Rezultati pretraživanja za 'Od datuma: 16.01.2025.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2025-55996 | 6.3 | Viber Desktop 25.6.0 is vulnerable to HTML Injection via the text parameter of the message compose/forward interface | 2026-11-07 18:10:00 | 2025-09-12 15:15:32 |
| CVE-2025-10278 | 6.5 | A flaw has been found in YunaiV ruoyi-vue-pro up to 2025.09. Impacted is an unknown function of the file /crm/contact/transfer. This manipulation of the argument ids/newOwnerUserId causes improper authorization. The attack is possible to be carried o | 2026-11-07 18:10:00 | 2025-09-12 04:15:58 |
| CVE-2025-10276 | 6.5 | A security vulnerability has been detected in YunaiV ruoyi-vue-pro up to 2025.09. This vulnerability affects unknown code of the file /crm/contract/transfer. The manipulation of the argument id/newOwnerUserId leads to improper authorization. Remote e | 2026-11-07 18:10:00 | 2025-09-12 03:15:41 |
| CVE-2025-10275 | 6.5 | A weakness has been identified in YunaiV yudao-cloud up to 2025.09. This affects an unknown part of the file /crm/business/transfer. Executing a manipulation of the argument ids/newOwnerUserId can lead to improper authorization. The attack may be lau | 2026-11-07 18:10:00 | 2025-09-12 02:15:40 |
| CVE-2025-56556 | 3.8 | An issue was discovered in Subrion CMS 4.2.1, allowing authenticated adminitrators or moderators with access to the built-in Run SQL Query feature under the SQL Tool admin panel - to gain escalated privileges in the context of the SQL query tool. | 2026-11-07 18:10:00 | 2025-09-11 19:15:32 |
| CVE-2025-57633 | 9.8 | A command injection vulnerability in FTP-Flask-python through 5173b68 allows unauthenticated remote attackers to execute arbitrary OS commands. The /ftp.html endpoint's "Upload File" action constructs a shell command from the ftp_file parameter and e | 2026-11-07 18:10:00 | 2025-09-09 21:15:38 |
| CVE-2025-44595 | 6.1 | Halo v2.20.17 and before is vulnerable to Cross Site Scripting (XSS) in /halo_host/archives/{name}. | 2026-11-07 18:10:00 | 2025-09-09 21:15:36 |
| CVE-2025-44593 | 6.1 | Halo prior to 2.20.13 allows bypassing file type detection and uploading malicious files such as .exe and .html files. Specifically, .html files can trigger stored XSS vulnerabilities. This vulnerability is fixed in 2.20.13 | 2026-11-07 18:10:00 | 2025-09-09 21:15:36 |
| CVE-2025-44594 | 9.1 | halo v2.20.17 and before is vulnerable to server-side request forgery (SSRF) in /apis/uc.api.storage.halo.run/v1alpha1/attachments/-/upload-from-url. | 2026-11-07 18:10:00 | 2025-09-09 20:15:40 |
| CVE-2025-57278 | 8.8 | The LB-Link BL-CPE300M AX300 4G LTE Router firmware version BL-R8800_B10_ALK_SL_V01.01.02P42U14_06 does not implement proper session handling. After a user authenticates from a specific IP address, the router grants access to any other client using t | 2026-11-07 18:10:00 | 2025-09-09 19:15:57 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/12201
Zapisa po stranici: