Rezultati pretraživanja za 'Od datuma: 14.12.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-119187 | 7.5 | Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affected implementation used forge.tls.createConnection(), TLS record processing, process() to process the relevant input or secu | 2026-10-29 20:17:29 | 2026-10-29 20:17:29 |
| CVE-2026-118081 | 8.8 | Contributor PHP Object Injection in 10Web Social Photo Feed <= 1.5.6 versions. | 2026-10-29 20:17:29 | 2026-10-29 16:18:02 |
| CVE-2026-118076 | 8.8 | Contributor PHP Object Injection in Frisbii Pay <= 1.8.19 versions. | 2026-10-29 20:17:29 | 2026-10-29 16:18:02 |
| CVE-2026-116868 | 8.8 | Subscriber PHP Object Injection in BuddyPress Xprofile Custom Field Types <= 1.3.1 versions. | 2026-10-29 20:17:29 | 2026-10-29 16:18:01 |
| CVE-2026-118097 | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Flash & HTML5 Video html5-video-player allows Stored XSS.This issue affects Flash & HTML5 Video: from n/a through 2.14.0. | 2026-10-29 20:17:29 | 2026-10-29 15:17:21 |
| CVE-2026-116197 | 2.6 | Edgeless Systems Contrast from 1.21.0 before 1.25.0 contains a non-deterministic registry selection flaw in imagepuller that can prefer wildcard configuration entries over concrete domain matches. When a pull configuration lists both a concrete domai | 2026-10-29 20:17:28 | 2026-10-25 14:17:00 |
| CVE-2026-116193 | 5.3 | Rclone from 1.64.0 before 1.75.2 contains an authentication bypass vulnerability in serve webdav that lets unauthenticated attackers skip authentication by sending OPTIONS requests. Attackers can probe arbitrary paths and compare Allow header values | 2026-10-29 20:17:28 | 2026-10-25 14:16:59 |
| CVE-2026-116189 | 7.5 | rclone from 1.55.0 before 1.75.2 contains a signature verification bypass in stable selfupdate that trusts checksums from unsigned bytes preceding the PGP-clearsigned SHA256SUMS block. Attackers controlling the release distribution path can prepend a | 2026-10-29 20:17:28 | 2026-10-25 14:16:59 |
| CVE-2026-116181 | 6.5 | vLLM from 0.20.1 before 0.29.0 contains an improper input validation vulnerability that allows remote attackers to crash the engine by supplying out-of-vocabulary stop_token_ids. Attackers can send OpenAI chat, completion, generate, or batch requests | 2026-10-29 20:17:28 | 2026-10-25 14:16:57 |
| CVE-2026-116177 | 7.5 | vLLM from 0.10.2 before 0.25.0 contains an uncontrolled resource consumption vulnerability that allows unauthenticated attackers to exhaust memory because the Nemotron-VL processors globally set Image.MAX_IMAGE_PIXELS to None. Attackers can submit a | 2026-10-29 20:17:28 | 2026-10-25 14:16:57 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/12576
Zapisa po stranici: