Bu hafta sömürülenler

This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira…

Kritikatlassian bitbucket data centerCVSS 9.3

Cisco Secure Email Gateway Arbitrary File Write Vulnerability

Kritikcisco asyncosCVSS 9.8

Ahsay AhsayCBS Replication Receiver UpdateReceivers.do os command injection

Kritikahsay cloud backup suiteCVSS 9.3

PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface

Yüksekpaloaltonetworks pan-osCVSS 8.6

Ahsay AhsayCBS API ApiStructsAction.java checkSysPwd improper authentication

Ortaahsay cloud backup suiteCVSS 5.5

Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute…

Yüksekivanti connect secureCVSS 8.6

Windows Shell Security Feature Bypass Vulnerability

Yüksekmicrosoft outlook webCVSS 8.8

The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr…

KritikproftpdCVSS 10.0

Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled,…

Yüksekapache strutsCVSS 8.1

named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service…

Yüksekisc bindCVSS 7.5

Directory traversal with remote code execution can occur in /upload in ONLYOFFICE Document Server before 5.6.3, when…

Kritikonlyoffice document serverCVSS 9.8

Strapi through 4.5.5 allows attackers (with access to the admin panel) to discover sensitive user details by…

OrtastrapiCVSS 4.9

Grafana SQL Expressions allow for remote code execution

KritikgrafanaCVSS 9.4

Langflow eval_custom_component_code Eval Injection Remote Code Execution Vulnerability

KritiklangflowCVSS 9.8

Langflow code Code Injection Remote Code Execution Vulnerability

KritiklangflowCVSS 9.8

OpenCTI privilege escalation and unauthenticated access via default admin account

Kritikciteum openctiCVSS 9.8

Gitea Org-mode file disclosure and code execution

KritikgiteaCVSS 9.8

Selenium Server (Grid) before 4 allows CSRF because it permits non-JSON content types such as…

Yüksekselenium gridCVSS 8.8

Privilege Escalation in Progress Chef Automate

Kritikprogress software chef automateCVSS 10.0

GravitLauncher: Unauthenticated path traversal in LaunchServer FileServerHandler

Kritikgravitlauncher launcherCVSS 9.8

FOSSBilling: Improper API Role Validation (system) Enables Unauthenticated Access to Privileged Admin Functions

KritikfossbillingCVSS 10.0

vm2 3.10.1 through 3.11.6 Sandbox Escape via WebAssembly.compileStreaming

Kritikpatriksimek vm2CVSS 10.0

Integer Overflow or Wraparound in GitLab

KritikgitlabCVSS 10.0

A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended…

Kritiksonicwall sma1000CVSS 10.0

TypeBot: Unauthenticated SSRF via isolated-vm fetch in preview chat endpoint bypasses SSRF controls

Kritikbaptistearno typebot.ioCVSS 10.0

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment…

Kritikoracle peoplesoft enterprise peopletoolsCVSS 9.8EPSS +87 puan

WordPress WooCommerce plugin 9.8.0-11.1.2 - Shop Manager+ Privilege Escalation vulnerability

Yüksekautomattic woocommerceCVSS 7.2WooCommerce · 7.000.000+ kurulum

WordPress Polylang plugin <= 3.8.9 - PHP Object Injection vulnerability

Yüksekwp syntex polylangCVSS 7.2Polylang · 900.000+ kurulum

Click to Chat <= 4.44 - Unauthenticated Arbitrary Shortcode Execution via REQUEST_URI via {url} Placeholder

Kritikholithemes click to chat – holithemesCVSS 9.1Click to Chat – HoliThemes · 600.000+ kurulum

WordPress Forminator plugin <= 1.57.3 - Privilege Escalation vulnerability

Yüksekwpmu dev forminatorCVSS 8.2Forminator Forms – Contact Form, Payment Form & Custom Form Builder · 600.000+ kurulum

WordPress Forminator plugin <= 1.57.3 - Arbitrary Content Deletion vulnerability

Yüksekwpmu dev forminatorCVSS 7.5Forminator Forms – Contact Form, Payment Form & Custom Form Builder · 600.000+ kurulum

WordPress Forminator plugin <= 1.57.2 - Payment Bypass vulnerability

Yüksekwpmu dev forminatorCVSS 7.5Forminator Forms – Contact Form, Payment Form & Custom Form Builder · 600.000+ kurulum

WordPress Forminator plugin <= 1.57.3 - Cross Site Scripting (XSS) vulnerability

Yüksekwpmu dev forminatorCVSS 7.1Forminator Forms – Contact Form, Payment Form & Custom Form Builder · 600.000+ kurulum

Blocksy Companion <= 2.1.58 - Unauthenticated Privilege Escalation to 'role' Parameter

Kritikcreativethemeshq blocksy companionCVSS 9.1Blocksy Companion · 300.000+ kurulum