Rezultati pretraživanja za 'Od datuma: 01.11.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-78112 | 6.5 | A flaw has been found in itsourcecode Hospital Management System Project in PHP 1.0. This impacts an unknown function of the file /viewservicetype.php. This manipulation of the argument delid causes sql injection. The attack may be initiated remotely | 2026-10-12 16:10:00 | 2026-08-23 10:16:28 |
| CVE-2026-77116 | 4.3 | Brave Popup Builder (slug: brave-popup-builder) has a broken access control issue in versions through 0.8.5. Any logged-in user - Subscriber or WooCommerce Customer is enough — can read popup content they shouldn't have access to by passing a post ID | 2026-10-12 16:10:00 | 2026-08-23 06:17:27 |
| CVE-2026-77115 | 7.1 | Brave Popup Builder (brave-popup-builder) up to version 0.8.5 reflects UTM query parameters into popup form HTML without escaping them. | 2026-10-12 16:10:00 | 2026-08-23 06:17:27 |
| CVE-2026-77003 | 2.7 | The Content Mask WordPress plugin before 1.8.5.5 does not check the capability required to publish the post type being created, allowing users with a role as low as Contributor to publish posts and pages on the site without holding the publish capabi | 2026-10-12 16:10:00 | 2026-08-23 06:17:23 |
| CVE-2026-14853 | 4.3 | The WooCommerce Bookings WordPress plugin before 3.9.0 does not perform a capability check on one of its AJAX actions, and its nonce check can be bypassed by omitting the token, allowing users with Subscriber-level access and above to create draft bo | 2026-10-12 16:10:00 | 2026-08-23 06:17:16 |
| CVE-2026-13598 | 9.8 | The RestrictMate WordPress plugin before 1.3.0 does not restrict the user role supplied during account registration, allowing unauthenticated attackers to create a new administrator account and gain a logged-in administrator session, leading to full | 2026-10-12 16:10:00 | 2026-08-23 06:16:19 |
| CVE-2026-78063 | 6.5 | A security flaw has been discovered in Tenda CH22 1.0.0.1. The impacted element is the function formeditFileName of the file /goform/editFileName. The manipulation of the argument editNameMit results in command injection. The attack can be launched r | 2026-10-12 16:10:00 | 2026-08-23 05:16:53 |
| CVE-2026-78062 | 7.5 | A vulnerability was identified in vas3k TaxHacker up to 0.8.2. The affected element is the function envSchema.parse of the file lib/config.ts of the component JWT Secret Handler. The manipulation of the argument BETTER_AUTH_SECRET leads to hard-coded | 2026-10-12 16:10:00 | 2026-08-23 05:16:52 |
| CVE-2026-78061 | 6.5 | A vulnerability was determined in vas3k TaxHacker up to 0.8.2. Impacted is the function buildImapConfig of the file lib/email-sync/imap-client.ts of the component Email Sync. Executing a manipulation of the argument host/port can lead to server-side | 2026-10-12 16:10:00 | 2026-08-23 04:17:09 |
| CVE-2026-78060 | 5.0 | A vulnerability was found in SourceCodester Stock Management System 1.0. This issue affects some unknown processing of the file /php_action/getOrderReport.php. Performing a manipulation of the argument clientName/clientContact results in cross site s | 2026-10-12 16:10:00 | 2026-08-23 04:17:08 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/12764
Zapisa po stranici: