Rezultati pretraživanja za 'Od datuma: 14.12.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-114083 | 8.1 | Trigger.dev before 4.5.0-rc.3 contains a path traversal vulnerability in the api/v1/packets and api/v2/packets endpoints that allows authenticated tenants to escape their object key prefix through an unsanitized filename splat segment. Attackers hold | 2026-10-27 22:17:24 | 2026-10-21 01:17:32 |
| CVE-2026-114078 | 8.1 | Trigger.dev before 4.5.6 contains an authorization bypass vulnerability in DeleteTaskScheduleService and SetActiveOnTaskScheduleService that allows authenticated users to delete or disable other organizations' schedules. Attackers can send delete or | 2026-10-27 22:17:24 | 2026-10-21 01:17:32 |
| CVE-2026-114073 | 5.5 | Trigger.dev CLI before 4.5.9 contains an information disclosure vulnerability that exposes resolved environment secret values in debug deployment logs by serializing unredacted envVars. Attackers with access to terminal transcripts, CI debug logs, or | 2026-10-27 22:17:24 | 2026-10-21 01:17:31 |
| CVE-2026-114068 | 8.3 | Trigger.dev before 4.6.0 contains a missing authorization vulnerability in the waitpoint token wait endpoint that allows authenticated attackers to block runs belonging to other organizations. Attackers holding any secret API key can supply a victim | 2026-10-27 22:17:24 | 2026-10-21 01:17:30 |
| CVE-2026-114063 | 7.5 | SvelteKit (@sveltejs/kit) from 2.10.0 before 3.0.0 contains a path traversal vulnerability in the vite preview server on Windows that allows unauthenticated attackers to read files outside the prerendered output directory. Attackers who can reach the | 2026-10-27 22:17:24 | 2026-10-21 01:17:29 |
| CVE-2026-114058 | 4.3 | ArcadeDB from 26.2.1 before 26.10.1 contains a missing authorization vulnerability in the Bolt protocol handler that lets authenticated users read other databases' schema metadata. Attackers with credentials for one database can set the db field in R | 2026-10-27 22:17:24 | 2026-10-21 01:17:28 |
| CVE-2026-113743 | 7.5 | A weakness has been identified in Tenstorrent tt-metal up to 0.80.0. The affected element is the function load_hf_state_dict_filtered of the file models/tt_transformers/tt/load_checkpoints.py. This manipulation of the argument weight_map causes path | 2026-10-27 22:17:23 | 2026-10-21 02:17:06 |
| CVE-2026-114053 | 8.1 | vLLM from 0.7.3 before 0.31.0 forwards the request-supplied mm_processor_kwargs.code_revision to Transformers AutoProcessor.from_pretrained, letting clients select which revision of a model's dynamic processor code is imported when trust_remote_code | 2026-10-27 22:17:23 | 2026-10-21 01:17:28 |
| CVE-2026-114048 | 3.5 | WWBN AVideo before 24.0 contains a cross-site request forgery vulnerability in legacy endpoints like playlistStatus.php that bypass the .json.php-only autoCSRFGuard() check. Attackers can lure logged-in users to a page with an auto-submitting form to | 2026-10-27 22:17:23 | 2026-10-21 01:17:27 |
| CVE-2026-114043 | 6.5 | FreeRDP before 3.32.1 contains a heap-based out-of-bounds read in WinPR's clipboard PNG-to-CF_DIB synthesis because winpr_read_png_from_buffer() allocates a bit-packed buffer for PNGs with bit depth below 8, while winpr_bitmap_write_buffer() copies r | 2026-10-27 22:17:23 | 2026-10-21 01:17:26 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/12329
Zapisa po stranici: