Rezultati pretraživanja za 'Od datuma: 01.11.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-116575 | 6.3 | Mem0 provides persistent memory infrastructure for AI agents and applications. Prior to Python SDK 2.0.18 and TypeScript SDK 3.1.6, _build_session_scope() in mem0/memory/main.py and Memory.buildSessionScope() in the TypeScript SDK join caller-control | 2026-10-27 16:04:22 | 2026-10-26 21:18:13 |
| CVE-2025-13833 | - | A vulnerability exists in SecureConnector for Windows when the “Additional Appliance Connections” setting is enabled and the agent’s configuration file contains more than three trusted‑server entries. Some entries omit TLS certificate fingerprints, w | 2026-10-27 16:04:22 | 2026-10-26 21:17:01 |
| CVE-2026-115924 | 8.6 | Rembg is a tool to remove images background. Prior to 2.0.82, the public /api/remove endpoint passes attacker-controlled extras.sam_model through rembg/commands/s_command.py to rembg/sessions/sam.py, where it is interpolated into SAM filenames and Gi | 2026-10-27 16:04:22 | 2026-10-26 20:17:52 |
| CVE-2026-115533 | - | The LeRobot library is vulnerable to arbitrary code execution via unsafe dynamic class instantiation in the from_pretrained() method and related paths. When loading a policy's processor configuration from a repository, the library uses the class fie | 2026-10-27 16:04:22 | 2026-10-26 20:17:51 |
| CVE-2026-117603 | 4.3 | Electrum before 4.7.2 contains a spending limit bypass vulnerability in the Nostr Wallet Connect plugin that allows malicious NWC clients to exceed daily_limit_sat by exploiting non-atomic budget checks and millisatoshi truncation. Attackers can send | 2026-10-27 16:03:45 | 2026-10-27 14:16:40 |
| CVE-2026-117602 | 8.4 | Electrum 4.6.0 before 4.7.2 contains an authorization bypass in the external plugin loader, which executes a plugin's __init__.py module when the plugin is marked enabled in the config file, without verifying its plugin-password signature. A rogue lo | 2026-10-27 16:03:45 | 2026-10-27 14:16:40 |
| CVE-2026-117601 | 7.5 | Electrum before 4.8.3 fails to verify signatures of wallet-owned inputs in unconfirmed mempool transactions, allowing malicious servers to replace a just-broadcast transaction with a conflicting one. Attackers can swallow the user's transaction and d | 2026-10-27 16:03:45 | 2026-10-27 14:16:39 |
| CVE-2026-117557 | 6.1 | SDL_image through 3.4.8 and through 2.8.12 contains a stack out-of-bounds read vulnerability in IMG_LoadLBM_IO() in src/IMG_lbm.c that skips bitplane count validation when HAM mode is set. Attackers can supply a crafted ILBM file with more than 8 HAM | 2026-10-27 16:03:45 | 2026-10-27 14:16:37 |
| CVE-2026-117553 | 7.5 | Umbraco CMS before 17.7.2 and 18.2.2 contains an authentication bypass vulnerability that allows unauthenticated attackers to register attacker-controlled OAuth redirect URIs by poisoning the Host header. Attackers send signed-in users authorization | 2026-10-27 16:03:45 | 2026-10-27 14:16:35 |
| CVE-2026-10537 | 5.3 | A misconfiguration issue in the affected service in Control-M/Enterprise Manager and Control-M/Server may allow unauthenticated remote users to access certain service functionality, which could potentially result in information exposure or affect ser | 2026-10-27 16:03:45 | 2026-10-27 14:16:33 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/13496
Zapisa po stranici: