Rezultati pretraživanja za 'Od datuma: 01.11.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-55770 | 6.8 | OpenBao is an open source identity-based secrets management system. Prior to 2.5.5, OpenBao used EscapeLDAPValue, an RFC 4514 distinguished-name escaping function, where RFC 4515 LDAP search-filter escaping was required in sdk/helper/ldaputil/client. | 2026-09-29 19:06:32 | 2026-09-15 16:17:15 |
| CVE-2026-88056 | 9.1 | Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, and 22.1.4, Angular Server-Side Rendering in @angular/platform-server processes user-contro | 2026-09-29 19:02:56 | 2026-09-10 19:17:41 |
| CVE-2026-88057 | 6.1 | Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.28, 21.2.20, and 22.1.0, Angular's compiler and runtime in @angular/core and @angular/compiler could omi | 2026-09-29 19:02:03 | 2026-09-10 19:17:41 |
| CVE-2026-55193 | 8.8 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, FreeRDP clients using TS Gateway accept a server-controlled max_xmit_frag value in libfreerdp/core/gateway/rpc_bind.c without bounding it to the 4088-byte ReceiveFragme | 2026-09-29 19:01:25 | 2026-08-19 18:16:44 |
| CVE-2026-88058 | 6.1 | Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, and 22.1.4, Angular server-side rendering (SSR) in @angular/platform-server serializes Proc | 2026-09-29 19:01:24 | 2026-09-10 19:17:41 |
| CVE-2026-84206 | 4.3 | Snipe-IT before 8.7.0 gates the bulk asset restore endpoint on the assets.edit permission instead of assets.delete, allowing users without delete rights to restore soft-deleted assets. Attackers with edit permissions can post asset identifiers to the | 2026-09-29 19:00:51 | 2026-09-01 16:17:35 |
| CVE-2026-22101 | - | The access to the service menu is obfuscated, but possible with only physical access. This menu exposes sensitive information such as serial numbers, MAC addresses, and WiFi network and password. | 2026-09-29 19:00:37 | 2026-09-29 15:17:25 |
| CVE-2026-22094 | - | The firmware for the EVbee DC-80 has a weak hardcoded root password, which allows attackers to login as root using the SSH daemon that is exposed to the network. | 2026-09-29 19:00:37 | 2026-09-29 15:17:21 |
| CVE-2026-102762 | - | The NetX Duo MQTT client leaks the packet carrying a malformed PUBLISH message. Each malformed PUBLISH costs one packet, or one chain of packets, from the network driver's receive pool, and nothing returns it. A peer that can deliver a few dozen such | 2026-09-29 19:00:16 | 2026-09-29 18:17:13 |
| CVE-2026-102761 | - | NetX Duo's WebSocket client resets the unmasking cursor to the first `NX_PACKET` each time it advances through a chained packet, while the loop's upper bound belongs to the current packet. With the standard contiguous packet-pool layout, a masked ser | 2026-09-29 19:00:16 | 2026-09-29 18:17:13 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/12764
Zapisa po stranici: