Rezultati pretraživanja za 'Od datuma: 01.11.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-59662 | - | Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomCompetidor” parameter is affected – en | 2026-10-02 18:17:04 | 2026-10-02 10:17:07 |
| CVE-2026-59671 | - | Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The endpoint “/es/datatables/getemployeetypesd | 2026-10-02 18:17:04 | 2026-10-02 09:16:44 |
| CVE-2026-59670 | - | Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomListaValidacion” parameter is affected | 2026-10-02 18:17:04 | 2026-10-02 09:16:44 |
| CVE-2026-59669 | - | Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “name” parameter is affected – endpoint “/ | 2026-10-02 18:17:04 | 2026-10-02 09:16:44 |
| CVE-2026-18036 | - | In Bouncy Castle for Java before 1.86, NTRU reduced secret values with the % operator in three helpers whose reference implementations are deliberately division-free, so each reduction was carried out by an integer division whose latency depends on t | 2026-10-02 18:17:03 | 2026-10-02 08:17:01 |
| CVE-2026-17508 | - | In Bouncy Castle for Java before 1.86, several password-based key derivation entry points ran the KDF with cost parameters taken from the untrusted input being processed, without bounding them, so a small input could dictate an arbitrary amount of wo | 2026-10-02 18:17:03 | 2026-10-02 08:17:01 |
| CVE-2026-17507 | - | In Bouncy Castle for Java before 1.86, the MLS implementation (org.bouncycastle.mls) holds RFC 9420's uint32 leaf_index in a signed int, so a wire value with the top bit set decodes to a negative number. That is a legitimate encoding rather than malf | 2026-10-02 18:17:03 | 2026-10-02 08:17:01 |
| CVE-2026-104855 | - | Wasmtime is a runtime for WebAssembly. From 46.0.0 until 46.0.2 and 47.0.3, fuel and epoch preemption checks inside bulk operations including memory.copy, table.grow, and array.copy can expose invalid intermediate state when an embedder mutates a Sto | 2026-10-02 18:17:02 | 2026-10-02 18:17:02 |
| CVE-2026-104854 | - | Nx is a monorepo solution for TypeScript and polyglot codebases. From 14.6.0 until 22.7.9 and 23.1.2, Nx creates Unix domain sockets for its daemon and isolated plugin workers in shared temporary locations without owner-only directory and socket perm | 2026-10-02 18:17:01 | 2026-10-02 17:17:04 |
| CVE-2026-104853 | - | Nx is a monorepo solution for TypeScript and polyglot codebases. From 13.10.0 until 22.7.10 and 23.2.1, Nx migration planning reads the nx-migrations.migrations value from a target package manifest without validating that it is a contained relative p | 2026-10-02 18:17:01 | 2026-10-02 17:17:03 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/12926
Zapisa po stranici: