Rezultati pretraživanja za 'Od datuma: 01.11.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-42018 | 7.5 | JFrog Artifactory could return an internal anonymous-user token to an unauthenticated caller when anonymous access is disabled, potentially exposing sensitive resources. | 2026-10-01 19:17:20 | 2026-08-12 18:17:29 |
| CVE-2026-103532 | 5.0 | A vulnerability has been found in immich-app Immich up to 2.7.5. This affects the function checkSharedLinkAccess of the file server/src/utils/access.ts of the component Shared Link Preview Handler. The manipulation of the argument Password leads to i | 2026-10-01 19:17:18 | 2026-10-01 02:16:53 |
| CVE-2026-103589 | 5.4 | QloApps through 1.7.0 contains a reflected cross-site scripting vulnerability in the back-office room type editor that fails to escape room_num, floor, and comment field values in input attributes. Attackers can induce authenticated back-office users | 2026-10-01 19:17:18 | 2026-09-30 23:16:58 |
| CVE-2026-103472 | 7.5 | restbed through 5.0.0 accepts WebSocket frames with declared payload lengths up to 2^63 bytes and buffers the payload without size limits in an unbounded stream buffer. Remote unauthenticated attackers can declare large frame sizes and stream payload | 2026-10-01 19:17:18 | 2026-09-30 18:18:17 |
| CVE-2026-103048 | 6.1 | URL redirection to untrusted site ('open redirect') vulnerability in The Wikimedia Foundation Mediawiki - Collection extension allows Fake the Source of Data. This issue affects Mediawiki - Collection extension: before 1.46.1, 1.45.5, 1.43.10. | 2026-10-01 19:17:17 | 2026-09-30 00:16:35 |
| CVE-2026-103044 | 9.8 | XML injection (aka blind XPath injection) vulnerability in The Wikimedia Foundation Mediawiki - EasyTimeline extension allows XML Injection. This issue affects Mediawiki - EasyTimeline extension: before 1.46.1, 1.45.5, 1.43.10. | 2026-10-01 19:17:17 | 2026-09-29 23:17:22 |
| CVE-2026-102796 | 7.5 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Wikimedia Foundation Mediawiki - UserPageViewTracker Extension allows SQL Injection. This issue affects Mediawiki - UserPageViewTracker Extension: | 2026-10-01 19:17:17 | 2026-09-29 17:17:08 |
| CVE-2026-101925 | 6.4 | The bbp style pack plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'display_name (via /wp-admin/profile.php) + bbp_reply_content (via bbPress reply form)' parameter in all versions up to, and including, 6.4.8 due to insuffic | 2026-10-01 19:17:16 | 2026-10-01 09:17:07 |
| CVE-2026-100242 | 7.5 | Dependency on Vulnerable Third-Party Component and Uncontrolled Resource Consumption vulnerability in Wikimedia Foundation Mediawiki - DataTransfer Extension allows Excessive Allocation. This issue affects Mediawiki - DataTransfer Extension: from 1. | 2026-10-01 19:17:16 | 2026-09-29 17:17:01 |
| CVE-2026-100240 | 9.1 | Missing Authorization vulnerability in Wikimedia Foundation Mediawiki - TemplateSandbox Extension allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Mediawiki - TemplateSandbox Extension: from * before 1.46.1, 1.45.5 | 2026-10-01 19:17:16 | 2026-09-29 17:17:01 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/12764
Zapisa po stranici: