Rezultati pretraživanja za 'Od datuma: 01.11.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-116066 | 6.8 | Firecrawl before 2.11.586 contains a server-side request forgery vulnerability in the Playwright service SSRF proxy that allows attackers to bypass isInternalHost checks via DNS rebinding. Attackers controlling DNS for a scrape target can return a pu | 2026-10-29 20:17:26 | 2026-10-25 12:16:27 |
| CVE-2026-116050 | 7.5 | A vulnerability has been found in krupalshah Employee Recruitment System up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. This affects an unknown part of the file /source/registerform3.php of the component Registration. The manipulation of the argumen | 2026-10-29 20:17:26 | 2026-10-25 09:16:27 |
| CVE-2026-116047 | 5.0 | A vulnerability has been found in Privoce Vocechat up to 0.9.121. This issue affects some unknown processing of the file widget.html of the component Query Parameter Handler. Such manipulation of the argument welcome leads to cross site scripting. Th | 2026-10-29 20:17:26 | 2026-10-25 08:16:26 |
| CVE-2026-116044 | 6.5 | A security vulnerability has been detected in prasathmani TinyFileManager up to 2.6. Affected by this issue is some unknown functionality of the file tinyfilemanager.php of the component Remote URL File Upload Module. The manipulation leads to unrest | 2026-10-29 20:17:26 | 2026-10-25 06:16:32 |
| CVE-2026-107058 | 9.8 | An issue in Shelter versionCode 445 allows attackers to register their own auth_key and execute a takeover of another user's binder service API and preference state. | 2026-10-29 20:17:25 | 2026-10-29 17:17:58 |
| CVE-2026-107052 | 7.5 | Insecure permissions in the AIDL interface of ProjectMAXS MAXS Module FileRead versionCode 27 allows unauthorized attackers to arbitrarily reead files outside of the sandbox via providing an absolute path. | 2026-10-29 20:17:25 | 2026-10-29 17:17:57 |
| CVE-2026-110309 | 8.8 | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary commands due to improper control of code generation. | 2026-10-29 20:17:25 | 2026-10-29 16:17:57 |
| CVE-2026-110193 | 8.8 | IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker with a low-privileged authenticated account to cause the Agentic Assistant to generate or submit component code using these unblocked patterns, resulting in arbitrary operating syste | 2026-10-29 20:17:25 | 2026-10-29 16:17:56 |
| CVE-2026-108494 | 7.1 | Unauthenticated Cross Site Scripting (XSS) in Chained Quiz <= 1.4.1 versions. | 2026-10-29 20:17:25 | 2026-10-29 16:17:55 |
| CVE-2026-114406 | 6.8 | The system certificate authority (CA) store in Red Hat products, distributed via ca-certificates RPM packages, included multiple root CA certificates of authorities, which signed intermediate CA certificates with weak private keys issued by the eMudh | 2026-10-29 20:17:25 | 2026-10-21 21:17:58 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/13102
Zapisa po stranici: