Rezultati pretraživanja za 'Od datuma: 15.12.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-63489 | 7.6 | Yeti bridges the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline. In version 2.5.0 and earlier, YETI directly interpolates user-controlled sorting fields and filter_aliases attribute paths into Arang | 2026-11-09 16:17:34 | 2026-11-03 20:18:16 |
| CVE-2026-63469 | - | fastapi-code-generator creates FastAPI applications from OpenAPI files. Prior to 0.8.1, the generator inserts an additional response status-code key into the generated responses={...} route-decorator dictionary as a single-quoted Python string withou | 2026-11-09 16:17:34 | 2026-11-03 20:18:15 |
| CVE-2026-82976 | 7.1 | A flaw was found in the image-customization-controller used in OpenShift's bare metal provisioning stack. The controller registers an HTTP file server on port 8084 with no authentication. The custom imageFileSystem implementation exposes a browsable | 2026-11-09 16:17:34 | 2026-11-03 19:18:10 |
| CVE-2026-63436 | 6.1 | zt-zip is a Java library that provides convenience methods for ZIP archive manipulation. Prior to 1.18.0, the Zips.get(zip).unpack().destination(outputDir).process() fluent API in src/main/java/org/zeroturnaround/zip/Zips.java constructs output files | 2026-11-09 16:17:34 | 2026-11-03 18:18:03 |
| CVE-2026-54863 | 7.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mamunur Rashid Review Schema review-schema allows Reflected XSS.This issue affects Review Schema: from n/a through 3.1.4. | 2026-11-09 16:17:33 | 2026-11-09 10:17:10 |
| CVE-2026-45146 | 7.2 | Chamilo LMS is an open-source learning management system. Prior to 1.11.40 and 2.0.1, an authenticated administrator can call the get_sessions action in /main/inc/ajax/model.ajax.php with _search=true and a crafted JSON filters parameter whose groupO | 2026-11-09 16:17:33 | 2026-11-03 20:18:13 |
| CVE-2026-63417 | - | Logging Redactor is a Python library designed to redact sensitive data in logs based on regex patterns and / or dictionary keys. Prior to 0.0.7, personally identifiable information returned by custom object __str__ or __repr__ methods is not redacted | 2026-11-09 16:17:33 | 2026-11-03 19:18:09 |
| CVE-2026-44265 | 7.4 | Elo is a purely functional expression language for no-code tools. Prior to 1.0.1, Elo's programmatic AST API accepts arbitrary values from JSON-deserialized input, plugin output, or other untyped sources and interpolates them into generated JavaScrip | 2026-11-09 16:17:33 | 2026-11-03 18:18:02 |
| CVE-2026-38601 | 7.5 | A hardcoded session secret key in codeskyblue gohttpserver through v1.3.0 allows attackers to impersonate any user, bypass OpenID Connect authentication and access all controls via forged session cookies. | 2026-11-09 16:17:33 | 2026-11-03 17:18:13 |
| CVE-2026-43966 | 5.3 | Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') vulnerability in ninenines cowlib allows HTTP response splitting via non-VCHAR bytes in structured-fields string values. cow_http_struct_hd:escape_string/2 | 2026-11-09 16:17:33 | 2026-06-08 17:16:43 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/12733
Zapisa po stranici: