Rezultati pretraživanja za 'Od datuma: 15.12.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-57845 | 8.8 | Hugging Face Datasets through 5.1.0 contains an insecure deserialization vulnerability that allows attackers to execute arbitrary Python code by crafting a malicious pickle file loaded through the deprecated pandas packaged builder. Attackers can sup | 2026-10-29 18:17:33 | 2026-10-23 16:16:52 |
| CVE-2026-55465 | 5.3 | The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From version 22.04 to before version 26.05, the unauthenticated REST endpoint GET /api/v1/index/{solrField}/spatial/search concatenates the user-su | 2026-10-29 18:17:33 | 2026-10-23 15:17:33 |
| CVE-2026-55444 | 5.3 | The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. Prior to version 26.05, the legacy RSS servlet (RssResolver, GET /rss/) accepts the q and filterQuery parameters and concatenates them into Solr qu | 2026-10-29 18:17:33 | 2026-10-23 15:17:32 |
| CVE-2026-55606 | 6.5 | odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. In versions 25.12 and prior, odhcpd's DHCPv6 self-loop detection at dhcpv6.c:720 uses a network-byte-order DUID length value directly as the memcmp() size parameter. On li | 2026-10-29 18:17:33 | 2026-10-23 14:17:53 |
| CVE-2026-51912 | - | OpenBMB XAgent v1.0.0 contains directory traversal vulnerability in main-upload_file-the-preserved-live-upload-file-witness-directly-reaches (ToolServer/ToolServerNode/main.py:46). | 2026-10-29 18:17:32 | 2026-10-29 18:17:32 |
| CVE-2026-51905 | - | TransformerOptimus SuperAGI v0.0.14 is vulnerable to Incorrect Access Control in get_agent_execution_configuration in superagi/controllers/agent_execution_config.py. A remote authenticated attacker from one organization can read another organization' | 2026-10-29 18:17:32 | 2026-10-29 18:17:32 |
| CVE-2026-51903 | - | SuperAGI v0.0.14 contains an improper access control vulnerability in get_agent_by_latest_execution in superagi/controllers/agent_execution.py. A remote authenticated attacker from one organization can retrieve latest execution and agent metadata for | 2026-10-29 18:17:32 | 2026-10-29 18:17:32 |
| CVE-2026-51902 | - | SuperAGI up to v0.0.14 contains an improper access control vulnerability. The agent controller endpoint /api/agents/get/project/{project_id} allows authenticated users from one organization to retrieve the complete list of agents belonging to a diffe | 2026-10-29 18:17:32 | 2026-10-29 18:17:32 |
| CVE-2026-51863 | - | DB-GPT v0.7.5 and 0.8.0 contains directory traversal in use_example_file (packages/dbgpt-app/src/dbgpt_app/openapi/api_v1/examples_api.py:129). A remote attacker can use the validated exploitation path to write files outside the intended workspace or | 2026-10-29 18:17:32 | 2026-10-29 18:17:32 |
| CVE-2026-51851 | - | modelscope agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in python/helpers/file_browser.py:FileBrowser.save_text_file. The save_text_file method accepts user-controlled file paths without normalization or validation, allowin | 2026-10-29 18:17:32 | 2026-10-29 18:17:32 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/12571
Zapisa po stranici: