Rezultati pretraživanja za 'Od datuma: 03.11.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-101028 | - | Incorrect Authorization vulnerability in ash-project ash allows an actor to infer data in related records they cannot read via Ash.count/2, Ash.exists/2 and Ash.aggregate/3. Ash.Actions.Aggregate.run/4 (lib/ash/actions/aggregate.ex) applied only the | 2026-10-09 18:17:01 | 2026-10-09 07:17:17 |
| CVE-2025-6193 | 5.9 | A command injection vulnerability was discovered in the TrustyAI Explainability toolkit. Arbitrary commands placed in certain fields of a LMEValJob custom resource (CR) may be executed in the LMEvalJob pod's terminal. This issue can be exploited via | 2026-10-09 18:17:00 | 2025-06-20 16:15:29 |
| CVE-2026-106261 | 6.5 | Uninitialized resource in Video in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) | 2026-10-09 18:15:03 | 2026-10-06 19:17:53 |
| CVE-2026-106280 | 6.5 | Incorrect authorization in PermissionElement in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium) | 2026-10-09 18:12:46 | 2026-10-06 19:17:55 |
| CVE-2026-106289 | 6.5 | Missing authorization in FedCM in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium) | 2026-10-09 18:11:35 | 2026-10-06 19:17:56 |
| CVE-2026-106389 | 6.5 | Incorrect authorization in USB in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted Chrome extension. (Chromium security severity: Medium) | 2026-10-09 18:10:18 | 2026-10-06 19:18:08 |
| CVE-2026-106397 | 6.1 | Incorrect authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium) | 2026-10-09 18:09:29 | 2026-10-06 19:18:09 |
| CVE-2026-106422 | 4.3 | Incorrect authorization in API in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low) | 2026-10-09 18:06:39 | 2026-10-06 19:18:12 |
| CVE-2026-106505 | 7.7 | Backstage is an open framework for building developer portals. Prior to 1.14.6 and 1.15.4, the @backstage/plugin-techdocs-node package is affected by bypass of mkdocs configuration sanitizer in techdocs backend. Users with the ability to commit chang | 2026-10-09 17:58:21 | 2026-10-06 22:17:05 |
| CVE-2026-106216 | 5.4 | Cross-site request forgery in ReadingList in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium) | 2026-10-09 17:55:56 | 2026-10-06 19:17:48 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/12901
Zapisa po stranici: