| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2025-10698 | - | Incorrect default permissions and Product released in Non-Release configuration vulnerability in OpenText Identity Console on Windows, Linux, and 64 bit allows Retrieve Embedded Sensitive Data. This issue affects Identity Console: from 1.8 through 2 | 2026-11-13 23:10:00 | 2026-11-12 17:17:20 |
| CVE-2025-10935 | 7.8 | libilbm ILBM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of libilbm. User interaction is required to exploit this vulnerab | 2026-11-13 23:10:00 | 2026-11-12 03:17:08 |
| CVE-2025-59848 | 6.8 | HCL Leap is vulnerable to Stored XSS through malicious application titles in the Manage page dialogs, allowing an attacker to take over a user's session | 2026-11-13 23:10:00 | 2026-11-11 08:17:16 |
| CVE-2025-59847 | 6.8 | HCL Domino Leap is vulnerable to Stored XSS through malicious application titles in Manage page dialogs, allowing an attacker to take over a user's session | 2026-11-13 23:10:00 | 2026-11-11 08:17:16 |
| CVE-2025-15714 | 3.5 | The Live Composer WordPress plugin before 2.1.24 does not sanitise and escape some of its Button module settings before outputting them on the front end, which could allow high-privilege users such as administrators to perform Stored Cross-Site Scri | 2026-11-13 23:10:00 | 2026-11-11 06:17:10 |
| CVE-2025-15713 | 3.5 | The Live Composer WordPress plugin before 2.1.24 does not sanitise and escape some of its page-builder module settings before outputting them, allowing users with access to the builder (Administrator by default) to inject arbitrary JavaScript that e | 2026-11-13 23:10:00 | 2026-11-11 06:17:10 |
| CVE-2025-15712 | 3.5 | The Live Composer WordPress plugin before 2.1.24 does not sanitise and escape some of its staff member settings before outputting them in pages, which could allow high-privilege users such as administrators to perform Stored Cross-Site Scripting att | 2026-11-13 23:10:00 | 2026-11-11 06:17:10 |
| CVE-2025-15711 | 3.5 | The Live Composer WordPress plugin before 2.1.24 does not sanitise and escape some of its module settings before outputting them in an href attribute, which could allow high-privilege users such as administrators to perform Stored Cross-Site Scripti | 2026-11-13 23:10:00 | 2026-11-11 06:17:08 |
| CVE-2025-48504 | - | Operation on a resource after expiration or release in the Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to manipulate metadata pages potentially resulting in the loss of confidentiality and integrity of guest memo | 2026-11-13 23:10:00 | 2026-11-10 23:17:19 |
| CVE-2025-29941 | - | Incorrect usage of seeds in pseudo-random number generator in the Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor or migration agent to import a forged guest context potentially resulting in loss of confidentiality f | 2026-11-13 23:10:00 | 2026-11-10 23:17:18 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/40249
Zapisa po stranici: