Rezultati pretraživanja za 'Od datuma: 01.11.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-121573 | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Melapress WP Activity Log wp-security-audit-log allows Stored XSS.This issue affects WP Activity Log: from n/a through 5.6.7. | 2026-11-09 19:16:46 | 2026-11-09 19:16:45 |
| CVE-2026-120834 | 7.3 | Incorrect Privilege Assignment vulnerability in Tobias WP2LEADS wp2leads allows Privilege Escalation.This issue affects WP2LEADS: from n/a through 3.5.17. | 2026-11-09 19:16:45 | 2026-11-09 19:16:44 |
| CVE-2026-121207 | 7.4 | Uninitialized resource in Dawn in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High) | 2026-11-09 19:16:45 | 2026-11-03 21:17:29 |
| CVE-2026-121197 | 7.4 | Out of bounds read in ANGLE in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High) | 2026-11-09 19:16:45 | 2026-11-03 21:17:28 |
| CVE-2026-120651 | 7.5 | CGI versions before 5.00 for Perl allow an infinite loop on a short request body when $DISABLE_UPLOADS is set. When $CGI::PUTDATA_UPLOAD or an upload hook is set, read_postdata_putdata takes a request body that is not a form submission. With $CGI::D | 2026-11-09 19:16:44 | 2026-11-04 00:17:26 |
| CVE-2026-120650 | 6.5 | CGI versions before 5.00 for Perl allow memory, CPU and disk exhaustion via missing or unenforced request size, parameter and upload limits. $CGI::POST_MAX defaults to no limit, and when set is not enforced for chunked multipart bodies or for the bo | 2026-11-09 19:16:44 | 2026-11-04 00:17:26 |
| CVE-2026-120648 | 6.1 | CGI versions before 5.00 for Perl allow HTML injection via text containing --> in comment. Arguments are placed between <!-- and --> without escaping, so text containing --> closes the comment early. An application that passes request data to comme | 2026-11-09 19:16:44 | 2026-11-04 00:17:26 |
| CVE-2026-120638 | 6.1 | CGI versions before 5.00 for Perl allow open redirects via HTML entity decoding of the URL after application validation in redirect. redirect decodes HTML entities in its URL before writing the Location header, so a URL the application has already v | 2026-11-09 19:16:44 | 2026-11-04 00:17:25 |
| CVE-2026-120636 | 6.1 | CGI versions before 5.00 for Perl allow open redirects and script injection via URLs built from REQUEST_URI in url and start_form. url(-absolute=>1), url(-relative=>1) and the default start_form action are built from the client-supplied REQUEST_URI | 2026-11-09 19:16:44 | 2026-11-04 00:17:24 |
| CVE-2026-119079 | 7.5 | decode_sequence_of() in lib/krb5/asn.1/asn1_encode.c in MIT Kerberos 5 (aka krb5) 1.11 and later grows the decoded element array one entry at a time, which allows remote attackers to cause a denial of service (CPU consumption in the KDC) by sending a | 2026-11-09 19:16:43 | 2026-11-09 19:16:43 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/13335
Zapisa po stranici: