Rezultati pretraživanja za 'Od datuma: 03.11.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-97257 | 8.8 | Deserialization of Untrusted Data vulnerability in PressTigers Simple Event Planner simple-event-planner allows Object Injection.This issue affects Simple Event Planner: from n/a through 1.5.7. | 2026-10-05 20:17:29 | 2026-10-05 20:17:29 |
| CVE-2026-95265 | - | Feehi CMS 2.1.1 contains a Server-Side Request Forgery (SSRF) vulnerability in the UEditor catchimage endpoint. The private-IP validation does not block loopback or link-local addresses, allowing an attacker to make the server probe internal HTTP ser | 2026-10-05 20:17:29 | 2026-10-05 20:17:29 |
| CVE-2026-95264 | - | Feehi CMS 2.1.1 is vulnerable to Directory Traversal. An authenticated backend user with article edit permission can delete arbitrary files writable by the PHP process. Article image metadata is used to construct a filesystem path and is passed to `u | 2026-10-05 20:17:29 | 2026-10-05 20:17:29 |
| CVE-2026-95263 | - | Feehi CMS 2.1.1 is vulnerable to Incorrect Access Control. A low-privilege backend administrator with administrator-update permission can change the password of the built-in super administrator account. The server does not enforce protection for this | 2026-10-05 20:17:29 | 2026-10-05 20:17:29 |
| CVE-2026-94201 | - | Ash stores :atom-typed attributes as strings and compares them as strings. When such an attribute is referenced in a filter, the comparison value is coerced through Ash.Type.Atom. Because the type defined no coerce/2 callback, coercion fell back to t | 2026-10-05 20:17:28 | 2026-10-05 20:17:28 |
| CVE-2026-93617 | 7.2 | Deserialization of Untrusted Data vulnerability in WP Sunshine Sunshine Photo Cart sunshine-photo-cart allows Object Injection.This issue affects Sunshine Photo Cart: from n/a through 3.7.1. | 2026-10-05 20:17:28 | 2026-10-05 20:17:28 |
| CVE-2026-93319 | - | A malicious external BuildKit frontend can send requests using the internal API that can create conditions for a data race that can cause the BuildKit daemon to panic. | 2026-10-05 20:17:28 | 2026-10-05 18:17:38 |
| CVE-2026-93318 | - | A malicious image can advertise DiffIDs from another image while containing different layer contents. In affected versions, BuildKit could use the advertised DiffIDs to derive cache and snapshot identity without validating that they matched the actua | 2026-10-05 20:17:28 | 2026-10-05 18:17:38 |
| CVE-2026-93317 | - | An unauthenticated attacker controlling a registry or OCI-layout blob source could provide blob contents that did not match the claimed digest. The resulting snapshot could be cached under that digest and reused by a later victim build, compromising | 2026-10-05 20:17:28 | 2026-10-05 18:17:37 |
| CVE-2026-94484 | 4.8 | Next.js is a React framework for building full-stack web applications. From 15.0.0 until 15.5.27 and 16.3.8, applications with a root-level catch-all page and statically generated or Incremental Static Regeneration routes can use a shared response ca | 2026-10-05 20:17:28 | 2026-10-02 16:16:51 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/13149
Zapisa po stranici: