Rezultati pretraživanja za 'Od datuma: 03.11.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-82043 | 5.3 | UTMStack before 11.2.16 contains an account enumeration vulnerability that allows unauthenticated attackers to determine registered email addresses by observing differing HTTP responses from the POST /api/account/reset-password/init endpoint. Attacke | 2026-10-02 21:16:56 | 2026-10-02 21:16:56 |
| CVE-2026-63177 | 7.1 | Malcolm is a network traffic analysis tool suite. Prior to version 26.07.0, role-based access control enforced in the Nginx OpenResty Lua layer evaluates the raw, unnormalized `ngx.var.request_uri`, while Nginx itself routes requests using the normal | 2026-10-02 21:16:56 | 2026-08-11 21:17:44 |
| CVE-2026-39718 | 8.8 | Cross-Site Request Forgery (CSRF) vulnerability in Webriti Wallstreet wallstreet allows Cross Site Request Forgery.This issue affects Wallstreet: from n/a through 2.8.6. | 2026-10-02 21:16:55 | 2026-10-02 20:17:02 |
| CVE-2026-51916 | 7.5 | TransformerOptimus SuperAGI v0.0.14 contains an incorrect access control vulnerability in delete_user_knowledge in superagi/controllers/knowledges.py. In affected source snapshots, POST /knowledges/delete/{knowledge_id} deletes the selected knowledge | 2026-10-02 21:16:55 | 2026-10-02 16:16:50 |
| CVE-2026-51899 | 4.3 | In SuperAGI v0.0.14 and prior, controller endpoints (/api/agents/create, /api/agents/schedule, /api/agents/delete, /api/agents/edit_schedule, /api/agents/stop_schedule) allow authenticated users from one organization to create, schedule, edit, stop, | 2026-10-02 21:16:55 | 2026-10-02 16:16:49 |
| CVE-2026-63134 | 5.4 | Malcolm is a network traffic analysis tool suite. Prior to version 26.07.0, `safe-extract.py` protects file extraction with libarchive's secure flags, but creates directory entries with a raw `os.makedirs(os.path.join(dest, entry.pathname))` that has | 2026-10-02 21:16:55 | 2026-08-11 21:17:44 |
| CVE-2026-63133 | 6.5 | Malcolm is a network traffic analysis tool suite. Prior to version 26.07.0, `safe-extract.py` extracts uploaded archives with no limit on entry count, directory depth, total entries, or output size. A small malicious archive containing a large number | 2026-10-02 21:16:55 | 2026-08-11 21:17:44 |
| CVE-2026-55676 | 8.8 | Malcolm is a network traffic analysis tool suite. The file-upload component (FilePond PHP backend) accepts uploads at `POST /server/php/submit.php` and stores them in a directory served by the same nginx and php-fpm instance. The allow-list that shou | 2026-10-02 21:16:55 | 2026-08-11 21:17:37 |
| CVE-2026-104871 | - | The Angular SSR is a server-rise rendering tool for Angular applications. Prior to versions 20.3.36, 21.2.23, and 22.1.7, the CommonEngine retrieveSSGPage prerendered-page retrieval logic in @angular/ssr/node, and in @angular/ssr for versions 17 thro | 2026-10-02 21:16:54 | 2026-10-02 20:17:00 |
| CVE-2026-104019 | 9.0 | OS command injection in the Studio Space startup validation script in Amazon SageMaker Distribution 2.x before 2.14.12, 3.x before 3.9.12, 4.0.x before 4.0.11, 4.1.x before 4.1.11, 4.2.x before 4.2.8, 4.3.x before 4.3.5, and 4.4.x before 4.4.3, as us | 2026-10-02 21:16:54 | 2026-10-02 20:17:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/12739
Zapisa po stranici: