Rezultati pretraživanja za 'Od datuma: 01.11.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-112294 | 4.3 | FlyCms through commit edfdf724 contains a missing authorization vulnerability in ActionService.counter() that allows authenticated users to modify other users' content rows because checkRowOwner never verifies ownership. Any registered user can send | 2026-10-27 11:17:27 | 2026-10-19 14:17:08 |
| CVE-2026-16872 | 9.8 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow. | 2026-10-27 11:10:00 | 2026-08-19 20:17:08 |
| CVE-2026-46343 | 7.2 | Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.0.0 until 4.14.6 and 5.0.0-beta2, WazuhCommon.end_receiving_file() in framework/wazuh/core/cluster/common.py allows a cluster-authenticated node to d | 2026-10-27 11:10:00 | 2026-08-19 16:17:11 |
| CVE-2026-44254 | 5.3 | Wazuh is a free and open source platform used for threat prevention, detection, and response. From 1.0.0 until 4.14.6 and 5.0.0-beta2, HandleSecureMessage() in src/remoted/secure.c passes a pointer inside its stack buffer to ReadSecMSG(), and src/os_ | 2026-10-27 11:10:00 | 2026-08-19 16:17:10 |
| CVE-2026-44253 | 4.9 | Wazuh is a free and open source platform used for threat prevention, detection, and response. From 3.9.0 until 4.14.5 and 5.0.0-beta2, the Wazuh cluster protocol in framework/wazuh/core/cluster/common.py allows an authenticated cluster node to exhaus | 2026-10-27 11:10:00 | 2026-08-19 16:17:10 |
| CVE-2026-44252 | 8.8 | Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.0.0 until 4.14.5, Wazuh Manager allows a low-privilege read-only API user with manager:read permission to retrieve the cluster key from the element i | 2026-10-27 11:10:00 | 2026-08-19 16:17:10 |
| CVE-2026-18430 | - | HumHub 1.18.4 contains a stored cross-site scripting vulnerability in the comment-deletion notification flow. A Space administrator can delete another user's comment, choose to notify the original author, and place HTML/JavaScript in the deletion rea | 2026-10-27 11:10:00 | 2026-08-19 16:17:06 |
| CVE-2026-16819 | 7.7 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service and compromise data integrity due to a time-of-check time-of-use race condition. | 2026-10-27 11:10:00 | 2026-08-19 16:17:06 |
| CVE-2026-76614 | 4.3 | OpenEMR before 8.3.0 contains a path traversal vulnerability in the EDI archive restore function. The archrestore_sel POST parameter is passed to the archive restore handler without sanitization for path traversal sequences. The handler checks whethe | 2026-10-27 11:10:00 | 2026-08-19 15:18:11 |
| CVE-2026-71960 | 9.1 | Cudy WR3000 2.0 running firmware before 2.5.24 contains a hard-coded JWT HMAC signing secret vulnerability in the Mosquitto MQTT broker's authentication plugin that allows unauthenticated attackers to forge valid JWT tokens by extracting the secret f | 2026-10-27 11:10:00 | 2026-08-19 15:18:01 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/13200
Zapisa po stranici: