Svi - CERT CVE

Rezultati pretraživanja za 'Od datuma: 14.11.2024.'

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2026-124554 7.5 A security flaw has been discovered in JeecgBoot 3.9.5. This affects an unknown part of the file /jeecg-boot/drag/onlDragDatasetHead/getAllChartData of the component JimuBI. Performing a manipulation of the argument params results in sql injection. R 2026-11-09 02:16:59
CVE-2026-124509 7.5 A vulnerability was identified in floci-io Floci up to 2.1.0. The affected element is the function S3Destination.bucketName of the file services/firehose/model/DeliveryStreamDescription.java of the component S3 Destination Configuration Handler. Such 2026-11-09 02:16:59
CVE-2026-124508 5.0 A vulnerability was determined in floci-io Floci up to 2.4.0. Impacted is the function BuildspecParser.parseArtifacts of the file src/main/java/io/github/hectorvent/floci/services/codebuild/CodeBuildJsonHandler.java of the component Artifact Handler. 2026-11-09 02:16:59
CVE-2026-89058 7.4 A flaw was found in RESTEasy's CorsFilter, which, when configured to allow all origins ("*"), reflects the request's Origin header back in the Access-Control-Allow-Origin response together with Access-Control-Allow-Credentials: true. This permissive 2026-11-09 02:16:59
CVE-2026-116501 8.4 IBM Qiskit SDK 2.4.0 through 2.6.1 could allow a local attacker to execute arbitrary code due to an out-of-bounds write caused by improper input validation when accessing a corrupted unitary matrix. 2026-11-09 02:16:58
CVE-2026-116499 8.4 IBM Qiskit SDK 1.4.2 through 2.6.2 could allow a local attacker to execute arbitrary code due to deserialization of untrusted data. 2026-11-09 02:16:58
CVE-2026-110273 8.8 IBM TRIRIGA Application Platform 5.0.0 through 5.0.9 IBM TRIRIGA could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command. 2026-11-09 02:16:58
CVE-2026-124507 5.0 A vulnerability was found in conductor-oss conductor up to 3.32.4/3.33.0/3.34.0-rc3/4.0.0-alpha.1. This issue affects the function WorkflowSystemTask.start of the file PlannerContextFetchTask.java of the component PLANNER_CONTEXT_FETCH Task Handler. 2026-11-09 01:17:03
CVE-2026-82418 9.8 IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote attacker to execute arbitrary code due to a use-after-free vulnerability. 2026-11-09 01:17:03
CVE-2026-124506 5.0 A vulnerability has been found in Dianping CAT 3.0.0/3.1.0/4.0-RC1. This vulnerability affects the function Model.getDomain of the file WEB-INF/tags/hourlyReport.tag of the component Report Handler. The manipulation of the argument domain leads to cr 2026-11-09 01:17:02
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/13013
Zapisa po stranici: