| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-129359 | 7.5 | A security flaw has been discovered in Linux Foundation Magma up to 1.9.0. The affected element is an unknown function of the file orc8r/lib/go/registry/interceptors.go. Performing a manipulation results in hard-coded credentials. The attack can be i | 2026-11-15 03:16:52 | 2026-11-15 03:16:51 |
| CVE-2026-129358 | 3.3 | A vulnerability was identified in Linux Foundation Magma up to 1.9.0. Impacted is the function handleReact of the file nms/server/main/routes.ts of the component NMS. Such manipulation leads to cross site scripting. It is possible to launch the attac | 2026-11-15 03:16:51 | 2026-11-15 03:16:51 |
| CVE-2026-129357 | 6.5 | A vulnerability was determined in Linux Foundation Magma up to 1.9.0. This issue affects the function hostOrgMiddleware of the file nms/server/host/middleware.ts of the component Host Middleware. This manipulation of the argument role causes missing | 2026-11-15 03:16:50 | 2026-11-15 03:16:46 |
| CVE-2026-129466 | 4.3 | Zr.Admin.NET commit 1845017 through commit eb9228a contains a missing authorization vulnerability in TasksController.Get that allows any logged-in user to read scheduled task details without the monitor:job permission. Attackers can obtain task ids f | 2026-11-15 02:17:22 | 2026-11-15 02:17:21 |
| CVE-2026-129465 | 8.8 | Zr.Admin.NET commit af07ffc through commit eb9228a contains an insecure direct object reference vulnerability in SysProfileController.UpdateProfile that allows any authenticated user to modify other accounts via UserId. Attackers can set the administ | 2026-11-15 02:17:21 | 2026-11-15 02:17:21 |
| CVE-2026-129464 | 8.8 | Zr.Admin.NET commit 0ee1ab8 through commit eb9228a contains a path traversal vulnerability that allows any logged-in user to read arbitrary server files via the path parameter of /common/DownloadFile. Attackers can supply absolute paths or ../ sequen | 2026-11-15 02:17:21 | 2026-11-15 02:17:21 |
| CVE-2026-129455 | 5.4 | Zr.Admin.NET commit e6ceaf4 through commit eb9228a contains an insecure direct object reference vulnerability in FrontArticleController that allows authenticated users to change other users' article visibility and pin state. Attackers can send PUT /f | 2026-11-15 02:17:21 | 2026-11-15 02:17:21 |
| CVE-2026-129454 | 6.5 | Zr.Admin.NET commit 85cff6a through commit eb9228a contains an insecure direct object reference vulnerability in GET /workflow/instance/{instanceId} that lets logged-in users view others' workflow instances. Authenticated low-privilege attackers can | 2026-11-15 02:17:21 | 2026-11-15 02:17:21 |
| CVE-2026-129356 | 4.6 | A vulnerability was found in vllm-project vllm 0.30.0/0.31.0. This vulnerability affects unknown code of the file single_type_kv_cache_manager.py of the component Common Prefix Handler. The manipulation results in race condition. The attack may be pe | 2026-11-15 02:17:21 | 2026-11-15 02:17:20 |
| CVE-2026-129355 | 6.4 | A vulnerability has been found in sigoden dufs up to 0.46.0. This affects an unknown part of the file src/server.rs of the component WebDAV COPY Operation Handler. The manipulation leads to incorrect authorization. The attack is possible to be carrie | 2026-11-15 01:18:03 | 2026-11-15 01:18:03 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/40249
Zapisa po stranici: