Rezultati pretraživanja za 'Od datuma: 03.11.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-82559 | - | Insufficient session expiration in Apache Wicket. org.apache.wicket.protocol.ws.WebSocketSettings#newWebSocketRequest() wraps the WebSocket upgrade request in an org.apache.wicket.protocol.ws.api.ServletRequestCopy, which is kept for the life of the | 2026-11-01 22:17:47 | 2026-11-01 22:17:47 |
| CVE-2026-82558 | - | Missing authorization in Apache Wicket. org.apache.wicket.protocol.ws.api.WebSocketBehavior, through which Wicket's native WebSocket support hands a message sent by the client to the application, calls its onMessage() callbacks without checking whet | 2026-11-01 22:17:47 | 2026-11-01 22:17:47 |
| CVE-2026-82557 | - | Missing authorization in Apache Wicket. org.apache.wicket.markup.html.form.Form resolves the component that submitted a form from the request parameters in Form#onRequest() and passes the result directly to Form#onFormSubmitted(IFormSubmitter). The | 2026-11-01 22:17:46 | 2026-11-01 22:17:46 |
| CVE-2026-82115 | - | Missing authorization in Apache Wicket. org.apache.wicket.protocol.ws.api.WebSocketMessageBroadcastHandler, the request handler Wicket's native WebSocket support uses to deliver an incoming frame, resolves the shared resource named by the client's h | 2026-11-01 22:17:46 | 2026-11-01 22:17:46 |
| CVE-2026-120274 | 5.8 | A vulnerability was identified in beecue FastBee up to 2.1.0. Affected by this issue is some unknown functionality of the file /iot/script of the component Groovy Script Executor. The manipulation leads to code injection. The attack is possible to be | 2026-11-01 21:17:09 | 2026-11-01 21:17:08 |
| CVE-2026-120242 | 3.3 | A security flaw has been discovered in Ruijie RG-ES205GC, RG-ES206GC-P, RG-ES208GC, RG-ES210GC-LP and RG-ES210GS-P ESW_1.0(1)B1P48. The affected element is an unknown function of the file set_cloud_serverUrl.cgi of the component Cloud Management. The | 2026-11-01 19:16:59 | 2026-11-01 19:16:59 |
| CVE-2026-120241 | 7.8 | A vulnerability was identified in Ruijie RG-ES205GC, RG-ES206GC-P, RG-ES208GC, RG-ES210GC-LP and RG-ES210GS-P ESW_1.0(1)B1P48. Impacted is an unknown function of the file httpupg.cgi of the component Local Firmware Upgrade Interface. The manipulation | 2026-11-01 19:16:59 | 2026-11-01 19:16:59 |
| CVE-2026-120240 | 9.0 | A vulnerability was determined in WAVLINK WN553X1-B V260403_2.0.0. This issue affects the function sub_41A748 of the file /bin/ioos of the component WireGuard CLI Group Handler. Executing a manipulation of the argument group_id/group_name can lead to | 2026-11-01 19:16:57 | 2026-11-01 19:16:57 |
| CVE-2026-96554 | 6.4 | The BuddyBoss Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Group Name in all versions up to, and including, 3.6.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated a | 2026-11-01 18:18:14 | 2026-10-31 10:16:38 |
| CVE-2026-94361 | 5.3 | The Payable Payment Gateway for WooCommerce WordPress plugin before 1.3.1 does not verify the authenticity of an incoming payment notification before marking a WooCommerce order paid or failed, allowing unauthenticated attackers to change the payment | 2026-11-01 18:18:14 | 2026-10-31 06:16:35 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/13471
Zapisa po stranici: