Rezultati pretraživanja za 'Od datuma: 14.11.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-125794 | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hupe13 Extension for Leaflet Map extensions-leaflet-map allows Stored XSS.This issue affects Extension for Leaflet Map: from n/a through 6.1.1. | 2026-11-13 16:17:55 | 2026-11-13 15:17:40 |
| CVE-2026-125783 | 7.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in madalin.ungureanu Custom Post Types and Custom Fields creator – WCK wck-custom-fields-and-custom-post-types-creator allows Reflected XSS.This issue | 2026-11-13 16:17:54 | 2026-11-13 15:17:40 |
| CVE-2026-125759 | 7.5 | Nango before 0.71.3 contains an sql injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL by supplying a crafted task group key to the orchestrator API. Attackers can send a malicious group.key to POST /v1/immediate, | 2026-11-13 16:17:53 | 2026-11-10 16:17:23 |
| CVE-2026-125755 | 6.5 | Nodemailer 3.0.0 before 10.4.1 contains an address parsing flaw in addressparser that truncates domains at folding whitespace or comments before a dot, allowing attackers to bypass recipient domain restrictions. Attackers can submit crafted to, cc, b | 2026-11-13 16:17:52 | 2026-11-10 16:17:22 |
| CVE-2026-125751 | 3.1 | Meteroid before 2.2.0 contains an authorization bypass vulnerability in the ApiTokensService GetApiTokenById gRPC handler that fails to apply the caller's tenant context. Authenticated users with settings:read permission can supply another tenant's A | 2026-11-13 16:17:51 | 2026-11-10 16:17:21 |
| CVE-2026-125747 | 5.4 | ZenTao PMS through 22.7 contains a missing object-level authorization vulnerability in module/build/control.php that allows authenticated users to modify builds in projects they do not belong to. Attackers holding build privileges in any project can | 2026-11-13 16:17:50 | 2026-11-10 16:17:20 |
| CVE-2026-125452 | 7.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Denishua WPJAM Basic wpjam-basic allows Reflected XSS.This issue affects WPJAM Basic: from n/a through 7.1.2. | 2026-11-13 16:17:49 | 2026-11-13 15:17:39 |
| CVE-2026-125340 | 4.5 | Winter CMS is a content management system built on the Laravel PHP framework. From 1.0.420 until 1.2.14, the backend Table widget partial modules/backend/widgets/table/partials/_table.php emits the search query parameter without HTML encoding inside | 2026-11-13 16:17:48 | 2026-11-10 20:19:08 |
| CVE-2026-125336 | 7.4 | Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.3, pki.verifyCertificateChain() in lib/x509.js does not decode or enforce the X.509 nameConstraints extension while validating certifica | 2026-11-13 16:17:47 | 2026-11-10 19:21:11 |
| CVE-2026-125328 | 5.8 | pgEdge Go LLM Library provides a unified Go interface for multiple LLM providers with streaming, tool calling, retries, and an HTTP and server-sent events proxy. From 0.1.0 until 0.2.0, GET /v1/health in llm/proxy/handlers.go uses handleHealth to pin | 2026-11-13 16:17:46 | 2026-11-10 19:21:10 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/13309
Zapisa po stranici: