Rezultati pretraživanja za 'Od datuma: 01.11.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-108124 | 4.9 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in wp-post-author. This issue affects wp-post-author before 4.1.0. | 2026-10-09 18:17:07 | 2026-10-09 15:17:12 |
| CVE-2026-19570 | 8.8 | The LE Audio Broadcast Sink in subsys/bluetooth/audio/bap_broadcast_sink.c copies subgroup metadata from a received Basic Audio Announcement (BASE) into the static Broadcast Audio Scan Service parameter structure mod_src_param without any bounds chec | 2026-10-09 18:17:07 | 2026-10-09 08:16:54 |
| CVE-2026-19569 | 8.8 | dynamic_object_create() in kernel/userspace/userspace.c computed the backing allocation for a dynamically allocated kernel object as obj_size_get(otype) + size, and for thread stack elements as STACK_ELEMENT_DATA_SIZE(size) (a round-up plus fixed ove | 2026-10-09 18:17:07 | 2026-10-09 08:16:54 |
| CVE-2026-14502 | 9.8 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to obtain administrative access due to failure to reject empty passwords during LDAP auth | 2026-10-09 18:17:07 | 2026-10-08 15:17:49 |
| CVE-2026-108096 | 6.5 | Improper authorization in the query resolvers generated by @aws-amplify/graphql-index-transformer in AWS Amplify API Category before 3.1.2 might allow an authenticated remote user to read records owned by other users of the same application via craft | 2026-10-09 18:17:06 | 2026-10-09 18:17:06 |
| CVE-2026-108109 | 9.1 | PHPNuxBill through 2025.3.20 contains an account takeover vulnerability in the customer password reset flow in system/controllers/forgot.php that allows unauthenticated attackers to brute-force the 6-digit otp_code. Attackers knowing a customer usern | 2026-10-09 18:17:06 | 2026-10-09 15:17:12 |
| CVE-2026-108105 | 5.9 | Open5GS through 2.8.0 contains a reachable assertion vulnerability in mme_gn_handle_sgsn_context_request() that allows remote unauthenticated attackers to crash the MME via malformed SGSN Address IEs. Attackers sending GTPv1-C traffic from a configur | 2026-10-09 18:17:06 | 2026-10-09 15:17:11 |
| CVE-2026-107886 | 2.3 | OpenPrinting CUPS before 2.4.20 contains a double-free in printer-class management. When CUPS-Add-Modify-Class replaces an existing class member list, add_class() frees pclass->printers without clearing the pointer. If subsequent validation fails, th | 2026-10-09 18:17:06 | 2026-10-09 04:18:05 |
| CVE-2026-106123 | 5.5 | The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.35.0, ConnectionFactoryConfigurator.load() includes the raw uri value in wrapped exceptions when AMQP URI parsing fails | 2026-10-09 18:17:06 | 2026-10-06 19:17:43 |
| CVE-2026-107839 | 7.5 | ageLANServer provides a cross-platform web server and launcher for offline multiplayer in several Age of Empires and Age of Mythology games. Prior to version 1.15.2, the AoE3 POST /game/cloud/getFileURL handler in the bundled game server has no reque | 2026-10-09 18:17:05 | 2026-10-09 18:17:05 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/13069
Zapisa po stranici: