Rezultati pretraživanja za 'Od datuma: 01.11.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2024-58374 | 7.5 | Hongjing e-HR contains an unauthenticated SQL injection vulnerability in the getSdutyTree servlet endpoint that allows remote unauthenticated attackers to access protected resources by supplying a path traversal sequence in the request URI to bypass | 2026-10-01 23:10:00 | 2026-08-13 18:17:16 |
| CVE-2024-14044 | 6.5 | A vulnerability was identified in Open5GS up to 2.7.1. This issue affects the function pcrf_rx_aar_cb of the file src/pcrf/pcrf-rx-path.c of the component Diameter Rx Handler. The manipulation of the argument num_of_media_component/num_of_sub leads t | 2026-10-01 23:10:00 | 2026-08-12 01:17:06 |
| CVE-2024-14043 | 6.5 | A vulnerability was determined in Open5GS up to 2.7.1. This vulnerability affects the function mme_s6a_subscription_data_from_avp of the file src/mme/mme-fd-path.c of the component Diameter S6a Interface. Executing a manipulation of the argument msis | 2026-10-01 23:10:00 | 2026-08-12 00:17:11 |
| CVE-2025-13887 | 6.4 | The AI BotKit – AI Chatbot & Live Support for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' parameter in the `ai_botkit_widget` shortcode in all versions up to, and including, 1.1.7 due to insufficient input | 2026-10-01 23:10:00 | 2026-01-07 12:16:50 |
| CVE-2009-20007 | - | Talkative IRC v0.4.4.16 is vulnerable to a stack-based buffer overflow when processing specially crafted response strings sent to a connected client. An attacker can exploit this flaw by sending an overly long message that overflows a fixed-length bu | 2026-10-01 23:10:00 | 2025-09-16 15:15:42 |
| CVE-2009-20006 | - | osCommerce versions up to and including 2.2 RC2a contain a vulnerability in its administrative file manager utility (admin/file_manager.php). The interface allows file uploads and edits without sufficient input validation or access control. An unauth | 2026-10-01 23:10:00 | 2025-09-16 15:15:41 |
| CVE-2009-20005 | - | A stack-based buffer overflow exists in the UtilConfigHome.csp endpoint of InterSystems Caché 2009.1. The vulnerability is triggered by sending a specially crafted HTTP GET request containing an oversized argument to the .csp handler. Due to insuffic | 2026-10-01 23:10:00 | 2025-09-16 15:15:41 |
| CVE-2025-20330 | 6.1 | A vulnerability in the web-based management interface of Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a use | 2026-10-01 23:10:00 | 2025-09-03 18:15:34 |
| CVE-2009-20011 | - | ContentKeeper Web Appliance (now maintained by Impero Software) versions prior to 125.10 are vulnerable to remote command execution due to insecure handling of file uploads via the mimencode CGI utility. The vulnerability allows unauthenticated attac | 2026-10-01 23:10:00 | 2025-08-30 14:15:35 |
| CVE-2009-20010 | - | Dogfood CRM version 2.0.10 contains a remote command execution vulnerability in the spell.php script used by its mail subsystem. The vulnerability arises from unsanitized user input passed via a POST request to the data parameter, which is processed | 2026-10-01 23:10:00 | 2025-08-30 14:15:34 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/12764
Zapisa po stranici: