Rezultati pretraživanja za 'Od datuma: 27.12.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2024-56516 | - | free-one-api allows users to access large language model reverse engineering libraries through the standard OpenAI API format. In versions up to and including 1.0.1, MD5 is used to hash passwords before sending them to the backend. MD5 is a cryptogra | 2024-12-30 17:15:09 | 2024-12-30 17:15:09 |
| CVE-2024-52294 | 4.3 | Khoj is a self-hostable artificial intelligence app. Prior to version 1.29.10, an Insecure Direct Object Reference (IDOR) vulnerability in the update_subscription endpoint allows any authenticated user to manipulate other users' Stripe subscriptions | 2024-12-30 17:15:09 | 2024-12-30 17:15:09 |
| CVE-2024-12993 | - | Infinix devices contain a pre-loaded "com.rlk.weathers" application, that exposes an unsecured content provider. An attacker can communicate with the provider and reveal the user’s location without any privileges. After multiple attempts to contact | 2024-12-30 11:15:06 | 2024-12-30 11:15:06 |
| CVE-2024-47926 | 9.8 | Tecnick TCExam – CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') | 2024-12-30 10:15:07 | 2024-12-30 10:15:07 |
| CVE-2024-47925 | 7.5 | Tecnick TCExam – Multiple CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 2024-12-30 10:15:07 | 2024-12-30 10:15:07 |
| CVE-2024-47924 | 7.5 | Boa web server – CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 2024-12-30 10:15:07 | 2024-12-30 10:15:07 |
| CVE-2024-47923 | 5.3 | Mashov – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor | 2024-12-30 10:15:06 | 2024-12-30 10:15:06 |
| CVE-2024-47922 | 7.5 | Priority – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor | 2024-12-30 10:15:06 | 2024-12-30 10:15:06 |
| CVE-2024-47921 | 8.4 | Smadar SPS – CWE-327: Use of a Broken or Risky Cryptographic Algorithm | 2024-12-30 10:15:06 | 2024-12-30 10:15:06 |
| CVE-2024-47920 | 7.5 | Tiki Wiki CMS – CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 2024-12-30 10:15:06 | 2024-12-30 10:15:06 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/12239
Zapisa po stranici: