Rezultati pretraživanja za 'Od datuma: 01.11.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-104847 | - | ProseMirror's view component renders and manages the editable browser interface for ProseMirror documents. Prior to 1.42.3, prosemirror-view paste handling accepts attacker-provided HTML whose clipboard slice context contains attributes that are not | 2026-10-02 18:44:11 | 2026-10-02 16:16:47 |
| CVE-2026-104844 | 5.9 | PostCSS Selector Parser is a CSS selector parser that integrates with PostCSS but does not require it. Prior to 7.1.6, src/parser.js splitWord() can receive a flat selector as one word token carrying many class or ID indexes because period and hash c | 2026-10-02 18:44:11 | 2026-10-02 16:16:46 |
| CVE-2026-104843 | - | uv is a Python package and project manager written in Rust. From 0.12.7 until 0.12.18, uv wheel extraction on Windows can process a malicious wheel in a way that writes a file outside the installation prefix, including an executable in a directory al | 2026-10-02 18:44:11 | 2026-10-02 16:16:46 |
| CVE-2026-90970 | 9.9 | GitLab has remediated a vulnerability in the GitLab AI Gateway component affecting all versions of the AI Gateway from 18.1.6 before 19.2.4, 19.3 before 19.3.2, and 19.4 before 19.4.1 that, under certain conditions, could have allowed an authenticate | 2026-10-02 18:44:11 | 2026-10-02 15:17:12 |
| CVE-2026-104026 | 7.8 | In Sapling SCM prior to v0.2.20260929-102736, control characters were allowed to be embedded in Git subtree URLs. A maliciously constructed repository, if cloned by a target, could trigger code execution on otherwise read-only actions such as sl log/ | 2026-10-02 18:44:11 | 2026-10-02 15:17:05 |
| CVE-2026-94422 | 8.8 | An incorrect implementation of message filtering in xdg-dbus-proxy versions before 0.1.9 allows an attacker to bypass the intended message filtering on the D-Bus session bus by setting a reply serial number on non-reply messages. A malicious or compr | 2026-10-02 18:44:11 | 2026-10-02 14:17:12 |
| CVE-2026-97876 | 6.4 | A local attacker with control over GRUB's configuration can bypass lockdown restrictions when booting with Secure Boot and load an unsigned GRUB module, while GRUB continues to report lockdown is enabled. The vulnerability is caused by insufficie | 2026-10-02 18:44:11 | 2026-10-02 11:17:39 |
| CVE-2026-95512 | 5.5 | A flaw was found in FreeType, specifically within its CID font loader. A remote attacker could exploit this vulnerability by tricking a user into opening content that embeds or references a specially crafted CID-keyed font. This crafted font can caus | 2026-10-02 18:44:11 | 2026-10-02 09:16:45 |
| CVE-2026-102514 | - | Out-of-bounds Write (CWE-787) in the PEA archive extraction routine (pea.pas, unpea_procedure) of the first-party pea component in PeaZip 11.2.0 and earlier allows an attacker who convinces a victim to open or extract a crafted .pea archive to execut | 2026-10-02 18:44:11 | 2026-10-01 21:17:18 |
| CVE-2026-68496 | 7.5 | The Smile parser in FasterXML jackson-dataformats-binary never invokes StreamReadConstraints.validateNameLength() when decoding JSON object property names, so the maxNameLength limit is not enforced for this format. SmileParser._handleLongFieldName() | 2026-10-02 18:44:11 | 2026-10-01 18:17:27 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/12764
Zapisa po stranici: