Rezultati pretraživanja za 'Od datuma: 14.12.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2025-10992 | 5.0 | A vulnerability was determined in roncoo roncoo-pay up to 9428382af21cd5568319eae7429b7e1d0332ff40. Affected is an unknown function of the file /user/info/lookupList. Executing manipulation can lead to improper authorization. The attack may be perfor | 2026-10-11 20:10:00 | 2025-09-26 02:15:51 |
| CVE-2025-10752 | 4.3 | The OAuth Single Sign On – SSO (OAuth Client) plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 6.26.12. This is due to using a predictable state parameter (base64 encoded app name) without any ran | 2026-10-11 20:10:00 | 2025-09-26 02:15:51 |
| CVE-2025-10178 | 6.4 | The CM Business Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'cmbd_featured_image' shortcode in all versions up to, and including, 1.5.2 due to insufficient input sanitization and output escaping on use | 2026-10-11 20:10:00 | 2025-09-26 02:15:50 |
| CVE-2025-10989 | 6.5 | A security flaw has been discovered in yangzongzhuan RuoYi up to 4.8.1. This vulnerability affects unknown code of the file /system/role/authUser/selectAll. Performing manipulation of the argument userIds results in improper authorization. The attack | 2026-10-11 20:10:00 | 2025-09-26 01:15:36 |
| CVE-2025-10988 | 6.5 | A vulnerability was identified in YunaiV ruoyi-vue-pro up to 2025.09. This affects an unknown part of the file /crm/business/transfer. Such manipulation leads to improper authorization. It is possible to launch the attack remotely. The exploit is pub | 2026-10-11 20:10:00 | 2025-09-26 01:15:36 |
| CVE-2025-10987 | 6.5 | A vulnerability was determined in YunaiV yudao-cloud up to 2025.09. Affected by this issue is some unknown functionality of the file /crm/contact/transfer of the component HTTP Request Handler. This manipulation of the argument contactId causes impro | 2026-10-11 20:10:00 | 2025-09-26 00:15:37 |
| CVE-2025-10975 | 6.5 | A vulnerability was found in GuanxingLu vlarl up to 31abc0baf53ef8f5db666a1c882e1ea64def2997. This vulnerability affects the function experiments.robot.bridge.reasoning_server::run_reasoning_server of the file experiments/robot/bridge/reasoning_serve | 2026-10-11 20:10:00 | 2025-09-25 22:15:34 |
| CVE-2025-10974 | 6.5 | A vulnerability has been found in giantspatula SewKinect up to 7fd963ceb3385af3706af02b8a128a13399dffb1. This affects the function pickle.loads of the file /calculate of the component Endpoint. Such manipulation of the argument body_parts/point_cloud | 2026-10-11 20:10:00 | 2025-09-25 22:15:33 |
| CVE-2025-11005 | 9.8 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in TOTOLINK X6000R allows OS Command Injection.This issue affects X6000R: through V9.4.0cu.1458_B20250708. | 2026-10-11 20:10:00 | 2025-09-25 21:15:31 |
| CVE-2025-10973 | 7.5 | A flaw has been found in JackieDYH Resume-management-system up to fb6b857d852dd796e748ce30c606fe5e61c18273. Affected by this issue is some unknown functionality of the file /admin/show.php. This manipulation of the argument userid causes sql injectio | 2026-10-11 20:10:00 | 2025-09-25 21:15:30 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/12167
Zapisa po stranici: