| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-118682 | 7.5 | KaringX ClashMi through 1.0.32.1801 disables TLS certificate validation by default in the HttpUtils helper, allowing attackers to intercept HTTPS traffic by presenting any certificate. Attackers operating the user's proxy node can serve a forged upda | 2026-10-29 16:21:34 | 2026-10-28 22:17:12 |
| CVE-2026-61542 | 8.6 | Gearboy is a Game Boy, Game Boy Color, and Super Game Boy emulator and debugger with an embedded MCP server. Gearsystem, the affected component, has an optional `--mcp-http` mode that accepts unauthenticated MCP requests from any reachable network pe | 2026-10-29 16:21:34 | 2026-10-28 20:18:27 |
| CVE-2026-118685 | 6.5 | ToolJet from 3.20.2-lts before 3.20.242-lts contains an authorization bypass in SignupDisableGuard, which treats the string signup setting 'false' as truthy, so instance-level signup restrictions are not enforced. Unauthenticated attackers can send P | 2026-10-29 16:21:34 | 2026-10-28 19:17:35 |
| CVE-2026-58458 | 6.5 | Don't Starve Together (Steam AppID 322330) through build 747465 contains a memory-corruption vulnerability in the native persistent-string decoder that allows a remote attacker operating a public dedicated server to crash a victim's game client by pu | 2026-10-29 16:21:34 | 2026-10-28 18:17:20 |
| CVE-2026-59979 | 8.3 | YosemiteCrew provides organization-based service and task management. In the source-reported affected main and dev snapshots, YosemiteCrew's service and PMS task-library/template routes omit organization and permission checks. `authorizeCognito` in ` | 2026-10-29 16:21:34 | 2026-10-28 16:17:08 |
| CVE-2026-44179 | 9.9 | XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. From 1.13 until 1.14.5, the `excerpt-include` macro does not properly escape the included page's title and executes `excerpt` content with the | 2026-10-29 16:21:34 | 2026-10-28 16:17:07 |
| CVE-2026-96951 | 8.8 | Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network. | 2026-10-29 16:20:22 | 2026-10-13 19:22:07 |
| CVE-2026-62131 | 9.8 | Unauthenticated PHP Object Injection in Zoho Flow <= 2.14.5 versions. | 2026-10-29 16:20:19 | 2026-10-29 16:18:14 |
| CVE-2026-62016 | 9.8 | Unauthenticated PHP Object Injection in Gamic <= 1.19 versions. | 2026-10-29 16:20:19 | 2026-10-29 16:18:14 |
| CVE-2026-62015 | 9.8 | Unauthenticated PHP Object Injection in Gamezone <= 1.1.11 versions. | 2026-10-29 16:20:19 | 2026-10-29 16:18:14 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39855
Zapisa po stranici: