Rezultati pretraživanja za 'Od datuma: 01.11.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-117537 | 4.1 | REDAXO before 5.21.0 contains a reflected cross-site scripting vulnerability that allows authenticated attackers to inject scripts via the type parameter of the metainfo_default_fields_create API. Attackers can craft a link with a valid CSRF token an | 2026-10-27 15:05:24 | 2026-10-27 11:17:34 |
| CVE-2026-117533 | 4.4 | REDAXO from 5.18.0 before 5.21.4 contains a stored cross-site scripting vulnerability because rex_media_service moves uploaded SVG files into the public media folder before sanitizing them. Authenticated users with mediapool upload rights can race th | 2026-10-27 15:05:24 | 2026-10-27 11:17:33 |
| CVE-2026-116898 | 7.1 | REDAXO before 5.21.4 contains a missing authorization vulnerability in the media pool bulk move that checks only target category permission, ignoring the source category. Authenticated backend users with permission for one media category can move fil | 2026-10-27 15:05:24 | 2026-10-27 11:17:32 |
| CVE-2026-116894 | 4.2 | REDAXO before 5.21.5 contains an insufficient session expiration vulnerability that allows attackers to retain account access by keeping the current session and stay-logged-in key valid after a password change. Attackers who obtained a user's session | 2026-10-27 15:05:24 | 2026-10-27 11:17:32 |
| CVE-2026-65151 | 8.4 | NVIDIA NeMo Agent Toolkit contains vulnerability where an attacker could cause a SQL injection issue. A successful exploit of this vulnerability might lead to data tampering, denial of service and information disclosure. | 2026-10-27 15:03:41 | 2026-10-27 13:16:59 |
| CVE-2026-65145 | 10.0 | NVIDIA NeMo Agent Toolkit contains a vulnerability where a attacker could cause a missing authentication issue. This vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure. | 2026-10-27 15:03:41 | 2026-10-27 13:16:59 |
| CVE-2026-65120 | 7.1 | NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a server-side request forgery. A successful exploit of this vulnerability might lead to information disclosure. | 2026-10-27 15:03:41 | 2026-10-27 13:16:59 |
| CVE-2026-65119 | 8.4 | NVIDIA TensorRT-LLM for any platform contains a vulnerability in KvCacheAwareRouter tokenizer loading, where an attacker could cause inclusion of functionality from an untrusted control sphere. A successful exploit might lead to code execution, infor | 2026-10-27 15:03:41 | 2026-10-27 13:16:59 |
| CVE-2026-24269 | 7.1 | NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a server-side request forgery. A successful exploit of this vulnerability might lead to information disclosure and data tampering. | 2026-10-27 15:03:41 | 2026-10-27 13:16:57 |
| CVE-2026-107590 | - | An out-of-bounds write vulnerability in the Qt QTextCodec iconv-based encoding of the Qt 5 Compatibility APIs module (Qt Core in Qt 5 and earlier) impacts Qt. Under certain conditions, encoding text with QTextCodec may write outside an internal buffe | 2026-10-27 15:03:41 | 2026-10-27 13:16:54 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/13482
Zapisa po stranici: