| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-115480 | 5.3 | baserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2, the public POST /baser/api/bc-mail/mail_messages/add/{mailContentId}.json endpoint accepts submissions without enforcing the form's auth_captcha setti | 2026-10-29 18:17:24 | 2026-10-23 14:17:52 |
| CVE-2026-115751 | 3.7 | Agentfront mcp-from-openapi from 2.2.0 before 2.9.0 contains a server-side request forgery vulnerability that allows attackers to bypass the ssrf.blockedHosts denylist using trailing-dot hostnames. Attackers who control an OpenAPI spec URL or redirec | 2026-10-29 18:17:24 | 2026-10-23 13:17:09 |
| CVE-2026-115729 | 6.8 | @pdfme/common from 5.5.10 before 6.2.6 contains a server-side request forgery vulnerability that allows attackers to bypass the isUrlSafeToFetch denylist in getB64BasePdf. Attackers can supply basePdf URLs using IPv4-mapped IPv6, [::], NAT64 or local | 2026-10-29 18:17:24 | 2026-10-23 13:17:08 |
| CVE-2026-113576 | 6.3 | Adobe Digital Editions is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security mea | 2026-10-29 18:17:23 | 2026-10-29 16:17:58 |
| CVE-2026-115477 | - | obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. From 1.13.0 until 1.31.4, on a Streamable HTTP deployment with `auth.jwtSecret` configured and a 2026-07-28-era client declaring `elicitation.form` support, a d | 2026-10-29 18:17:23 | 2026-10-23 15:17:29 |
| CVE-2026-114621 | 8.8 | baserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2, list and detail actions in the Admin and Api/Admin prefixes pass request query parameters, including contain, conditions, fields, finder, and order, d | 2026-10-29 18:17:23 | 2026-10-23 14:17:51 |
| CVE-2026-113399 | 9.8 | Incorrect boundary conditions in the SVG component. This vulnerability was fixed in Firefox 158.0.1 and Thunderbird 158.0.1. | 2026-10-29 18:17:23 | 2026-10-20 13:16:40 |
| CVE-2026-110244 | 8.8 | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory. | 2026-10-29 18:17:22 | 2026-10-29 16:17:56 |
| CVE-2026-110190 | 6.5 | IBM Langflow OSS 1.0.0 through 1.12.4 could allow an authenticated user to traverse directories on the system. An attacker could send a specially crafted URL request to view arbitrary files on the system. | 2026-10-29 18:17:22 | 2026-10-29 16:17:55 |
| CVE-2026-108088 | 7.5 | ** UNSUPPORTED WHEN ASSIGNED ** Use of cache containing sensitive information vulnerability in Apache Cocoon. When using the cache on a multi-user application, cached values for one user could be used when serving content for other users. This iss | 2026-10-29 18:17:22 | 2026-10-20 11:17:16 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39855
Zapisa po stranici: