Rezultati pretraživanja za 'Od datuma: 27.12.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-12894 | 8.8 | A flaw was found in the Qute template engine, which is used by Quarkus to generate dynamic content like HTML pages or emails. The issue exists in the component responsible for looking up data values (ReflectionValueResolver), which fails to properly | 2026-10-12 08:17:21 | 2026-08-31 13:17:20 |
| CVE-2026-108814 | 6.5 | A flaw has been found in SEMCMS up to 5.0. This impacts an unknown function of the file SEMCMS_Banner.php. Executing a manipulation can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may be use | 2026-10-12 08:17:19 | 2026-10-12 08:17:19 |
| CVE-2026-108813 | 6.5 | A vulnerability was detected in SEMCMS up to 5.0. This affects an unknown function of the file SEMCMS_Download.php. Performing a manipulation results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and may | 2026-10-12 08:17:19 | 2026-10-12 08:17:19 |
| CVE-2026-108812 | 6.4 | A security vulnerability has been detected in SEMCMS up to 5.0. The impacted element is an unknown function of the file /admin/SEMCMS_User.php?Class=Deleted&CF=user. Such manipulation leads to improper authorization. The attack may be performed from | 2026-10-12 08:17:19 | 2026-10-12 08:17:19 |
| CVE-2026-108811 | 4.0 | A weakness has been identified in WMCMS 4.446.1257. The affected element is an unknown function of the file /index.php. This manipulation of the argument path/file causes information disclosure. The attack is possible to be carried out remotely. The | 2026-10-12 08:17:19 | 2026-10-12 08:17:19 |
| CVE-2026-109082 | 6.8 | A flaw was found in the Client-Initiated Backchannel Authentication CIBA implementation within the keycloak-services component of Keycloak. This component handles advanced authentication flows where a client initiates a login on behalf of a user. The | 2026-10-12 08:17:19 | 2026-10-12 07:16:36 |
| CVE-2026-11837 | 7.3 | A local privilege escalation vulnerability was found in the ansible.posix authorized_key module. The module's keyfile() function uses os.chown() instead of os.lchown() and opens files without O_NOFOLLOW when managing SSH authorized keys. An unprivile | 2026-10-12 08:17:19 | 2026-06-10 05:16:38 |
| CVE-2026-108810 | 5.0 | A security flaw has been discovered in tsi-coop tsi-dpdp-cms 0.5.0/0.5.1/0.5.2. Impacted is an unknown function of the component JSON Schema Validation. The manipulation of the argument _func results in information disclosure. The attack can be execu | 2026-10-12 08:17:18 | 2026-10-12 08:17:18 |
| CVE-2026-93748 | 7.5 | http-cache-semantics through 4.2.0 fails to properly validate security-zeroed cache entries when processing client max-stale directives, allowing unauthenticated attackers to retrieve cached responses belonging to other users. Attackers can request t | 2026-10-12 07:16:40 | 2026-09-18 18:18:33 |
| CVE-2026-93582 | 9.4 | The HTTP Basic Authentication modules in ((OTRS)) Community Edition 6 and prior accept the authenticated username from either the REMOTE_USER or HTTP_REMOTE_USER environment variable. In CGI and mod_perl based deployments, HTTP request headers may be | 2026-10-12 07:16:37 | 2026-10-12 07:16:37 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/12077
Zapisa po stranici: