Rezultati pretraživanja za 'Od datuma: 03.11.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-55083 | 9.1 | DHIS2 is a flexible information system for data capture, management, validation, analytics and visualization. From versions 2.42.0 to before 2.42.5.1, and from versions 2.43.0 to before 2.43.0.1, DHIS2 is vulnerable to remote code execution (RCE) via | 2026-10-02 18:53:46 | 2026-10-01 19:17:21 |
| CVE-2026-51922 | - | agentscope v1.0.20 contains code injection in execute_shell_command (src/agentscope/tool/_coding/_shell.py). Depending on the exposed entry, an attacker can trigger attacker-controlled code or command execution. | 2026-10-02 18:47:49 | 2026-10-02 16:16:51 |
| CVE-2026-93029 | 9.0 | There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Manage SSL Hosts interface. | 2026-10-02 18:47:49 | 2026-10-02 07:16:38 |
| CVE-2026-51882 | - | The OpenAI-compatible file upload endpoint `/v1/files` in Langchain-Chatchat 0.3.0 is vulnerable to path traversal. An attacker can write files to arbitrary locations outside the `openai_files` directory by crafting malicious filenames. | 2026-10-02 18:47:49 | 2026-10-01 22:17:03 |
| CVE-2026-104051 | 8.2 | PictShare before 3.7.1 contains an information disclosure vulnerability that allows unauthenticated attackers to obtain the secret delete_code and uploader metadata by calling the API::info() endpoint which returns the complete raw metadata object wi | 2026-10-02 18:47:49 | 2026-10-01 22:17:00 |
| CVE-2026-96780 | - | figlet.js is a FIG driver written in JavaScript that aims to implement the FIGfont specification. Prior to 1.11.3, text() and textSync() can enter an unbounded loop when whitespaceBreak is enabled and width is smaller than the rendered width of a sin | 2026-10-02 18:47:49 | 2026-10-01 21:17:26 |
| CVE-2026-104183 | 5.1 | stream-json is a micro-library of stream components for processing JSON and JSONC with a minimal memory footprint. Prior to 3.6.0, Assembler materializes object properties with plain assignment, so an input key named __proto__ invokes the inherited s | 2026-10-02 18:47:49 | 2026-10-01 21:17:19 |
| CVE-2026-104181 | 5.4 | Filament is a collection of full-stack components for accelerated Laravel development. From 4.0.0 until 4.13.3 and 5.8.3, app-based multi-factor authentication management actions do not consistently require confirmation of the current password. An at | 2026-10-02 18:47:49 | 2026-10-01 21:17:18 |
| CVE-2026-102370 | - | Kasa EC70 v4 and EC71 v4 do not logically disable the production debug interface at the firmware or chip level and do not lock the bootloader. Although the debug traces are physically severed during manufacturing, an attacker with physical access ca | 2026-10-02 18:47:49 | 2026-10-01 21:17:17 |
| CVE-2026-93832 | 4.4 | A component of one of the Motorola system applications was exported without permission, allowing for the revocation of runtime permissions from other apps. | 2026-10-02 18:47:49 | 2026-10-01 20:17:32 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/12739
Zapisa po stranici: