| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-97019 | 7.2 | The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'headline-*' Shortcode Attribute in all versions up to, and including, 1.1.17 due to insufficient input sanitization and output escaping. | 2026-10-28 03:17:16 | 2026-10-28 03:17:16 |
| CVE-2026-84999 | 9.8 | The Pie Register Premium plugin for WordPress is vulnerable to Unrestricted File Type Upload in all versions up to, and including, 3.8.4.0 via the piereg_file_upload function. This is due to the plugin performing file type validation via wp_check_fil | 2026-10-28 03:17:16 | 2026-10-28 03:17:16 |
| CVE-2026-76527 | - | As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerab | 2026-10-28 03:17:16 | 2026-10-21 23:17:29 |
| CVE-2026-76406 | 5.9 | In Splunk SOAR versions below 8.7.0, an unauthenticated user with access to encrypted credential data from an affected Splunk SOAR instance could submit Basic authentication data to the Representational State Transfer (REST) API to expose and decrypt | 2026-10-28 03:17:15 | 2026-10-21 23:17:29 |
| CVE-2026-76305 | 6.5 | In Splunk SOAR versions below 8.7.0, an authenticated user who does not hold a role with permission to view apps could download an archive of an installed app. This could expose all data in the app archive, including proprietary source code and sensi | 2026-10-28 03:17:15 | 2026-10-21 23:17:28 |
| CVE-2026-76301 | 9.8 | As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerab | 2026-10-28 03:17:15 | 2026-10-21 23:17:28 |
| CVE-2026-118384 | 6.1 | GNU mtools through 4.0.49 has an out-of-bounds write in parse_vses in vfat.c. | 2026-10-28 03:17:14 | 2026-10-28 03:17:14 |
| CVE-2026-118378 | 7.8 | Tabularis before 0.28.0 contains an SQL injection vulnerability in its SQLite driver that allows MCP clients to execute stacked statements by supplying a crafted table_name to the describe_table tool. Attackers, including AI agents steered by untrust | 2026-10-28 03:17:14 | 2026-10-28 03:17:14 |
| CVE-2026-118377 | 7.5 | mews/pos through 2.0.0 contains an insufficient verification of data authenticity vulnerability that allows unauthenticated attackers to forge payment results by submitting unverified callbacks. GarantiPos, PayForPos and InterPos 3D Pay and 3D Host h | 2026-10-28 03:17:14 | 2026-10-28 03:17:14 |
| CVE-2026-118376 | 5.3 | WeKnora before 0.8.2 contains a server-side request forgery vulnerability in isRestrictedIP() that misclassifies NAT64-prefixed IPv6 addresses as public. Authenticated attackers can supply URLs resolving to NAT64 encodings of internal addresses via w | 2026-10-28 03:17:14 | 2026-10-28 03:17:14 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39679
Zapisa po stranici: