| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-82509 | 7.4 | V programming language standard library net.http through version 0.5.2 prior to commit 4077484 contains a TLS certificate validation bypass vulnerability that allows on-path attackers to intercept HTTPS traffic by exploiting the default false value o | 2026-11-14 03:17:31 | 2026-11-10 14:17:36 |
| CVE-2026-96769 | 5.3 | The Extend B2B - Companies and Users Management for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.1.4 via the register_company_api. This makes it possible for unauthenticated | 2026-11-14 03:17:31 | 2026-11-10 05:18:17 |
| CVE-2026-79914 | 4.3 | NocoBase is an AI-powered no-code/low-code platform for building business applications and enterprise solutions. Versions 2.1.0 through 2.1.14 contain a server-side request forgery vulnerability in the customRequests:send endpoint. A low-privileged a | 2026-11-14 03:17:30 | 2026-11-10 18:17:48 |
| CVE-2026-63653 | 5.0 | Group-Office is an enterprise customer relationship management and groupware tool. Prior to version 26.0.37, go/modules/community/bookmarks/controller/Bookmark.php's description() action takes a fully attacker-controlled url parameter and passes it, | 2026-11-14 03:17:30 | 2026-11-10 17:17:46 |
| CVE-2026-63644 | 7.5 | bird-lg-go is a BIRD looking glass in Go. Prior to version 1.4.7, unsanitized input path enables arbitrary local file read, allowing an unauthenticated remote attacker to read sensitive files such as /etc/shadow and /root/.bash_history. This issue ha | 2026-11-14 03:17:30 | 2026-11-09 22:18:53 |
| CVE-2026-63496 | 7.8 | augment-vir is a collection of helper functions. Prior to version 31.73.5, the grep() function exported by @augment-vir/node inserts caller-controlled search patterns directly into a double-quoted shell command string without sanitization (grep.ts:31 | 2026-11-14 03:17:30 | 2026-11-09 22:18:53 |
| CVE-2026-126085 | 5.3 | Active Storage makes it simple to upload and reference files in cloud services and attach those files to Active Record objects. Prior to 8.1.4.1 and 8.0.5.2, ActiveStorage::Service::GCSService#url_for_direct_upload does not bind the declared content | 2026-11-14 03:17:29 | 2026-11-10 22:18:31 |
| CVE-2026-126081 | 7.5 | Action Pack is a framework for handling and responding to web requests. Prior to 8.1.4.1 and 8.0.5.2, ActionController::Parameters#each_key delegates to the internal ActiveSupport::HashWithIndifferentAccess that holds the request parameters, so when | 2026-11-14 03:17:29 | 2026-11-10 21:19:26 |
| CVE-2026-61547 | 9.8 | rabbitmq-c is a C-language AMQP client library for RabbitMQ. Prior to version 0.17.0, a heap buffer overflow exists in rabbitmq-c when the public amqp_send_frame() API is used to serialize an oversized AMQP_FRAME_BODY. The issue occurs because amqp_f | 2026-11-14 03:17:29 | 2026-11-10 17:17:45 |
| CVE-2026-60044 | 7.5 | The backups created by the application use a weak static password allowing an unauthenticated remote attacker to access their content. This can result in a total loss of confidentiality. | 2026-11-14 03:17:29 | 2026-11-10 09:17:24 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/40236
Zapisa po stranici: