| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-108502 | 3.3 | ZTE Z80 Ultra contains an information disclosure vulnerability, through which third-party applications can read relevant information by hooking system APIs. | 2026-10-11 17:17:03 | 2026-10-10 07:16:40 |
| CVE-2026-108501 | 5.7 | ZTE Z80 Ultra has a system interface permission verification defect. The interface lacks necessary access control, and relevant information can be read by reflectively invoking the interface. | 2026-10-11 17:17:03 | 2026-10-10 04:18:10 |
| CVE-2026-107712 | 6.5 | The WP Booking System – Booking Calendar plugin for WordPress is vulnerable to time-based SQL Injection via the 'current_month' parameter in all versions up to, and including, 2.1.0.1 due to insufficient escaping on the user supplied parameter and la | 2026-10-11 17:17:02 | 2026-10-10 07:16:40 |
| CVE-2026-107645 | 9.1 | The Blocksy Companion plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 2.1.58 This is due to the implement_user_registration() AJAX handler explicitly disabling Dokan's vendor-registration nonce check (via | 2026-10-11 17:17:02 | 2026-10-10 04:18:10 |
| CVE-2026-106425 | 4.2 | Missing authorization in BrowserTag in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass site isolation via a crafted HTML page. (Chromium security sever | 2026-10-11 17:17:02 | 2026-10-06 19:18:12 |
| CVE-2026-106396 | 5.4 | Improper input validation in Omnibox in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: High) | 2026-10-11 17:17:02 | 2026-10-06 19:18:09 |
| CVE-2026-106369 | 4.2 | Missing authorization in Translate in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: High) | 2026-10-11 17:17:02 | 2026-10-06 19:18:05 |
| CVE-2026-104899 | 8.1 | The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.8.187 via the 'design_type' parameter parameter. This makes it possib | 2026-10-11 17:17:01 | 2026-10-10 06:16:40 |
| CVE-2026-104898 | 6.8 | The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 28.4 via the 'id, wp_user_id' parameter due to missing validation on a user con | 2026-10-11 17:17:01 | 2026-10-10 04:18:08 |
| CVE-2026-104915 | 6.5 | The Academy LMS – AI Course Builder, Quizzes, Certificates & eLearning plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.0.3. This is due to the plugin not properly verifying that a user is authorized | 2026-10-11 17:17:01 | 2026-10-10 03:17:04 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: