Rezultati pretraživanja za 'Od datuma: 01.11.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-92119 | - | REST API Mass Assignment vulnerability in Apache Allura. This issue affects Apache Allura: through 1.21.0. Users are recommended to upgrade to version 1.22.0, which fixes the issue. | 2026-10-12 21:17:23 | 2026-10-12 21:17:23 |
| CVE-2026-92116 | - | OAuth1 callback validation vulnerability in Apache Allura. This issue affects Apache Allura: through 1.21.0. Users are recommended to upgrade to version 1.22.0, which fixes the issue. | 2026-10-12 21:17:23 | 2026-10-12 21:17:23 |
| CVE-2026-84360 | 8.1 | Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.1, the HTTP configuration mutation routes require RequireSecureSession, but /mcp and /mcp_message require only ordinary authentication before exposing nginx_config_add and nginx_ | 2026-10-12 21:17:22 | 2026-10-12 21:17:22 |
| CVE-2026-84321 | 5.4 | Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.1, GenerateShortToken creates standalone short-token records without a long Token value, but DeleteUserTokens invalidates cached entries only when the long Token field is nonempt | 2026-10-12 21:17:22 | 2026-10-12 21:17:22 |
| CVE-2026-84320 | 6.3 | Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.3, Nginx UI validates an automatic backup's storage_path, but AutoBackup.GetName returns a user-controlled name without rejecting path separators or parent-directory components, | 2026-10-12 21:17:22 | 2026-10-12 21:17:22 |
| CVE-2026-84319 | 8.3 | Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.1, the regular HTTP configuration API rejects restricted Nginx directives such as load_module, js_import, and js_content. However, the MCP configuration interface allows a second | 2026-10-12 21:17:22 | 2026-10-12 21:17:22 |
| CVE-2026-84318 | 8.8 | Nginx UI is a web user interface for the Nginx web server. From 2.0.0-rc.6 until 2.4.1, the MCP tool nginx_config_add writes nginx configuration files to disk and triggers an nginx reload without calling config.ValidateConfigFile. The identical flow | 2026-10-12 21:17:22 | 2026-10-12 21:17:22 |
| CVE-2026-84317 | 8.8 | Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.1, internal/config/validation.go (ValidateConfigFile) is a security control that blocks dangerous nginx directives — js_*, perl_*, load_module of the njs/perl modules, and user r | 2026-10-12 21:17:22 | 2026-10-12 21:17:22 |
| CVE-2026-84316 | 8.8 | Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.1, config.ValidateConfigDirectives splits configuration by newline and checks only the first directive token on each line even though Nginx permits multiple semicolon-separated d | 2026-10-12 21:17:22 | 2026-10-12 21:17:22 |
| CVE-2026-84315 | 8.3 | Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.1, Nginx UI does not apply RequireSecureSession to multiple authenticated mutation routes even though OTP-enabled users are expected to present a fresh X-Secure-Session-ID for se | 2026-10-12 21:17:21 | 2026-10-12 21:17:21 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/13200
Zapisa po stranici: