Rezultati pretraživanja za 'Od datuma: 09.09.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-105278 | 9.8 | The published Docker image for openPDC includes a fixed administrative credential with no forced change on first use. An attacker with network access to the management interface can authenticate using this credential and gain full administrative cont | 2026-10-11 17:17:01 | 2026-10-09 15:17:08 |
| CVE-2026-105281 | 7.5 | The internal data publisher on openPDC accepts network connections without authentication in its default configuration. An unauthenticated network attacker can connect to this interface and retrieve the complete device and measurement topology of the | 2026-10-11 17:17:01 | 2026-10-09 14:17:11 |
| CVE-2026-106208 | 6.1 | Missing authorization in API in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted Chrome extension. (Chromium security severity: Medium) | 2026-10-11 17:17:01 | 2026-10-06 19:17:47 |
| CVE-2026-104803 | 9.8 | The WPCOM Member plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.7.27 via the `uuid` and `code` parameters of the social-login callback handler registered on the `init` hook. The vulnerability exist | 2026-10-11 17:17:00 | 2026-10-10 08:17:04 |
| CVE-2026-104759 | 8.1 | The WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) plugin for WordPress is vulnerable to Authentication Bypass via OIDC Nonce Replay in all versions up to, and including, 44.1 This is due to `Id_Token_Service_Deprecated::process | 2026-10-11 17:17:00 | 2026-10-10 08:17:04 |
| CVE-2026-104801 | 9.1 | The PPOM – Product Addons & Custom Fields for WooCommerce plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the rename_files function in all versions up to, and including, 34.0.10 This makes it | 2026-10-11 17:17:00 | 2026-10-10 07:16:40 |
| CVE-2026-104766 | 8.8 | The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 5.7.3. This is due to the `OsSettingsController::update()` handler itera | 2026-10-11 17:17:00 | 2026-10-10 06:16:40 |
| CVE-2026-104763 | 4.9 | The Post Export Import with Media plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.17.1 via the 'file_path' parameter parameter. This makes it possible for authenticated attackers, with administrator-l | 2026-10-11 17:17:00 | 2026-10-10 06:16:39 |
| CVE-2026-104742 | 3.1 | The AI Puffer – Chat. Create. Automate. (formerly AI Power) plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.4.89. This is due to the plugin not properly verifying that a user is authorized to perform | 2026-10-11 17:17:00 | 2026-10-10 06:16:39 |
| CVE-2026-104797 | 8.1 | The Advanced Form Integration — Connect Forms to 300+ Apps plugin for WordPress is vulnerable to Authentication Bypass via Unverified Password Change in all versions up to, and including, 2.9.0 The `adfoin_ultimatememberac_send_data` function, which | 2026-10-11 17:17:00 | 2026-10-10 04:18:08 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/13732
Zapisa po stranici: