Svi - CERT CVE

Rezultati pretraživanja za 'Od datuma: 01.11.2024.'

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2026-107047 7.5 Insecure permissions in mendhak GPSLogger versionCode 137 allows unauthorized attackers to arbitrarily manipulate the app's logging mechanism and log data. 2026-10-29 20:17:24
CVE-2026-107042 7.5 Insecure permissions in USP Ultimate Screenshot Painter versionCode 240213.009 allows unauthorized attackers to move or overwrite files in another user's private storage via supplying a crafted content URI. 2026-10-29 20:17:24
CVE-2026-104339 9.8 IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command. 2026-10-29 20:17:24
CVE-2026-104316 6.5 IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker to cancel any victim's running background workflow job by sending a single HTTP request, resulting in loss of in-progress compute work with no flow-level permission check. 2026-10-29 20:17:24
CVE-2026-104309 6.5 IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory. 2026-10-29 20:17:24
CVE-2026-107015 9.1 Insecure permissions in Simple Contacts Pro versionCode 107 allow unauthorized attackers to write and read notes in another user's' note database. 2026-10-29 20:17:24
CVE-2026-110076 5.4 Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploit 2026-10-29 20:11:59
CVE-2026-110077 5.4 Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploit 2026-10-29 20:08:37
CVE-2026-96108 7.8 Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally. 2026-10-29 20:05:36
CVE-2026-95943 7.0 Double free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally. 2026-10-29 20:05:15
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/13102
Zapisa po stranici: