Rezultati pretraživanja za 'Od datuma: 03.11.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-107813 | 8.8 | Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, the api/cluster router exposes node and namespace mutation operations and cluster-wide Nginx reload or restart operations with AuthRequired but without RequireSecureSe | 2026-10-09 18:17:02 | 2026-10-09 16:17:26 |
| CVE-2026-107808 | 8.1 | Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, POST /api/login checks EnabledOTP but does not require a WebAuthn assertion when EnabledPasskey is true and no TOTP secret is configured. A passkey-only account is the | 2026-10-09 18:17:02 | 2026-10-09 16:17:25 |
| CVE-2026-107807 | 8.8 | Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, Nginx UI accepts the Node.Secret master credential through the node_secret query parameter in HTTP and WebSocket authentication paths instead of requiring the X-Node-S | 2026-10-09 18:17:02 | 2026-10-09 16:17:25 |
| CVE-2026-107783 | 5.9 | Insertion of sensitive information into log file in AWS Tools for PowerShell before 5.0.306 might allow local users to recover an IAM user's cleartext AWS Management Console password from command output and log artifacts. To remediate this issue, | 2026-10-09 18:17:02 | 2026-10-09 16:17:24 |
| CVE-2026-107803 | 6.5 | ProcessMaker is an open source workflow management software suite. Prior to 2026.14.3, the `GET /api/1.0/tasks` endpoint in ProcessMaker is vulnerable to SQL injection through the order_by parameter because `ProcessMaker\Traits\TaskControllerIndexMet | 2026-10-09 18:17:02 | 2026-10-09 14:17:19 |
| CVE-2026-106155 | 8.9 | In Progress® Telerik® Report Server prior to version 12.2.26.1007, a stored cross-site scripting vulnerability in the shared reporting engine allows an authenticated report author to embed javascript: or vbscript: URLs in report navigation actions or | 2026-10-09 18:17:02 | 2026-10-09 08:16:54 |
| CVE-2026-102554 | - | Allocation of resources without limits or throttling (CWE-770) during Java object deserialization in Google Guava versions 4.0 through 33.7.1 allows an attacker to cause a Denial of Service via OutOfMemoryError. When deserializing CompactHashMap, Com | 2026-10-09 18:17:01 | 2026-10-09 16:17:20 |
| CVE-2026-104081 | 8.1 | KodExplorer before 4.55 contains a path traversal vulnerability in the unzip_pre_name() function within app/function/helper.function.php, where a single non-recursive str_replace() sanitization pass can be bypassed using crafted filenames like "..../ | 2026-10-09 18:17:01 | 2026-10-09 15:17:06 |
| CVE-2026-105877 | - | Insertion of Sensitive Information Into Sent Data vulnerability in QuarkA QA Analytics qa-heatmap-analytics allows Retrieve Embedded Sensitive Data.This issue affects QA Analytics: from n/a through 5.3.0.0. | 2026-10-09 18:17:01 | 2026-10-09 13:17:09 |
| CVE-2026-106145 | 7.1 | In Progress® Telerik® Report Server prior to version 12.2.26.1007, incorrect privilege assignment in the service-agent SignalR hub allows an authenticated user, including a low-privilege or guest account with a valid bearer token, to register as a tr | 2026-10-09 18:17:01 | 2026-10-09 08:16:54 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/12901
Zapisa po stranici: