| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2025-0027 | - | Improper access control in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to bypass Reverse Map Table (RMP) protections, potentially impacting the integrity of Secure Encrypted Virtualization-Secure Nested Pagin | 2026-11-13 23:10:00 | 2026-11-10 22:17:44 |
| CVE-2025-61625 | 8.1 | An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2.0 through 7.2.11, FortiManager 7.6.0 through 7.6.4, Fo | 2026-11-13 23:10:00 | 2026-11-10 20:17:20 |
| CVE-2025-10248 | - | XSS Vulnerability in OpenText Filr Appliance versions upto 25.1.2 could allow an authenticated user to upload a malicious file and exercise Stored XSS attack. | 2026-11-13 23:10:00 | 2026-11-09 16:17:23 |
| CVE-2025-13353 | 5.5 | In gokey versions <0.2.0, a flaw in the seed decryption logic resulted in passwords incorrectly being derived solely from the initial vector and the AES-GCM authentication tag of the key seed. This issue has been fixed in gokey version 0.2.0. Th | 2026-11-13 23:10:00 | 2025-12-02 11:15:47 |
| CVE-2026-9870 | 6.1 | IBM Cyber Fraud 1.0.0 through 1.1.0 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credenti | 2026-11-13 22:17:27 | 2026-11-13 22:17:27 |
| CVE-2026-9821 | 5.3 | IBM Cyber Fraud 1.0.0 through 1.1.0 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when written to log files. | 2026-11-13 22:17:27 | 2026-11-13 22:17:27 |
| CVE-2026-97683 | 2.5 | IBM Cyber Fraud 1.0.0 through 1.1.0 could allow a local attacker to bypass security restrictions due to a missing or misconfigured security context. | 2026-11-13 22:17:27 | 2026-11-13 22:17:27 |
| CVE-2026-9661 | 7.0 | Poste Italiane Postecert FIRMAOK! 1.6.29 on Windows contains a local privilege escalation vulnerability caused by an uncontrolled OpenSSL search path, where launcher.exe and dependent executables such as updater.exe and tslupdater.exe load OpenSSL co | 2026-11-13 22:17:27 | 2026-11-13 22:17:27 |
| CVE-2026-94407 | 6.5 | IBM ContextForge MCP Gateway 1.0.0 through 1.0.11 is potentially vulnerable to denial of service due to uncontrolled regular expression complexity (CWE-400 / ReDoS). An authenticated user with tool-registration privileges can embed catastrophically b | 2026-11-13 22:17:27 | 2026-11-13 22:17:27 |
| CVE-2026-95379 | - | Path traversal in the certificate.deleteCertificate JSON-RPC method (POST /api/rpc) of the turbineweb web interface in Zenitel VSFF6, VSFF8, VSFF8MP, VSFF8MN, and VSFT devices with software versions from 10.0.3.0 before 10.1.3.0 allows authenticated | 2026-11-13 22:17:27 | 2026-11-13 16:19:38 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/40249
Zapisa po stranici: