Rezultati pretraživanja za 'Od datuma: 01.11.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-91767 | 6.5 | php_openssl_matches_wildcard_name() in ext/openssl/xp_ssl.c underflows the length argument passed to memchr() when a TLS server certificate presents a wildcard name whose literal characters are together longer than the hostname being verified. A mali | 2026-10-27 13:14:13 | 2026-09-25 21:17:24 |
| CVE-2026-52834 | 7.3 | jxl-oxide is a pure Rust implementation of a JPEG XL decoder. Prior to jxl-grid 0.6.2, decoding a crafted JPEG XL image on a 32-bit platform can overflow length calculations in AlignedGrid::with_alloc_tracker and related grid and subgrid arithmetic. | 2026-10-27 13:10:00 | 2026-08-19 15:17:09 |
| CVE-2026-49255 | 8.8 | electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.11.11, electerm constructs operating system commands in src/app/lib/fs.js by interpolating untrusted file paths into the rmrf(), mv(), and cp() funct | 2026-10-27 13:10:00 | 2026-08-19 15:17:06 |
| CVE-2026-49253 | 7.1 | electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.11.11, electerm uses remote-supplied filenames directly with path.join() while receiving Zmodem and Trzsz transfers. In src/app/server/zmodem.js, pre | 2026-10-27 13:10:00 | 2026-08-19 15:17:06 |
| CVE-2026-45742 | 7.5 | Gotenberg is a Docker-powered stateless API for PDF files. From 8.10.0 until 8.33.0, the newContext function in pkg/modules/api/context.go starts one errgroup.Go goroutine for each multipart downloadFrom entry and allows those goroutines to concurren | 2026-10-27 13:10:00 | 2026-08-19 15:17:05 |
| CVE-2026-45741 | 7.5 | Gotenberg is a Docker-powered stateless API for PDF files. In 8.32.0 and earlier, the IsPublicIP function in pkg/gotenberg/outbound.go does not reject the 2002::/16 6to4 prefix, the 64:ff9b::/96 and 64:ff9b:1::/48 NAT64 prefixes, the fec0::/10 deprec | 2026-10-27 13:10:00 | 2026-08-19 15:17:05 |
| CVE-2026-44829 | 8.8 | Gotenberg is a Docker-powered stateless API for PDF files. In 8.32.0 and earlier, filename handling in pkg/modules/api/context.go uses filepath.Base on Linux, which does not treat backslashes as path separators, so a multipart filename containing Win | 2026-10-27 13:10:00 | 2026-08-19 15:17:02 |
| CVE-2026-40509 | 4.3 | OpenEMR before 8.3.0 contains a cross-site request forgery vulnerability in the DICOM viewer. The web_path GET parameter in the DICOM viewer page is embedded unsanitized as a URL without validation against expected path formats. An attacker can craft | 2026-10-27 13:10:00 | 2026-08-19 15:17:01 |
| CVE-2026-40508 | 5.4 | OpenEMR before 8.3.0 contains a stored cross-site scripting vulnerability in the patient portal template import handler that allows authenticated attackers with Forms Administration permissions to upload template files containing arbitrary HTML or Ja | 2026-10-27 13:10:00 | 2026-08-19 15:17:01 |
| CVE-2026-40507 | 6.1 | OpenEMR before 8.3.0 contains a reflected cross-site scripting vulnerability in the patient portal template import handler. The templateHtml GET parameter is reflected into the page response without sanitization. An attacker can craft a URL that exec | 2026-10-27 13:10:00 | 2026-08-19 15:17:01 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/13335
Zapisa po stranici: