Rezultati pretraživanja za 'Od datuma: 27.12.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-114718 | 4.7 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a cross-site scripting vulnerability in the password plugin. Error text returned by a password driver was concatenated into the message presented to the user without HTML escaping, | 2026-10-28 03:17:10 | 2026-10-22 02:16:59 |
| CVE-2026-114661 | 8.5 | OpenRemote 1.2.0 before 1.31.0 contains a missing authorization vulnerability in GatewayServiceResource that allows any authenticated user to start, stop and query gateway tunnels without an administrative role. Attackers can send POST or DELETE requ | 2026-10-28 03:17:10 | 2026-10-22 02:16:58 |
| CVE-2026-114657 | 5.7 | Grav from 2.0.0 before 2.2.5 contains an information disclosure vulnerability that allows page authors to capture visitors' HTTP Basic credentials through Twig page content. Authors can print the request Uri object, which embeds PHP_AUTH_USER and PHP | 2026-10-28 03:17:10 | 2026-10-22 02:16:57 |
| CVE-2026-114640 | 8.7 | Traefik from v3.7.0 before v3.7.14 contains an authentication bypass vulnerability in its Kubernetes Ingress-NGINX provider that forwards client-supplied Ssl-Client-* headers on the plaintext HTTP router. When ssl-redirect is disabled alongside auth- | 2026-10-28 03:17:10 | 2026-10-22 02:16:56 |
| CVE-2026-114636 | 8.7 | Traefik v3.7.13 before v3.7.14 contains an access-control bypass in the Kubernetes Ingress NGINX provider, where the HTTP router generated for ssl-passthrough Ingresses on non-TLS entry points never applies the Ingress's access-control annotations. U | 2026-10-28 03:17:10 | 2026-10-22 02:16:56 |
| CVE-2026-114577 | 7.5 | A vulnerability was found in oretnom23 php-travel-agency-system. This vulnerability affects unknown code of the file admin/insert.php of the component Insertion Handler. The manipulation of the argument costomer_id/payment_type/amount/description/use | 2026-10-28 03:17:10 | 2026-10-22 02:16:55 |
| CVE-2026-114714 | 5.3 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a path traversal vulnerability in the squirrelmail_usercopy plugin. With the file based backend, the source path was built from the login name without rejecting path separators, so | 2026-10-28 03:17:10 | 2026-10-22 01:16:58 |
| CVE-2026-111314 | 7.2 | The affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'atkp_product_producturl' parameter in all versions up to, and including, 3.9.2 due to insufficient inp | 2026-10-28 03:17:09 | 2026-10-28 03:17:09 |
| CVE-2026-109999 | 7.2 | The AI Marketing Expert — AI Email Marketing, AI Content Generator, SEO Analyzer, AI Workflow Automation, Social Media & Ai Chatbot plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'name' parameter in all versions u | 2026-10-28 03:17:09 | 2026-10-28 03:17:09 |
| CVE-2026-109974 | 6.4 | The All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'more_link' parameter in all versions up to, and including, 4.9.7 due to insuffi | 2026-10-28 03:17:09 | 2026-10-28 03:17:09 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/12239
Zapisa po stranici: