| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2025-15703 | 3.5 | The HireZoot WordPress plugin before 4.0.0 does not sanitise and escape one of its job specification settings before it is reflected back into an admin-area settings page, allowing users with the HireZoot WordPress plugin before 4.0.0's management | 2026-10-12 12:17:12 | 2026-10-12 06:16:58 |
| CVE-2023-25996 | 6.5 | Insertion of Sensitive Information Into Sent Data vulnerability in Pluggabl LLC. Booster Elite for WooCommerce booster-elite-for-woocommerce allows Retrieve Embedded Sensitive Data.This issue affects Booster Elite for WooCommerce: from n/a before 8.4 | 2026-10-12 12:17:11 | 2026-10-12 09:16:41 |
| CVE-2026-108826 | 7.5 | A vulnerability was found in Zen Cart up to 2.2.2. This impacts the function zen_db_perform in the library includes/modules/payment/paypaldp.php of the component PayPal IPN Handler. Performing a manipulation of the argument txn_id results in sql inje | 2026-10-12 11:17:10 | 2026-10-12 11:17:10 |
| CVE-2026-108825 | 5.5 | A vulnerability has been found in yangzongzhuan RuoYi up to 4.8.3. This affects the function checkRoleAllowed of the file /system/role/authDataScope. Such manipulation of the argument roleKey leads to improper privilege management. It is possible to | 2026-10-12 11:17:10 | 2026-10-12 11:17:10 |
| CVE-2026-108824 | 6.5 | A flaw has been found in DataEase up to 3.0.0. The impacted element is the function Utils.buildCalcField of the file io/dataease/engine/utils/Utils.java. This manipulation of the argument calculated field causes sql injection. It is possible to initi | 2026-10-12 11:17:10 | 2026-10-12 11:17:10 |
| CVE-2026-105412 | 7.1 | An SQL Injection vulnerability affecting Tuleap Enterprise Edition 17.5 could allow an attacker to have read access the Tuleap database. | 2026-10-12 11:17:10 | 2026-10-12 11:17:10 |
| CVE-2026-105411 | 8.1 | An Authorization Bypass Through User-Controlled Key vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker with tracker administration rights on one tracker to update or delete fields of all the trackers on t | 2026-10-12 11:17:10 | 2026-10-12 11:17:10 |
| CVE-2026-105410 | 8.7 | A Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to execute arbitrary script code in user's browser session. | 2026-10-12 11:17:10 | 2026-10-12 11:17:10 |
| CVE-2026-105409 | 8.7 | A Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to execute arbitrary script code in user's browser session. | 2026-10-12 11:17:09 | 2026-10-12 11:17:09 |
| CVE-2026-105408 | 8.7 | A Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to execute arbitrary script code in user's browser session. | 2026-10-12 11:17:09 | 2026-10-12 11:17:09 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: