Rezultati pretraživanja za 'Od datuma: 03.11.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-12626 | 7.2 | The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 28.2 via deserialization of untrusted input via the ‘value’ parameter. This makes it possib | 2026-10-11 17:17:03 | 2026-10-10 07:16:41 |
| CVE-2026-108503 | 3.3 | ZTE Z80 Ultra has an interface permission validation vulnerability. The callable functions provided by the system lack sufficient access control. An attacker can leverage these functions to read relevant information. | 2026-10-11 17:17:03 | 2026-10-10 07:16:41 |
| CVE-2026-108502 | 3.3 | ZTE Z80 Ultra contains an information disclosure vulnerability, through which third-party applications can read relevant information by hooking system APIs. | 2026-10-11 17:17:03 | 2026-10-10 07:16:40 |
| CVE-2026-108501 | 5.7 | ZTE Z80 Ultra has a system interface permission verification defect. The interface lacks necessary access control, and relevant information can be read by reflectively invoking the interface. | 2026-10-11 17:17:03 | 2026-10-10 04:18:10 |
| CVE-2026-107712 | 6.5 | The WP Booking System – Booking Calendar plugin for WordPress is vulnerable to time-based SQL Injection via the 'current_month' parameter in all versions up to, and including, 2.1.0.1 due to insufficient escaping on the user supplied parameter and la | 2026-10-11 17:17:02 | 2026-10-10 07:16:40 |
| CVE-2026-107645 | 9.1 | The Blocksy Companion plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 2.1.58 This is due to the implement_user_registration() AJAX handler explicitly disabling Dokan's vendor-registration nonce check (via | 2026-10-11 17:17:02 | 2026-10-10 04:18:10 |
| CVE-2026-106425 | 4.2 | Missing authorization in BrowserTag in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass site isolation via a crafted HTML page. (Chromium security sever | 2026-10-11 17:17:02 | 2026-10-06 19:18:12 |
| CVE-2026-106396 | 5.4 | Improper input validation in Omnibox in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: High) | 2026-10-11 17:17:02 | 2026-10-06 19:18:09 |
| CVE-2026-106369 | 4.2 | Missing authorization in Translate in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: High) | 2026-10-11 17:17:02 | 2026-10-06 19:18:05 |
| CVE-2026-104899 | 8.1 | The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.8.187 via the 'design_type' parameter parameter. This makes it possib | 2026-10-11 17:17:01 | 2026-10-10 06:16:40 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/13044
Zapisa po stranici: