Rezultati pretraživanja za 'Od datuma: 03.11.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-106506 | 5.3 | Backstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolder-backend package is affected by improper input validation in scaffolder task list ordering. An authenticated Backstage user with permission | 2026-10-09 17:50:13 | 2026-10-06 22:17:05 |
| CVE-2026-106507 | 5.3 | Backstage is an open framework for building developer portals. Prior to 1.15.4, the @backstage/plugin-techdocs-node package is affected by techdocs arbitrary file read via mkdocs snippets. Unsafe path resolution in TechDocs source tree handling allow | 2026-10-09 17:49:24 | 2026-10-06 22:17:06 |
| CVE-2026-106508 | 5.3 | Backstage is an open framework for building developer portals. Prior to 1.15.4, the @backstage/plugin-techdocs-node package is affected by potential file exposure through local techdocs publisher. When using the local TechDocs publisher (techdocs.pub | 2026-10-09 17:44:55 | 2026-10-06 22:17:06 |
| CVE-2026-108093 | 5.5 | A flaw was found in GIMP. The XCF loader processes image-simulation-intent and image-simulation-bpc parasites without ensuring the parasite data is present before dereferencing it. Opening a specially crafted XCF file with a zero-size simulation para | 2026-10-09 17:42:00 | 2026-10-09 17:16:46 |
| CVE-2026-75347 | 7.5 | EIPStackGroup OpENer v2.3 and master up to commit 76b95cf contain an expired pointer dereference vulnerability in the EtherNet/IP Common Packet Format (CPF) handling logic. This allows a remote attacker to cause a denial of service. | 2026-10-09 17:41:47 | 2026-10-09 17:16:48 |
| CVE-2026-108159 | 7.5 | AstronRPA through 1.1.6 contains a cross-site scripting vulnerability in the desktop client's smart-component chat that allows remote attackers to execute OS commands by abusing unsanitized LLM output rendered via v-html. Attackers can embed prompt-i | 2026-10-09 17:41:47 | 2026-10-09 17:16:47 |
| CVE-2026-108156 | 7.1 | LobsterAI 2026.5.27 through 2026.9.23 contains an external control of file path vulnerability in the skills:delete IPC handler that trusts the openclawSourceDir value from a skill's _meta.json during uninstall. Attackers who convince a user to instal | 2026-10-09 17:41:47 | 2026-10-09 17:16:46 |
| CVE-2026-107815 | 8.5 | MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the CONNECT engine's DOS table type used an incorrect boundary check that permitted a one-byte null write beyond a | 2026-10-09 17:41:29 | 2026-10-09 17:16:45 |
| CVE-2025-61560 | - | A race condition vulnerability in the SessionManager of CNCF: Cloud Native Computing Foundation Argo CD v3.0.6 allows attackers to bypass rate limiting and perform a brute force attack via repeated crafted requests. | 2026-10-09 17:41:15 | 2026-10-09 17:16:41 |
| CVE-2026-20589 | 6.7 | In venc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11 | 2026-10-09 17:37:50 | 2026-10-05 02:16:54 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/12901
Zapisa po stranici: