| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-110178 | 4.1 | IBM ContextForge MCP Gateway 1.0.0 through 1.0.11 is vulnerable to improper access control in the bulk import path. A remote authenticated attacker holding a team-scoped `admin.import` permission can overwrite the endpoint URL, request headers, and a | 2026-11-13 22:17:20 | 2026-11-13 22:17:20 |
| CVE-2026-109158 | 7.5 | IBM App Connect Operator and IBM App Connect Enterprise Certified Containers Operands may allow the AI Agent to log sensitive information about the deployed environment within error messages. | 2026-11-13 22:17:20 | 2026-11-13 22:17:20 |
| CVE-2026-108290 | 4.0 | IBM Cyber Fraud 1.0.0 through 1.1.0 could allow an attacker with local access to a container to extract sensitive information due to unrestrictive network policies. | 2026-11-13 22:17:20 | 2026-11-13 22:17:19 |
| CVE-2026-102632 | - | Incorrect privilege assignment in the app token management component in Devolutions PowerShell Universal 2026.3.4 and earlier allows an authenticated user with token creation or update permissions to escalate privileges to administrator, and allows a | 2026-11-13 22:17:19 | 2026-11-13 22:17:19 |
| CVE-2026-104204 | - | BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to version 1.6.1, there is a server-side denial-of-service issue affecting the Structured View object implementation. This issue has been patched in versions 1. | 2026-11-13 22:17:19 | 2026-11-13 19:17:37 |
| CVE-2026-107398 | - | Indico is a feature-rich event management system. Prior to version 3.3.14, due to a path traversal vulnerability when building an "offline copy" of an event, a malicious event manager has the ability to retrieve the content of any local file that's r | 2026-11-13 22:17:19 | 2026-11-13 18:17:26 |
| CVE-2026-105624 | - | The login flow in Zenitel Connect before 1.11.0 applies per-account lockout on repeated failed login attempts, which allows remote attackers to cause a denial of service (temporary lockout of targeted user accounts from the web interface, repeatable | 2026-11-13 22:17:19 | 2026-11-13 16:17:23 |
| CVE-2026-105623 | - | The web interface in Zenitel Connect before 1.11.0 serves production JavaScript source maps without authentication, which allows remote attackers to obtain the complete front-end source code, including API usage and internal client logic, via request | 2026-11-13 22:17:19 | 2026-11-13 16:17:22 |
| CVE-2026-105622 | - | Improper restriction of excessive authentication attempts in the WAMP-CRA (challenge-response) authentication path in Zenitel Connect before 1.11.0 allows remote attackers to guess user passwords via unlimited authentication attempts, because the pat | 2026-11-13 22:17:19 | 2026-11-13 16:17:21 |
| CVE-2026-106018 | - | Authentication bypass using an alternate path or channel vulnerability in Johnson Controls EasyIO FW allows Authentication Bypass. This issue affects EasyIO FW: through 3.0b25. | 2026-11-13 22:17:19 | 2026-11-12 21:17:17 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/40249
Zapisa po stranici: