successful exploitation could allow an attacker to…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
The 3D Product configurator for WooCommerce plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.16.2 via the 'xpv_image' parameter parameter. This is due to missing authentication and nonce checks on the wp_loaded handler combined with no…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
A vulnerability was identified in Tenda AC21 16.03.08.16. This vulnerability affects the function formSetPPTPServer of the file /goform/SetPptpServerCfg. The manipulation of the argument startIp leads to buffer overflow. Remote exploitation of the attack is possible. The exploit is publicly…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
The SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.10.2 via the handle_upload function. This is due to missing server-side file key allowlist and pre-sanitization…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
NFSv4: remove callback IDR entry on client allocation failure
nfs4_alloc_client() allocates an NFSv4.0 callback identifier before it
finishes setting up the client. If any later initialization step fails,
the error path frees…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
qede: fix out-of-bounds check for cqe->len_list[]
Move index check before element access.
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
Improper input validation vulnerability in Apache Camel Undertow component.
This issue affects Apache Camel: from 4.11.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0.
UndertowEndpoint defaulted its headerFilterStrategy field to the base HttpHeaderFilterStrategy and…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
Improper input validation vulnerability in Apache Camel Atmosphere Websocket component.
This issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0.
The camel-atmosphere-websocket producer selects which connected WebSocket peers a message…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
md/raid10: reset read_slot when reusing r10bio for discard
put_all_bios() always drops devs[i].bio, but it only drops
devs[i].repl_bio when r10_bio->read_slot < 0. If discard reuses an
r10bio that was previously used for a read,…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
xprtrdma: Fix bcall rep leak and unbounded peek
rpcrdma_is_bcall() decodes a reply's first words to decide whether
the frame is a backchannel call. Two issues in that decode path
let a short or malformed reply leak the receive…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
ntfs3: bound to_move in indx_insert_into_root before hdr_insert_head
indx_insert_into_root() promotes a full resident $INDEX_ROOT into
$INDEX_ALLOCATION and copies all non-last resident root entries into
a newly allocated…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
dm-verity: fix buffer overflow in FEC calculation
There's a buffer overflow in dm-verity-fec:
if (neras && *neras <= v->fec->roots)
fio->erasures[(*neras)++] = i;
This allows *neras to reach roots + 1 (the post-increment…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
MooreThreads torch_musa through all versions contains an unsafe deserialization vulnerability in torch_musa.utils.compare_tool. The compare_for_single_op() and nan_inf_track_for_single_op() functions use pickle.load() on user-controlled file paths without validation, allowing arbitrary code…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
Radiometrics VizAir is vulnerable to a lack of authentication mechanisms for critical functions, such as admin access and API requests. Attackers can modify configurations without authentication, potentially manipulating active runway settings and misleading air traffic control (ATC) and pilots.…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,75 % · rekomendacja wg zapisanej polityki
Buffer overflow vulnerabilities exist in an underlying service of AOS-8 that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port 8211. Successful exploitation could allow an attacker to…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
The 3D Product configurator for WooCommerce plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.16.2 via the 'xpv_image' parameter parameter. This is due to missing authentication and nonce checks on the wp_loaded handler combined with no…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
A vulnerability was identified in Tenda AC21 16.03.08.16. This vulnerability affects the function formSetPPTPServer of the file /goform/SetPptpServerCfg. The manipulation of the argument startIp leads to buffer overflow. Remote exploitation of the attack is possible. The exploit is publicly…
Opis źródłowy NVD · EN
Pilne działanie
CVSS 9,8 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
The SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.10.2 via the handle_upload function. This is due to missing server-side file key allowlist and pre-sanitization…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
NFSv4: remove callback IDR entry on client allocation failure
nfs4_alloc_client() allocates an NFSv4.0 callback identifier before it
finishes setting up the client. If any later initialization step fails,
the error path frees…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
qede: fix out-of-bounds check for cqe->len_list[]
Move index check before element access.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
Improper input validation vulnerability in Apache Camel Undertow component.
This issue affects Apache Camel: from 4.11.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0.
UndertowEndpoint defaulted its headerFilterStrategy field to the base HttpHeaderFilterStrategy and…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
Improper input validation vulnerability in Apache Camel Atmosphere Websocket component.
This issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0.
The camel-atmosphere-websocket producer selects which connected WebSocket peers a message…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
md/raid10: reset read_slot when reusing r10bio for discard
put_all_bios() always drops devs[i].bio, but it only drops
devs[i].repl_bio when r10_bio->read_slot < 0. If discard reuses an
r10bio that was previously used for a read,…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
xprtrdma: Fix bcall rep leak and unbounded peek
rpcrdma_is_bcall() decodes a reply's first words to decide whether
the frame is a backchannel call. Two issues in that decode path
let a short or malformed reply leak the receive…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
ntfs3: bound to_move in indx_insert_into_root before hdr_insert_head
indx_insert_into_root() promotes a full resident $INDEX_ROOT into
$INDEX_ALLOCATION and copies all non-last resident root entries into
a newly allocated…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
dm-verity: fix buffer overflow in FEC calculation
There's a buffer overflow in dm-verity-fec:
if (neras && *neras <= v->fec->roots)
fio->erasures[(*neras)++] = i;
This allows *neras to reach roots + 1 (the post-increment…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
MooreThreads torch_musa through all versions contains an unsafe deserialization vulnerability in torch_musa.utils.compare_tool. The compare_for_single_op() and nan_inf_track_for_single_op() functions use pickle.load() on user-controlled file paths without validation, allowing arbitrary code…
Opis źródłowy NVD · EN
Pilne działanie
CVSS 9,8 · EPSS 0,74 % · rekomendacja wg zapisanej polityki