Rezultati pretraživanja za 'Od datuma: 01.11.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-58496 | 4.3 | Thor Vector Graphics (ThorVG) is a production-ready vector graphics engine. Prior to 1.0.7, the `SFNT/TTF` font loader's `SfntLoader::gen` function in `tvgSfntLoader.cpp` reads `data[0] through data[3]` to identify the font type without first checkin | 2026-10-27 23:17:06 | 2026-10-27 23:17:06 |
| CVE-2026-58257 | 7.2 | GRR is a resource management and reservation application. Prior to the advisory-reported fixed version 4.5.0, the database restoration feature fails to enforce or validate file paths. A user with administrator privileges can manipulate the input to r | 2026-10-27 23:17:06 | 2026-10-27 23:17:06 |
| CVE-2026-58256 | 9.1 | GRR is a resource management and reservation application. Prior to the advisory-reported fixed version 4.5.0, an administrator can inject malicious PHP through LDAP connector configuration parameters such as `ldap_filter`, poisoning `/personnalisatio | 2026-10-27 23:17:06 | 2026-10-27 23:17:06 |
| CVE-2026-58255 | 8.8 | Cronicle is a multi-server task scheduler and runner, with a web based front-end UI. Prior to 0.9.121, a non-administrator user or scoped API key with `create_events` and `run_events` privileges can inject top-level `uid` and `gid` fields through `/a | 2026-10-27 23:17:05 | 2026-10-27 23:17:05 |
| CVE-2026-50571 | 5.7 | WebSub is a W3C recommendation produced by the Social Web Working Group. In recommendation REC-websub-20180123, the intent-verification protocol requires a subscriber to echo the `hub.challenge` value, also exposed as `hub_challenge` by some framewor | 2026-10-27 23:17:05 | 2026-10-27 23:17:05 |
| CVE-2026-22063 | - | The private keys of eight eMudhra intermediate CA certificates have been compromised. eMudhra revoked the eight affected intermediate certificates on October 18, 2026. While this is not a software vulnerability, CVE-2026-22063 has been assigned to tr | 2026-10-27 23:17:05 | 2026-10-27 23:17:05 |
| CVE-2026-18326 | - | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-10-27 23:17:05 | 2026-10-27 23:17:05 |
| CVE-2026-118357 | - | Use after free in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) | 2026-10-27 23:17:04 | 2026-10-27 23:17:04 |
| CVE-2026-118356 | - | Use after free in WTF in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) | 2026-10-27 23:17:04 | 2026-10-27 23:17:04 |
| CVE-2026-118354 | - | Improper input validation in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) | 2026-10-27 23:17:04 | 2026-10-27 23:17:04 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/13335
Zapisa po stranici: