Rezultati pretraživanja za 'Od datuma: 14.11.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-120310 | 3.1 | Parse Server before 8.6.109 and 9.0.0 before 9.10.6-alpha.1 returns stored field values in object update responses without checking read access, so clients whose class-level permissions or object ACLs allow update but not read can see object data. At | 2026-11-02 03:17:28 | 2026-11-02 03:17:28 |
| CVE-2026-120309 | 3.7 | Nuxt from 4.6.0 before 4.6.2 contains a route parameter confusion vulnerability in getRouterParam and getRouterParams that lets attackers return a parameter value different from the one h3 matched by sending paths containing an encoded question mark | 2026-11-02 03:17:28 | 2026-11-02 03:17:28 |
| CVE-2026-111274 | 5.5 | unarr through 1.1.1 contains a heap-based out-of-bounds read in zip_parse_extra_fields() in zip/parse-zip.c due to an incorrect ZIP64 extra field length check. Attackers can supply a crafted ZIP archive with 0xFFFFFFFF sentinel values and a truncated | 2026-11-02 03:17:28 | 2026-10-15 22:19:28 |
| CVE-2026-102560 | 8.6 | A flaw was found in libsoup. When the permessage-deflate WebSocket extension compresses a very large outgoing message, truncated size calculations used for GByteArray growth could wrap, causing zlib to write past the allocated buffer and resulting in | 2026-11-02 03:17:27 | 2026-09-29 18:17:08 |
| CVE-2026-102559 | 8.6 | A flaw was found in libsoup. When constructing a masked WebSocket client frame for a very large outgoing payload, size values passed to GByteArray allocation APIs could be truncated while the masking routine still used the full length, causing a heap | 2026-11-02 03:17:27 | 2026-09-29 18:17:08 |
| CVE-2026-102558 | 8.6 | A flaw was found in libsoup. When max-incoming-payload-size is unlimited (0), SoupWebsocketConnection could grow its incoming GByteArray based on an attacker-controlled frame length until the length wrapped, causing a heap buffer overflow while readi | 2026-11-02 03:17:27 | 2026-09-29 18:17:08 |
| CVE-2026-102557 | 8.6 | A flaw was found in libsoup. When reassembling fragmented WebSocket messages into a GByteArray, libsoup did not adequately cap total message size against the limits of the underlying buffer type. A remote peer could send fragments that caused size tr | 2026-11-02 03:17:27 | 2026-09-29 17:17:06 |
| CVE-2026-102556 | 8.6 | A flaw was found in libsoup. When handling an incoming WebSocket Pong frame, SoupWebsocketConnection emitted the ::pong signal with a GByteArray pointer even though the signal is declared to pass a GBytes. Applications connecting a handler that follo | 2026-11-02 03:17:25 | 2026-09-29 17:17:06 |
| CVE-2026-120323 | 5.0 | A security flaw has been discovered in samanhappy MCPHub up to 1.0.45/1.1.7. Impacted is an unknown function of the file src/utils/passthroughHeaders.ts. The manipulation of the argument passthroughHeaders results in information disclosure. The attac | 2026-11-02 02:18:47 | 2026-11-02 02:18:47 |
| CVE-2026-120322 | 9.0 | A vulnerability was identified in Termix-SSH Termix up to 2.9.2. This issue affects some unknown processing of the file /plugin-api/file-manager/transferToHost. The manipulation of the argument destPath leads to path traversal. The attack may be init | 2026-11-02 02:18:47 | 2026-11-02 02:18:47 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/12987
Zapisa po stranici: