Rezultati pretraživanja za 'Od datuma: 03.11.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-105229 | 7.5 | A weakness has been identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This issue affects some unknown processing of the file signup.php of the component User Regist | 2026-10-05 15:17:19 | 2026-10-05 05:17:03 |
| CVE-2026-105219 | 7.5 | Mammoth.js 1.3.0 before 1.12.3 contains a regular expression denial of service vulnerability in the style map tokeniser in lib/styles/parser/tokeniser.js due to overlapping regex alternatives. Attackers can supply a crafted .docx with an unterminated | 2026-10-05 15:17:19 | 2026-10-04 18:16:34 |
| CVE-2026-105218 | 7.4 | gopay before 1.5.119 disables TLS certificate verification in defaultClient() in pkg/xhttp/client.go, allowing man-in-the-middle attackers to impersonate payment provider APIs. Attackers can present any certificate to read merchant credentials, signa | 2026-10-05 15:17:19 | 2026-10-04 18:16:34 |
| CVE-2026-105212 | 7.5 | ZITADEL 3.x before 3.4.14 and 4.x before 4.16.2 contains an authentication bypass in the hosted Login V1 and Login V2 UIs that accepts passkey or other authenticator enrollment on identify-only login sessions, before any primary factor is verified. U | 2026-10-05 15:17:19 | 2026-10-04 15:16:32 |
| CVE-2026-105211 | 8.1 | ZITADEL before 4.17.1 contains an authentication bypass vulnerability in Login V2 that allows unauthenticated attackers to take over accounts by obtaining OTP codes via the returnCode delivery type. Attackers knowing a login name of a victim with OTP | 2026-10-05 15:17:19 | 2026-10-04 15:16:32 |
| CVE-2026-105187 | 6.5 | A vulnerability has been found in itsourcecode Online Admission System 1.0. Affected is an unknown function of the file /admin/key.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has | 2026-10-05 15:17:18 | 2026-10-05 04:17:07 |
| CVE-2026-105183 | 7.5 | A weakness has been identified in itsourcecode Online Admission System 1.0. The affected element is an unknown function of the file /admin/confirm.php. This manipulation of the argument schedid causes sql injection. It is possible to initiate the att | 2026-10-05 15:17:18 | 2026-10-05 03:16:38 |
| CVE-2026-105167 | 7.5 | A vulnerability was determined in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The impacted element is an unknown function of the file admin/donate.php. Executing a manipula | 2026-10-05 15:17:18 | 2026-10-04 23:16:59 |
| CVE-2026-105206 | - | ZITADEL 3.0.0 through 3.4.15 and 4.x before 4.17.3 contains an incorrect authorization flaw in the User Service API, which verifies user.read against the caller's organization rather than the organization owning the target user. An authenticated memb | 2026-10-05 15:17:18 | 2026-10-04 15:16:31 |
| CVE-2026-105128 | 5.4 | LaraDashboard before 1.4.8 contains an open redirect vulnerability that allows remote attackers to redirect users by supplying an unvalidated redirect_url parameter to EmailTemplateController builder and builderEdit. Attackers can send crafted builde | 2026-10-05 15:17:17 | 2026-10-04 00:16:36 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/12739
Zapisa po stranici: