Rezultati pretraživanja za 'Od datuma: 03.11.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-95342 | 4.3 | Missing authorization in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low) | 2026-10-01 15:05:29 | 2026-09-29 18:17:26 |
| CVE-2026-95344 | 8.0 | Race condition in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass site isolation via a crafted Chrome extension. (Chromium security severity: Medium) | 2026-10-01 15:05:09 | 2026-09-29 18:17:27 |
| CVE-2026-102584 | 4.3 | A flaw was found in Moodle. Due to a missing capability check, a low-privileged authenticated user can trigger the recalculation of grade penalties without holding the required permissions. This issue allows unauthorized users to modify grade penalty | 2026-10-01 14:48:32 | 2026-09-30 09:17:15 |
| CVE-2026-102585 | 4.3 | A flaw was found in Moodle. When enrolling a user into a course while assigning them to a group, the application does not verify whether the selected group actually belongs to that course. An authenticated user with teacher privileges could exploit t | 2026-10-01 14:47:35 | 2026-09-30 09:17:15 |
| CVE-2026-102578 | 5.5 | A flaw was found in Moodle. An authenticated attacker with access to the question bank web service can submit unsanitized input directly into database queries, resulting in a SQL (Structured Query Language) injection vulnerability. This issue could a | 2026-10-01 14:38:42 | 2026-09-30 09:17:14 |
| CVE-2026-102580 | 2.2 | A flaw was found in Moodle. An authenticated attacker can supply an improperly validated audience class name to the Report Builder component, allowing arbitrary class instantiation. This vulnerability enables the unauthorized creation of internal pro | 2026-10-01 14:36:39 | 2026-09-30 09:17:15 |
| CVE-2026-62063 | 5.4 | Missing Authorization vulnerability in Magepeople inc. WpTravelly tour-booking-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpTravelly: from n/a through 2.3.1. | 2026-10-01 14:34:35 | 2026-10-01 13:17:10 |
| CVE-2026-62061 | 5.3 | Authorization Bypass Through User-Controlled Key vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ProfileGrid: from n/a | 2026-10-01 14:34:35 | 2026-10-01 13:17:10 |
| CVE-2026-62060 | 7.6 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in captivateaudio Captivate Sync captivatesync-trade allows Blind SQL Injection.This issue affects Captivate Sync: from n/a through 3.3.2. | 2026-10-01 14:34:35 | 2026-10-01 13:17:10 |
| CVE-2026-62059 | 7.6 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ultimate Member Ultimate Member ultimate-member allows Blind SQL Injection.This issue affects Ultimate Member: from n/a through 2.13.1. | 2026-10-01 14:34:35 | 2026-10-01 13:17:10 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/12901
Zapisa po stranici: