Rezultati pretraživanja za 'Od datuma: 15.12.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-119125 | 3.1 | Parse Server before 8.6.107 and 9.0.0 before 9.10.5-alpha.8 returns the stored value of a field reverted by a beforeSave trigger in object update responses, even to clients without read access to that object or field. An authenticated client able to | 2026-10-29 18:17:30 | 2026-10-29 16:18:05 |
| CVE-2026-119121 | 4.3 | Crawl4AI from 0.9.0 before 0.9.5 contains a JavaScript injection vulnerability in the Docker API server that allows authenticated API clients to run arbitrary JavaScript in the crawl page via allowlisted css_selector and wait_for fields. Attackers ca | 2026-10-29 18:17:30 | 2026-10-29 16:18:04 |
| CVE-2026-15564 | 7.4 | Wildfly's IIOP listener may permit deserialization of input streams before authentication is performed. An attacker who can gain access to the IIOP port may be able to construct and send malicious objects and achieve deserialization, if the target EJ | 2026-10-29 18:17:30 | 2026-10-29 06:17:20 |
| CVE-2026-15146 | 5.9 | GNU Wget versions < 1.25.0+4f85853f64 do not validate the IP address provided by an FTP PASV response while operating in FTP passive mode. A malicious FTP server, or an HTTP server that redirects to an FTP URL, can exploit this behavior to redirect W | 2026-10-29 18:17:30 | 2026-07-10 19:17:20 |
| CVE-2026-119052 | 7.5 | llama.cpp b2877 before b11935 contains an uncaught exception vulnerability in the ggml-rpc server that allows unauthenticated remote attackers to crash the rpc-server by sending oversized message lengths. After the HELLO handshake, attackers can send | 2026-10-29 18:17:29 | 2026-10-29 14:17:52 |
| CVE-2026-119048 | 4.2 | JeeSite 5.11.0 through 5.19.1 contains an insecure direct object reference vulnerability in the AI CMS chat module that allows authenticated users to access other users' conversations due to missing and reversed ownership checks. Attackers who know o | 2026-10-29 18:17:29 | 2026-10-29 14:17:51 |
| CVE-2026-119027 | 7.5 | oapi-codegen 2.5.0 before 2.8.1 contains a code injection vulnerability that allows attackers to inject Go code by supplying a crafted servers[].x-go-name value emitted unescaped by the server-urls template. Attackers who control an OpenAPI document | 2026-10-29 18:17:29 | 2026-10-29 12:17:12 |
| CVE-2026-118804 | 7.5 | Bricks Builder 2.4.3 and before contains a broken access control vulnerability that allows unauthenticated attackers to access restricted post content by submitting crafted post_status and post_type values in the originalQueryVars parameter to the PO | 2026-10-29 18:17:29 | 2026-10-28 22:17:14 |
| CVE-2026-118768 | - | Botan is a C++ cryptography library. From 1.11.34 until 3.13.0, the botan ocsp_check command requested an OCSP response from a certificate's Authority Information Access URL without verifying the response signature or authorizing the signer. A malici | 2026-10-29 18:17:28 | 2026-10-29 18:17:28 |
| CVE-2026-118767 | 4.8 | Botan is a C++ cryptography library. From 1.11.22 until 3.13.0, Botan's Python binding converted Python strings containing U+0000 to const char* values without consistently rejecting the embedded NUL, causing bcrypt and check_bcrypt to process only t | 2026-10-29 18:17:28 | 2026-10-29 18:17:28 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/12571
Zapisa po stranici: