Svi - CERT CVE

Rezultati pretraživanja za 'Od datuma: 15.01.2025.'

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2026-108775 6.5 A vulnerability has been found in erzhongxmu JEEWMS up to 2026.09.27-W39. The impacted element is the function WvNoticeController.list of the file com/zzjee/wmapi/controller/WvNoticeController.java of the component Search Endpoint. The manipulation o 2026-10-12 00:17:01
CVE-2026-108774 6.5 A flaw has been found in erzhongxmu JEEWMS up to 2026.09.27-W39. The affected element is the function getbinall/getbinallagv of the file src/main/java/com/zzjee/md/controller/MdBinController.java. Executing a manipulation of the argument binstore/bin 2026-10-12 00:17:01
CVE-2026-108773 6.5 A vulnerability was detected in erzhongxmu JEEWMS up to 2026.09.27-W39. Impacted is the function docheck of the file src/main/java/com/zzjee/wm/controller/WmOmNoticeHController.java. Performing a manipulation of the argument goodscode results in sql 2026-10-11 23:16:56
CVE-2026-108772 5.0 A security vulnerability has been detected in bleenco abstruse up to 2.1.0. This issue affects the function filepath.Join of the file server/api/worker/download_cache.go of the component Cache Endpoint. Such manipulation of the argument File leads to 2026-10-11 23:16:56
CVE-2026-108770 5.0 A weakness has been identified in Appwrite up to 2.3.0. This vulnerability affects the function PublicHostname of the file src/Appwrite/Platform/Modules/Avatars/Http/Screenshots/Get.php of the component Browser Screenshot Service. This manipulation o 2026-10-11 23:16:56
CVE-2026-104703 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. 2026-10-11 23:16:56
CVE-2026-108978 5.5 Heap-based buffer overflow vulnerability in Samsung Opensource rlottie allows Buffer Overflow via Environment Variables. This issue affects rlottie: e57b094f03c39a751a1fded6f7d6c13f1ed95ec9. 2026-10-11 22:16:50
CVE-2026-108769 4.0 A security flaw has been discovered in zhayujie CowAgent up to 2.2.0. This affects an unknown part of the file Markdown.tsx of the component Markdown Rendering. The manipulation results in denial of service. It is possible to launch the attack remote 2026-10-11 22:16:50
CVE-2026-108976 7.8 GNU Emacs before 31.2 (and TRAMP through 2.8.2) allows OS command injection via a filename because tramp-user-regexp has an incomplete list of disallowed inputs. NOTE: this issue exists because of an incomplete fix for CVE-2026-79992. 2026-10-11 21:16:43
CVE-2026-18830 8.1 Insufficient input validation in Amazon Bedrock AgentCore harness might allow an authenticated remote user to execute configured tools bypassing model invocation and security controls via crafted content blocks in conversation messages. AWS has addre 2026-10-11 21:16:43
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/11813
Zapisa po stranici: