Rezultati pretraživanja za 'Od datuma: 14.11.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2024-36057 | 9.8 | Koha Library before 23.05.10 fails to sanitize user-controllable filenames prior to unzipping, leading to remote code execution. The line "qx/unzip $filename -d $dirname/;" in upload-cover-image.pl is vulnerable to command injection via shell metacha | 2026-11-08 20:10:00 | 2026-04-07 16:16:21 |
| CVE-2024-14028 | 6.5 | Use after free vulnerability in Softing smartLink HW-DP or smartLink HW-PN webserver allows HTTP DoS. This issue affects: smartLink HW-DP: through 1.31 smartLink HW-PN: before 1.02. | 2026-11-08 20:10:00 | 2026-03-27 06:16:35 |
| CVE-2024-2104 | 8.8 | Due to improper BLE security configurations on the device's GATT server, an adjacent unauthenticated attacker can read and write device control commands through the mobile app service wich could render the device unusable. | 2026-11-08 20:10:00 | 2025-12-10 13:16:01 |
| CVE-2024-32388 | 5.3 | Due to a firewall misconfiguration, Kerlink devices running KerOS prior to 5.12 incorrectly accept specially crafted UDP packets. This allows an attacker to bypass the firewall and access UDP-based services that would otherwise be protected. | 2026-11-08 20:10:00 | 2025-12-01 16:15:49 |
| CVE-2024-32384 | 6.8 | Kerlink gateways running KerOS prior to version 5.10 expose their web interface exclusively over HTTP, without HTTPS support. This lack of transport layer security allows a man-in-the-middle attacker to intercept and modify traffic between the client | 2026-11-08 20:10:00 | 2025-12-01 16:15:49 |
| CVE-2024-5539 | - | The Access Control Bypass vulnerability found in ALC WebCTRL and Carrier i-Vu in versions up to and including 8.5 allows a malicious actor to bypass intended access restrictions and expose sensitive information via the web based building automation | 2026-11-08 20:10:00 | 2025-11-27 01:15:46 |
| CVE-2024-47856 | 9.8 | In RSA Authentication Agent before 7.4.7, service paths and shortcut paths may be vulnerable to path interception if the path has one or more spaces and is not surrounded by quotation marks. An adversary can place an executable in a higher-level dire | 2026-11-08 20:10:00 | 2025-11-24 22:15:46 |
| CVE-2024-8528 | - | Reflected XSS using a specific URL in Automated Logic WebCTRL and Carrier i-VU can allow delivery of malicious payload due to a specific GET parameter not being sanitized. | 2026-11-08 20:10:00 | 2025-11-19 14:15:57 |
| CVE-2024-8527 | - | Open Redirect in URL parameter in Automated Logic WebCTRL and Carrier i-Vu versions 6.0, 6.5, 7.0, 8.0, 8.5, 9.0 may allow attackers to exploit user sessions. | 2026-11-08 20:10:00 | 2025-11-19 14:15:56 |
| CVE-2024-44664 | 6.5 | PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the name, summary, review, quality, price, and value parameters in product-details.php. | 2026-11-08 20:10:00 | 2025-11-17 20:15:49 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/12991
Zapisa po stranici: