Rezultati pretraživanja za 'Od datuma: 27.12.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-124541 | - | JSON::XS versions before 4.05 for Perl leak the decoded part of a rejected long string in decode_str. A string is decoded through a fixed-size buffer (16 KiB in 4.04), and each time the buffer fills its contents move into a new scalar. Nothing frees | 2026-11-14 12:17:43 | 2026-11-14 12:17:43 |
| CVE-2026-124540 | - | JSON::XS versions before 4.05 for Perl allow stack exhaustion via nested tagged values under allow_tags in decode_tag. With allow_tags, "(" starts a tagged value. Its tag and value are decoded recursively, and each can start another tagged value. Un | 2026-11-14 12:17:43 | 2026-11-14 12:17:43 |
| CVE-2026-124539 | - | JSON::XS versions before 4.05 for Perl leak the decoded key of an object rejected for a missing colon in decode_hv. Unless it is short plain ASCII, a quoted key is decoded into a new scalar. Nothing frees that scalar when the object is rejected for | 2026-11-14 12:17:43 | 2026-11-14 12:17:43 |
| CVE-2026-124536 | - | JSON::XS versions before 4.05 for Perl allow memory exhaustion by buffering incremental input past max_size after a NUL byte in incr_parse. The parser appends each chunk to its buffer and compares max_size with how far it has progressed, not with th | 2026-11-14 12:17:42 | 2026-11-14 12:17:42 |
| CVE-2026-129248 | 4.0 | A weakness has been identified in Akaunting up to 3.3.0. The affected element is the function calculation_to_quantity of the file helpers.php of the component Invoice Item Validation. Executing a manipulation of the argument quantity can lead to nume | 2026-11-14 11:17:07 | 2026-11-14 11:17:07 |
| CVE-2026-129247 | 5.8 | A security flaw has been discovered in yangzongzhuan RuoYi up to 4.8.3. Impacted is the function VelocityUtils.getFileName of the file VelocityUtils.java of the component Code Generator. Performing a manipulation of the argument className results in | 2026-11-14 11:17:07 | 2026-11-14 11:17:06 |
| CVE-2026-18742 | 6.4 | The Flatsome theme for WordPress is vulnerable to Stored Cross-Site Scripting via 'data-text-sec', 'data-title', and 'title' Attributes via Custom HTML Block in all versions up to, and including, 3.20.12 due to insufficient input sanitization and out | 2026-11-14 09:16:48 | 2026-11-14 09:16:47 |
| CVE-2026-129181 | 7.5 | A vulnerability has been found in projectworlds Visitor Management System 1.0. This issue affects the function mysqli_query of the file /img/user%20page.php of the component Login Endpoint. Such manipulation of the argument Username leads to sql inje | 2026-11-14 08:17:19 | 2026-11-14 08:17:18 |
| CVE-2026-84761 | 7.2 | Server-Side Request Forgery (SSRF) vulnerability in Hai Zheng / Lite Speed Cache LiteSpeed Cache litespeed-cache allows Server Side Request Forgery.This issue affects LiteSpeed Cache: from n/a through 7.9. | 2026-11-14 08:17:19 | 2026-09-03 17:17:27 |
| CVE-2026-129319 | 5.9 | create-ecdh is a browserifiable implementation of Node.js crypto.createECDH. In versions 4.0.4 and below, the JavaScript implementation (browser.js, used by browser bundlers and on Node.js versions without a working native crypto.createECDH) did not | 2026-11-14 07:17:21 | 2026-11-14 07:17:21 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/12808
Zapisa po stranici: