Rezultati pretraživanja za 'Od datuma: 01.11.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-104974 | 8.1 | Plane is an open-source project management tool. Prior to 1.4.0, a user whose account has been deactivated by setting is_active=False can still log in with existing credentials. Successful authentication silently changes is_active back to True, react | 2026-10-05 20:17:10 | 2026-10-05 18:17:32 |
| CVE-2026-104714 | - | Concurrent execution using shared resource with improper synchronization ('race condition') vulnerability in Apache Struts. Where a localized message formats a date or time argument, the formatter retained for that message by the application-wide tex | 2026-10-05 20:17:09 | 2026-10-05 19:17:14 |
| CVE-2026-104713 | - | Allocation of resources without limits or throttling vulnerability in the Apache Struts REST plugin. A request body is read into memory without any bound on how much will be accepted, so a single request can cause the server to allocate memory in pro | 2026-10-05 20:17:09 | 2026-10-05 19:17:14 |
| CVE-2026-104968 | - | Plane is an open-source project management tool. Prior to 1.4.0, GET /api/workspaces/{slug}/entity-search/?query_type=user_mention returns workspace-member display names, UUIDs, and avatar URLs to any authenticated user who knows the workspace slug, | 2026-10-05 20:17:09 | 2026-10-05 17:17:12 |
| CVE-2026-104964 | 6.8 | Plane is an open-source project management tool. Prior to 1.4.0, Plane's project update endpoint authorizes the caller against the workspace slug in the request URL but loads the target project globally by UUID without binding it to that workspace. A | 2026-10-05 20:17:09 | 2026-10-05 17:17:11 |
| CVE-2026-104956 | 5.3 | Plane is an open-source project management tool. Prior to 1.4.0, the unauthenticated public issues endpoint accepts group_by and sub_group_by query parameters and passes them without an allowlist to grouped paginators, where they are used as ORM fiel | 2026-10-05 20:17:09 | 2026-10-05 17:17:11 |
| CVE-2026-104891 | 7.5 | mppx-condition-gate provides conditional free-access wrappers for mppx payment methods. Prior to @insumermodel/mppx-condition-gate 3.0.0 and @insumermodel/mppx-token-gate 1.0.4, the packages read a wallet address from the client-supplied credential.s | 2026-10-05 20:17:09 | 2026-10-05 16:17:06 |
| CVE-2026-104851 | 8.8 | fsspec is a specification and Python implementation framework for filesystem interfaces. From 0.9.0 until 2026.6.0, fsspec.implementations.reference.ReferenceFileSystem evaluates fields from Kerchunk reference JSON documents through unrestricted jinj | 2026-10-05 20:17:09 | 2026-10-02 17:17:03 |
| CVE-2026-104030 | 5.5 | A flaw was found in sssd. This vulnerability allows a local user to cause a Denial of Service (DoS) by submitting a specially crafted passkey authentication token that lacks null terminators. The authentication service reads past the end of the provi | 2026-10-05 20:17:08 | 2026-10-05 20:17:08 |
| CVE-2026-104029 | 3.3 | A flaw was found in SSSD. A local attacker can exploit this vulnerability by sending a specially crafted request to the autofs responder UNIX socket. Due to improper buffer offset calculation during request parsing, the service performs an out-of-bou | 2026-10-05 20:17:08 | 2026-10-05 20:17:08 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/12926
Zapisa po stranici: