Svi - CERT CVE

Rezultati pretraživanja za 'Od datuma: 14.12.2024.'

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2026-114376 6.5 A weakness has been identified in leomoon-studios wiki-go up to 1.9.1. Affected by this vulnerability is the function SaveHandler/SourceHandler of the file internal/handlers/editor.go of the component API. Executing a manipulation can lead to path tr 2026-10-28 02:17:06
CVE-2026-114362 6.5 A flaw has been found in HarnessRouter up to 0.31.12. This impacts an unknown function of the file gateway/app.py of the component Targets Test Endpoint. Executing a manipulation of the argument base_url can lead to server-side request forgery. The a 2026-10-28 02:17:06
CVE-2026-114267 7.5 A vulnerability was detected in SourceCodester Food Order Management System 1.0. Affected is an unknown function of the component Admin Endpoint. The manipulation results in missing authorization. The attack may be performed from remote. The exploit 2026-10-28 02:17:06
CVE-2026-114264 5.8 A security flaw has been discovered in ProjectWorlds Advanced Library Management System 1.0. The impacted element is an unknown function of the file edit_member.php. Performing a manipulation of the argument firstname/middlename/lastname/address/bran 2026-10-28 02:17:06
CVE-2026-114143 - toml-node is a TOML parser for Node.js and the browser. Prior to 5.0.1, toml.parse() repeatedly slices and rejoins every path prefix in lib/compiler.js while processing long dotted keys, table headers, array-of-tables headers, and inline-table keys i 2026-10-28 02:17:05
CVE-2026-114139 - Sentry-Javascript is an official Sentry SDKs for JavaScript. From 9.36.0 until 9.47.2, 10.75.2, and 11.0.0-rc.1, the webpack integration for @sentry/nextjs skips application middleware for every request path under a configured tunnelRoute, while the 2026-10-28 02:17:05
CVE-2026-114135 8.8 Jupyter Server is the backend for Jupyter web applications. From 2.0.0 until 2.6.0, enabling GatewayClient.url replaced the normal KernelWebsocketHandler with WebSocketChannelsHandler, which authenticated the user but did not call authorizer.is_autho 2026-10-28 02:17:05
CVE-2026-114130 - Nuxt is an open-source web development framework for Vue.js. Prior to 4.6.0, an incomplete fix for CVE-2026-53722 allows an application with pages disabled to render a script-capable URL through NuxtLink when attacker-controlled input bound to to is 2026-10-28 02:17:05
CVE-2026-114261 7.5 A vulnerability was found in MomoTommy file-management-system dc9ce1bf27f94b23d906cb1e86ce374dc94ca5df. This issue affects the function index/store/update/destroy of the file app/Http/Controllers/FileController.php of the component Files API. The man 2026-10-28 02:17:05
CVE-2026-114258 7.5 A vulnerability was detected in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. Affected by this issue is some unknown functionality of the file files.php of the component File Management. Performing a manipulatio 2026-10-28 02:17:05
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/12472
Zapisa po stranici: