Rezultati pretraživanja za 'Od datuma: 01.11.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-117499 | 3.7 | @fastify/session is a session plugin for Fastify. In all releases before 11.1.6, with the default rolling session behavior, a request that restored a session before a logout could save its own copy after another request had completed the session dest | 2026-10-27 15:03:41 | 2026-10-27 12:17:07 |
| CVE-2026-112362 | 9.1 | @fastify/express is a Fastify plugin that runs Express middleware inside Fastify. In versions 4.0.5 through 4.0.8, when Fastify runs with the non-default ignoreDuplicateSlashes option enabled, the plugin matches path-scoped Express middleware against | 2026-10-27 15:03:41 | 2026-10-27 12:17:04 |
| CVE-2026-107472 | - | An out-of-bounds read vulnerability in the QTextCodec TSCII encoding of the Qt 5 Compatibility APIs module (Qt Core in Qt 5 and earlier) impacts Qt. Applications that convert text to the TSCII encoding through QTextCodec may read memory outside the i | 2026-10-27 15:03:41 | 2026-10-27 08:16:52 |
| CVE-2026-105946 | - | Out-of-bounds read in the QAuthenticator NTLM authentication handling in the Qt Network module in Qt Group Qt allows remote attackers to obtain sensitive information (heap memory contents) or cause a denial of service (application crash) via a crafte | 2026-10-27 15:03:41 | 2026-10-27 07:16:31 |
| CVE-2026-4337 | - | Unrestricted Upload of File with Dangerous Type vulnerability in the PuMuKIT application allows a unauthenticated user to upload any type of file to the server, and to any path where the web server user has write permissions. This could also allow th | 2026-10-27 15:02:47 | 2026-10-27 12:17:08 |
| CVE-2026-117538 | 4.1 | REDAXO before 5.21.0 contains a reflected cross-site scripting vulnerability in the backend packages API, where the function parameter is concatenated into an error message rendered without HTML escaping. Attackers can lure an authenticated backend u | 2026-10-27 15:02:47 | 2026-10-27 11:17:34 |
| CVE-2026-117536 | 8.8 | REDAXO before 5.21.3 contains a cross-site request forgery vulnerability in the backend user administration page (users/users) because the CSRF token check only runs when the save parameter is set, while the update path triggered by FUNC_UPDATE does | 2026-10-27 15:02:47 | 2026-10-27 11:17:34 |
| CVE-2026-117535 | 6.1 | REDAXO before 5.21.3 contains a reflected cross-site scripting vulnerability in the backend media pool detail page, where the opener_link parameter is rendered without HTML escaping. Unauthenticated attackers can lure logged-in backend users with med | 2026-10-27 15:02:47 | 2026-10-27 11:17:34 |
| CVE-2026-117534 | 5.4 | REDAXO before 5.21.3 contains a cross-site request forgery vulnerability in the structure/history plugin that allows attackers to delete history or roll back content via unvalidated GET requests. Attackers can lure logged-in backend users to a page t | 2026-10-27 15:02:47 | 2026-10-27 11:17:33 |
| CVE-2026-117532 | 9.8 | REDAXO core from 5.3.0 before 5.21.4 contains an authentication bypass vulnerability in the structure/history plugin that allows unauthenticated attackers to forge temporary login tokens. Attackers can force the session-tied secret into a predictable | 2026-10-27 15:02:47 | 2026-10-27 11:17:33 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/13482
Zapisa po stranici: