Rezultati pretraživanja za 'Od datuma: 03.11.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-71930 | 7.2 | Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the setTime function. The vulnerability is caused by insufficient filtering of the username and password fields before command execution. A remote attacker can trigger t | 2026-10-12 22:10:00 | 2026-08-24 18:17:08 |
| CVE-2026-71929 | 7.2 | Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the setDevProto function. The vulnerability is caused by insufficient filtering of the username and password fields before command execution. A remote attacker can trigg | 2026-10-12 22:10:00 | 2026-08-24 18:17:08 |
| CVE-2026-71928 | 7.2 | Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the fdftDevice function. The vulnerability is caused by insufficient filtering of the username and password fields before command execution. A remote attacker can trigge | 2026-10-12 22:10:00 | 2026-08-24 18:17:08 |
| CVE-2026-71927 | 7.2 | Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the rebDevice function. The vulnerability is caused by insufficient filtering of the username and password fields before command execution. A remote attacker can trigger | 2026-10-12 22:10:00 | 2026-08-24 18:17:08 |
| CVE-2026-71926 | 7.2 | Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the setDevice function. The vulnerability is caused by insufficient sanitization of the username, password, and location fields before command execution. A remote attack | 2026-10-12 22:10:00 | 2026-08-24 18:17:07 |
| CVE-2026-71925 | 7.2 | Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the getDetail function. The vulnerability is caused by insufficient filtering of the username and password fields before command execution. A remote attacker can trigger | 2026-10-12 22:10:00 | 2026-08-24 18:17:07 |
| CVE-2025-15668 | 1.7 | A vulnerability was identified in GPAC up to b40ce70f5. This issue affects the function sgpd_del_entry of the file src/isomedia/box_code_base.c of the component MP4Box. Such manipulation of the argument data leads to heap-based buffer overflow. Local | 2026-10-12 22:10:00 | 2026-07-06 12:16:39 |
| CVE-2025-71358 | 8.1 | picklescan before 0.0.29 fails to detect malicious pickle files that exploit idlelib.autocomplete.AutoComplete.get_entity function in reduce methods. Attackers can embed undetected code in pickle files that executes arbitrary commands when loaded by | 2026-10-12 22:10:00 | 2026-06-22 22:16:45 |
| CVE-2025-71344 | 8.1 | picklescan before 0.0.30 (affected versions 0.0.26 and earlier) fails to detect the ensurepip._run_pip built-in function when scanning pickle files, allowing attackers to execute arbitrary code. Malicious pickle files embedding ensurepip._run_pip cal | 2026-10-12 22:10:00 | 2026-06-22 22:16:45 |
| CVE-2025-71339 | 8.1 | Picklescan before 0.0.33 fails to detect the numpy.f2py.crackfortran._eval_length gadget in pickle __reduce__ methods, allowing arbitrary code execution. Attackers can craft malicious pickle files that execute arbitrary Python code when loaded by vic | 2026-10-12 22:10:00 | 2026-06-22 22:16:45 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/13310
Zapisa po stranici: