Rezultati pretraživanja za 'Od datuma: 15.01.2025.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-116067 | 8.2 | Paisa before 0.7.8 contains a path traversal vulnerability in the GetFile, GetSheet, DeleteBackups, and DeleteSheetBackups handlers that lets unauthenticated attackers read files and delete backups through ../ sequences in file names. Attackers can s | 2026-10-29 16:18:00 | 2026-10-25 12:16:28 |
| CVE-2026-116048 | 7.5 | A vulnerability was detected in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. Affected by this vulnerability is the function mysql_query of the file /source/registerform1.php of the component Registration. Perfo | 2026-10-29 16:18:00 | 2026-10-25 08:16:26 |
| CVE-2026-116045 | 4.0 | A vulnerability was detected in 1999AZZAR designer-mcp up to 2.1.0. This affects the function get_reference of the file skills/motion-designer/references/motion-dev-guidelines.md of the component MCP Interface. The manipulation of the argument Name r | 2026-10-29 16:18:00 | 2026-10-25 07:16:46 |
| CVE-2026-116006 | 7.5 | A vulnerability was detected in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.09. The affected element is an unknown function of the file AuthController.java of the component SMS Code Verification. The manipulation of the argument mobile/code results | 2026-10-29 16:17:59 | 2026-10-25 04:17:34 |
| CVE-2026-115999 | 7.5 | A vulnerability has been found in mansi-k Restaurant_IMS d7ad49f61ab7cc1ec6eb359ac2b5378bdbde0694. Affected is the function mysqli_connect of the file lsmodal.php. The manipulation of the argument login_id/epsw leads to sql injection. Remote exploita | 2026-10-29 16:17:59 | 2026-10-25 02:16:26 |
| CVE-2026-115995 | 10.0 | A security vulnerability has been detected in Unitree Robotics Unitree Go2 up to 1.1.11.4. The impacted element is the function set_volume of the file gpt_thread.py of the component chat_go. Such manipulation of the argument Value leads to os command | 2026-10-29 16:17:59 | 2026-10-24 23:16:58 |
| CVE-2026-115973 | 7.5 | A vulnerability was identified in FaveoSuite Faveo Helpdesk 2.0.3. Affected by this issue is the function ForgotPasswordController::sendResetLinkEmail/PasswordController::reset of the file app/Http/Controllers/Auth/ForgotPasswordController.php. The m | 2026-10-29 16:17:59 | 2026-10-24 19:17:04 |
| CVE-2026-115970 | 7.5 | A vulnerability has been found in Travisun Opptrix 0.4.0. This impacts an unknown function of the file /api/system-update/import of the component Import Endpoint. Such manipulation leads to code injection. It is possible to launch the attack remotely | 2026-10-29 16:17:59 | 2026-10-24 18:16:48 |
| CVE-2026-116018 | 4.3 | ONEARMY community-platform before 2.165.2 contains an insecure direct object reference vulnerability that allows authenticated users to mark other users' notifications as read via POST /api/notifications/:id/read. Attackers can iterate sequential not | 2026-10-29 16:17:59 | 2026-10-24 12:16:58 |
| CVE-2026-114148 | 7.8 | Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally. | 2026-10-29 16:17:58 | 2026-10-29 16:17:58 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/12151
Zapisa po stranici: