Rezultati pretraživanja za 'Od datuma: 01.11.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-55252 | - | OpenRun is an open-source, self-hosted GitOps platform for deploying web apps and internal tools to Docker or Kubernetes. Prior to version 0.17.7, the restrictions on redirect URLs in openrun can be bypassed by attackers, leading to open redirect att | 2026-10-02 18:47:49 | 2026-10-01 20:17:26 |
| CVE-2026-54049 | 8.7 | Sakai is a Collaboration and Learning Environment (CLE). From versions 23.0 to before 23.5, and versions 25.0 to before 25.3, the Sakai Conversations tool stores topic and post messages without HTML sanitization, and the frontend renders them using L | 2026-10-02 18:47:49 | 2026-10-01 20:17:25 |
| CVE-2026-53964 | 7.2 | Document Merge Service is a document template merge service providing an API to manage templates and merge them with given data. Prior to version 9.1.0, a remote code execution (RCE) via server-side template injection (SSTI) allows for user supplied | 2026-10-02 18:47:49 | 2026-10-01 20:17:25 |
| CVE-2026-104059 | 8.1 | Lektor 3.3.14 and 3.4.0b15 contains a cross-site request forgery vulnerability in the admin API blueprint that allows unauthenticated attackers to perform state-changing actions by sending cross-origin requests without CSRF tokens, Origin/Referer val | 2026-10-02 18:47:49 | 2026-10-01 19:17:19 |
| CVE-2026-104058 | 5.3 | Podgrab contains a missing authentication vulnerability in which the /ws WebSocket route is registered on the root gin engine instead of the BasicAuth-protected router group, allowing unauthenticated network clients to connect even when PASSWORD is c | 2026-10-02 18:47:49 | 2026-10-01 19:17:19 |
| CVE-2026-104057 | 7.5 | Podgrab contains an unauthenticated denial-of-service vulnerability caused by unsynchronized concurrent access to shared maps (activePlayers and allConnections) in its WebSocket handler, where Wshandler and HandleWebsocketMessages goroutines read and | 2026-10-02 18:47:49 | 2026-10-01 19:17:19 |
| CVE-2026-21833 | 3.7 | HCL AION is affected by a vulnerability in which the Content-Security-Policy (CSP) HTTP response header is not configured. CSP helps prevent attacks such as Cross-Site Scripting (XSS) by restricting the sources from which scripts, styles, and other r | 2026-10-02 18:47:49 | 2026-10-01 17:17:23 |
| CVE-2026-94620 | - | Classroom 50 is a free and open-source tool for managing and grading programming assignments via GitHub. Prior to version 1.11.0, `gh teacher download` clones each student's assignment repository and then writes autograde artifacts (`result.json` and | 2026-10-02 18:47:49 | 2026-10-01 16:18:08 |
| CVE-2026-75101 | 6.5 | An authorization bypass vulnerability was identified in GitHub Enterprise Server that allowed any authenticated user of the instance to read the raw diff or patch of pull requests in private repositories without authorization. Access tokens for raw p | 2026-10-02 18:46:47 | 2026-09-22 21:17:31 |
| CVE-2026-103921 | 7.4 | GraphQL Tools provides utilities for building, stitching, and mocking GraphQL schemas. Prior to 1.1.35, the executor-legacy-ws buildWSLegacyExecutor() function hardcodes TLS certificate rejection off for Node.js connections to wss:// endpoints. Appli | 2026-10-02 18:44:45 | 2026-10-01 17:17:19 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/12764
Zapisa po stranici: