| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2024-58406 | 7.5 | Huatian Dynamic OA8000 collaborative office system contains an unauthenticated path traversal vulnerability in /OAapp/jsp/trace/ntkodownload.jsp, where the filename request parameter is used to locate a file without restricting access to an intended | 2026-11-13 23:10:00 | 2026-11-13 16:17:18 |
| CVE-2025-41725 | 6.5 | Affected devices running firmware versions prior to 4.1.0 may crash and become unavailable when receiving specific malformed Bluetooth messages from an unauthenticated attacker. | 2026-11-13 23:10:00 | 2026-11-13 13:17:38 |
| CVE-2025-71463 | 6.7 | Scapy before 2.7.0 contains an insecure deserialization vulnerability in the load_session function that allows attackers to execute code by supplying a malicious pickle session file. Attackers can trick users into loading a crafted .pkl.gz file via t | 2026-11-13 23:10:00 | 2026-11-13 10:17:24 |
| CVE-2025-71462 | 6.1 | Zipline before 3.7.12 contains a cross-site scripting vulnerability in the login page that allows attackers to execute JavaScript by supplying an unvalidated url parameter. Attackers can craft a login link with a javascript: URI in the url parameter | 2026-11-13 23:10:00 | 2026-11-13 10:17:24 |
| CVE-2025-71461 | 5.3 | Zipline before 4.0.2 contains a predictable filename vulnerability that allows attackers to infer other users' upload filenames by recovering the Math.random generator state. Attackers with five consecutive gfycat-style filenames can reconstruct the | 2026-11-13 23:10:00 | 2026-11-13 10:17:24 |
| CVE-2025-71460 | 4.2 | Zipline before 4.2.1 contains a missing authorization vulnerability in the /api/user/files/transaction endpoint that allows authenticated users to modify other users' files due to absent ownership checks. Attackers who know a target file ID can submi | 2026-11-13 23:10:00 | 2026-11-13 10:17:23 |
| CVE-2025-71459 | 8.1 | Zipline through 4.3.2 contains a path traversal vulnerability that allows authenticated uploaders to write files outside the upload directory by supplying traversal sequences in the x-zipline-filename header. Attackers using the local datasource can | 2026-11-13 23:10:00 | 2026-11-13 10:17:23 |
| CVE-2025-54507 | - | Improper validation of consistency within input in AMD SEV (Secure Encrypted Virtualization) firmware could allow an attacker with administrative privileges to create multiple RMP entries for the same guest physical address, potentially resulting in | 2026-11-13 23:10:00 | 2026-11-12 20:18:14 |
| CVE-2025-0043 | - | Incorrect directory permissions within AMD Vivado™ Lab Solutions could allow a local user-privileged attacker to escalate their privileges, potentially resulting in arbitrary code execution. | 2026-11-13 23:10:00 | 2026-11-12 20:18:13 |
| CVE-2025-54501 | - | Improper access control on an internal debug interface could allow a high privileged attacker to bypass memory access controls potentially resulting in a loss of SEV-SNP guest memory integrity. | 2026-11-13 23:10:00 | 2026-11-12 19:16:45 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/40249
Zapisa po stranici: