Rezultati pretraživanja za 'Od datuma: 20.07.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2025-71409 | 7.1 | Lack of authentication for Very High Frequency Data Link messages allows rogue ground stations to inject CPDLC messages leading to unexpected or misleading clearances and potential pilot confusion. This type of attack can be carried out remotely over | 2026-09-29 11:10:00 | 2026-08-07 19:17:33 |
| CVE-2025-63235 | 7.5 | In sol commit 373d848 (2024-12-12), the broker does not fully release resources when handling malformed or duplicate CONNECT packets. When clients send invalid CONNECT packets - either due to repeated attempts or failed authentication - the server ma | 2026-09-29 11:10:00 | 2026-08-07 19:17:33 |
| CVE-2025-6508 | 4.3 | The Swagger UI Try-out console within the API Publisher documentation allows an external Swagger API definition URL to be loaded, overriding the existing API definitions within the Publisher portal. By exploiting this vulnerability, malicious actors | 2026-09-29 11:10:00 | 2026-08-06 22:16:42 |
| CVE-2025-15674 | 2.7 | The Passster WordPress plugin before 4.3.7 does not restrict low-privilege users holding the edit_posts capability from reading globally password-protected content through the WordPress core REST API when global protection is enabled, allowing any Co | 2026-09-29 11:10:00 | 2026-08-06 22:16:41 |
| CVE-2025-14561 | 9.0 | In multi-tenant deployments, the Publisher REST APIs fail to enforce tenant isolation correctly. This allows a user in one tenant, possessing sufficient privileges to invoke these APIs, to perform operations that impact other tenants. The vulnerabil | 2026-09-29 11:10:00 | 2026-08-06 22:16:41 |
| CVE-2025-12317 | 5.0 | When internal roles are removed from a user within the WSO2 product, the system fails to invalidate any previously issued authentication tokens associated with that user. This vulnerability could allow users to retain their previous access privilege | 2026-09-29 11:10:00 | 2026-08-06 22:16:41 |
| CVE-2025-9878 | 6.4 | The PPWP – Password Protect WordPress | #1 Most-Reviewed Password Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ppwp' shortcode in all versions up to, and including, 1.9.21 due to insufficient input saniti | 2026-09-29 10:10:00 | 2026-08-25 03:16:54 |
| CVE-2025-26238 | 8.1 | In D-Link DI-8100G 17.12.20A1, the flag parameter in msp_info can be exploited to execute arbitrary code. | 2026-09-29 10:10:00 | 2026-08-24 19:16:35 |
| CVE-2025-26237 | 8.1 | D-Link DI-7001 MINI_5G 19.10.31A1 contains a code execution vulnerability in the flag parameter of msp_info, which can be exploited to run arbitrary commands. | 2026-09-29 10:10:00 | 2026-08-24 19:16:34 |
| CVE-2025-36940 | 8.8 | Use-After-Free vulnerability in a zircon kernel pager proxy (Fuchsia), which could lead to a Privilege Escalation from Userspace to Kernel (AP) | 2026-09-29 10:10:00 | 2026-08-24 17:17:21 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/13789
Zapisa po stranici: