Rezultati pretraživanja za 'Od datuma: 01.11.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-27874 | - | : Use of Hard-coded Credentials vulnerability in Johnson Controls EasyIO FS32 allows : Exploitation of Default or Hard-coded Credentials. This issue affects EasyIO FS32: before 3.0b63. | 2026-10-02 19:16:41 | 2026-10-01 21:17:20 |
| CVE-2026-104123 | 7.5 | A vulnerability was detected in SourceCodester Online Reviewer Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /reviewer_0/admins/assessments/activities/btn_functions.php?action=activity. The manipulation | 2026-10-02 19:16:40 | 2026-10-02 03:16:39 |
| CVE-2026-104356 | 5.9 | PictShare before version 3.7.1 contains a weak randomness vulnerability where the getRandomString() function uses the non-cryptographic rand() PRNG to generate the delete_code authorization token in src/inc/core.php. Attackers can predict or infer th | 2026-10-02 19:16:40 | 2026-10-01 22:17:00 |
| CVE-2026-104002 | 5.3 | A fail-open error handling issue within the data masking utility of Powertools for AWS Lambda (Python) might allow actors to read sensitive field values that the application intended to mask. To remediate this issue, users should upgrade to versi | 2026-10-02 19:16:40 | 2026-10-01 22:17:00 |
| CVE-2026-104020 | 7.5 | Uncontrolled recursion in the Ion reader in Amazon Ion Python before 0.15.0 might allow a remote unauthenticated actor to crash the application using the library, resulting in a denial of service, via a crafted, deeply nested Ion value. To remedia | 2026-10-02 19:16:40 | 2026-10-01 21:17:18 |
| CVE-2026-102795 | 9.3 | Improper Access Control vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fixes the issue | 2026-10-02 19:16:39 | 2026-10-02 18:16:59 |
| CVE-2026-102626 | - | An authenticated LimeSurvey Community Edition 7.4.0 user with the global Surveys: create permission can store a JavaScript-breaking value in the date_min attribute of a Date/Time question. When another user renders the affected question, LimeSurvey i | 2026-10-02 19:16:39 | 2026-10-02 18:16:59 |
| CVE-2026-67289 | 9.8 | FreeRDP before 3.29.0 (affected versions <= 3.28.0) does not validate CRLF and control characters in the server-controlled RDP redirection TargetNetAddress field. This value is copied into the client's ServerHostname and, when the client connects thr | 2026-10-02 19:12:56 | 2026-08-01 13:16:57 |
| CVE-2026-86326 | - | An improper verification of cryptographic signature vulnerability exists in protocol gateways because the device does not properly verify the cryptographic authenticity of firmware images before installation. An attacker with high privileges and acce | 2026-10-02 19:10:09 | 2026-10-02 11:17:36 |
| CVE-2026-86325 | - | A stack-based buffer overflow vulnerability exists in protocol gateways' account management interface. The vulnerability is caused by insufficient length validation of the `account_name` parameter when processing account management requests. An attac | 2026-10-02 19:10:09 | 2026-10-02 11:17:36 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/12764
Zapisa po stranici: