Rezultati pretraživanja za 'Od datuma: 16.01.2025.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2024-55954 | 8.7 | OpenObserve is a cloud-native observability platform. A vulnerability in the user management endpoint `/api/{org_id}/users/{email_id}` allows an "Admin" role user to remove a "Root" user from the organization. This violates the intended privilege hie | 2025-01-16 20:15:32 | 2025-01-16 20:15:32 |
| CVE-2024-52594 | 4.3 | Gomatrixserverlib is a Go library for matrix federation. Gomatrixserverlib is vulnerable to server-side request forgery, serving content from a private network it can access, under certain conditions. The commit `c4f1e01` fixes this issue. Users are | 2025-01-16 19:15:28 | 2025-01-16 19:15:28 |
| CVE-2024-37181 | 2.6 | Time-of-check time-of-use race condition in some Intel(R) Neural Compressor software before version v3.0 may allow an authenticated user to potentially enable information disclosure via adjacent access. | 2025-01-16 18:15:22 | 2025-01-16 18:15:22 |
| CVE-2023-4319 | - | Rejected reason: This CVE ID is a reservation duplicate of CVE-2023-4677. Notes: All CVE users should reference CVE-2023-4677 instead of this CVE ID. | 2025-01-16 17:15:11 | 2025-01-16 17:15:11 |
| CVE-2018-25108 | 7.5 | An unauthenticated remote attacker can cause a DoS in the controller due to uncontrolled resource consumption. | 2025-01-16 11:15:06 | 2025-01-16 11:15:06 |
| CVE-2024-13387 | 6.4 | The WP Responsive Tabs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wprtabs' shortcode in all versions up to, and including, 1.2.9 due to insufficient input sanitization and output escaping on user supplied attr | 2025-01-16 10:15:09 | 2025-01-16 10:15:09 |
| CVE-2024-13355 | 5.4 | The Admin and Customer Messages After Order for WooCommerce: OrderConvo plugin for WordPress is vulnerable to limited file uploads due to insufficient file type validation in the upload_file() function in all versions up to, and including, 13.2. This | 2025-01-16 10:15:08 | 2025-01-16 10:15:08 |
| CVE-2024-12427 | 5.3 | The Multi Step Form plugin for WordPress is vulnerable to unauthorized limited file upload due to a missing capability check on the fw_upload_file AJAX action in all versions up to, and including, 1.7.23. This makes it possible for unauthenticated at | 2025-01-16 10:15:07 | 2025-01-16 10:15:07 |
| CVE-2024-12226 | 6.5 | In affected versions of the Octopus Kubernetes worker or agent, sensitive variables could be written to the Kubernetes script pod log in clear-text. This was identified in Version 2 however it was determined that this could also be achieved in Versio | 2025-01-16 07:15:26 | 2025-01-16 07:15:26 |
| CVE-2025-0457 | 8.8 | The airPASS from NetVision Information has an OS Command Injection vulnerability, allowing remote attackers with regular privileges to inject and execute arbitrary OS commands. | 2025-01-16 02:15:27 | 2025-01-16 02:15:27 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/12201
Zapisa po stranici: