Rezultati pretraživanja za 'Od datuma: 14.11.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-78250 | 4.0 | A vulnerability was identified in bytebot-ai bytebot 0.0.1. The affected element is an unknown function of the component Agent Execution Workflow. Such manipulation leads to infinite loop. The attack may be performed from remote. The exploit is publi | 2026-10-12 15:10:00 | 2026-08-24 14:17:04 |
| CVE-2026-78248 | 7.5 | A vulnerability was determined in SourceCodester Simple Online Food Ordering System 1.0. Impacted is an unknown function of the file /fos/admin/ajax.php?action=save_settings. This manipulation of the argument Name causes sql injection. The attack is | 2026-10-12 15:10:00 | 2026-08-24 14:17:04 |
| CVE-2026-77995 | - | Joomla Extension - miniorange.com - Arbitrary account takeover in miniOrange OAuth Client < 3.2.0, OAuth Single Sign-On – OIDC SSO < 1.2.2, Login with Keycloak OAuth Single Sign-On (SSO) < 1.2.2, Single Sign-On for Educational Institutes < 1.2.2 - Th | 2026-10-12 15:10:00 | 2026-08-24 14:17:03 |
| CVE-2026-76847 | 8.8 | act starts an HTTP Artifacts V4 backend whenever a workflow uses actions/upload-artifact@v4 or actions/download-artifact@v4. The control-plane RPCs of that backend, including CreateArtifact, GetSignedArtifactURL, ListArtifacts, FinalizeArtifact and D | 2026-10-12 15:10:00 | 2026-08-24 14:17:02 |
| CVE-2026-76845 | 6.5 | adm-zip 0.5.9 through 0.6.0 follows symbolic links at the extraction destination. Utils.sanitize in util/utils.js enforces containment by comparing only the string form of an archive entry name against the resolved extraction root, and Utils.writeFil | 2026-10-12 15:10:00 | 2026-08-24 14:17:02 |
| CVE-2026-76843 | 7.8 | The official Flair wheels for 0.15.0 and 0.15.1 still contain flair/models/clustering.py, whose ClusteringModel.load static method returns pickle.loads(joblib.load(str(model_file))) and so executes arbitrary Python while loading a model file. Loading | 2026-10-12 15:10:00 | 2026-08-24 14:17:02 |
| CVE-2026-76841 | 8.8 | Xinference loads models with Hugging Face remote code execution unconditionally enabled, and before version 2.12.0 exposes no setting to disable it. Six loader call sites pass trust_remote_code=True as a literal or as an unconditional default: Rerank | 2026-10-12 15:10:00 | 2026-08-24 14:17:01 |
| CVE-2026-59568 | 9.1 | Multiple vulnerabilities on affected versions of Zscaler Client Connector allow remote code execution, giving an unauthenticated, unprivileged user the ability to execute arbitrary code in the ZCC context. | 2026-10-12 15:10:00 | 2026-08-24 14:16:56 |
| CVE-2026-59567 | 8.8 | Multiple vulnerabilities on affected versions of Zscaler Client Connector allow local privilege escalation, giving an unprivileged user the ability to execute arbitrary code in a privileged context. | 2026-10-12 15:10:00 | 2026-08-24 14:16:56 |
| CVE-2026-59566 | 8.4 | A locally exploitable buffer overflow bug can cause a local denial-of-service attack on affected versions of Zscaler Client Connector on Android and ChromeOS. | 2026-10-12 15:10:00 | 2026-08-24 14:16:55 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/12577
Zapisa po stranici: