| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-128118 | 7.5 | SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte. From version 3.0.0 until 3.1.1, the build-time server-only module guard did not treat src/params.js as a client entry point even though parameter matche | 2026-11-13 22:14:15 | 2026-11-13 20:18:56 |
| CVE-2026-128116 | 5.3 | SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte. Prior to versions 2.70.4 and 3.1.1, apps configured with router.resolution: 'server' could treat a pathname beginning with // as a protocol-relative mod | 2026-11-13 22:14:15 | 2026-11-13 20:18:56 |
| CVE-2026-129126 | 8.1 | C-Kermit before 11.1.515 contains a heap buffer overflow vulnerability in putsrv() in ckcfns.c that allows malicious peers to write past the srvcmd buffer by sending crafted packets. Attackers can use Kermit repeat-count compression in server command | 2026-11-13 22:14:15 | 2026-11-13 17:17:29 |
| CVE-2026-129125 | 8.1 | C-Kermit 6.0.192 before 11.1.515 contains a remote code execution vulnerability that allows Kermit clients to run shell commands on servers with host commands disabled by abusing REMOTE QUERY evaluation. Attackers can send a REMOTE QUERY invoking the | 2026-11-13 22:14:15 | 2026-11-13 17:17:29 |
| CVE-2026-129124 | 8.1 | C-Kermit before 11.1.515 contains an OS command injection vulnerability that allows remote clients to execute shell commands by supplying unquoted arguments to REMOTE WHO or REMOTE SPACE. Attackers can append shell metacharacters to arguments passed | 2026-11-13 22:14:15 | 2026-11-13 17:17:29 |
| CVE-2026-129122 | 7.5 | C-Kermit 6.0.192 before 11.1.515 contains a buffer overflow vulnerability in tn_snenv() in ckctel.c that allows malicious Telnet servers to corrupt client memory via crafted NEW-ENVIRON SEND subnegotiation. Malicious or machine-in-the-middle servers | 2026-11-13 22:14:15 | 2026-11-13 17:17:29 |
| CVE-2026-129121 | 6.5 | C-Kermit 8.0.200 before 11.1.515 contains a path traversal vulnerability in doftpget() in ckcftp.c that allows malicious FTP servers to write files outside the intended directory. Attackers can return absolute paths, tilde names, or dot-dot component | 2026-11-13 22:14:15 | 2026-11-13 17:17:29 |
| CVE-2026-129120 | 5.3 | C-Kermit 11.0.506 before 11.1.515 contains a RECEIVE CONFIRM bypass vulnerability that allows malicious Kermit servers to write unrequested files without prompting by abusing recursive GET root computation in ckcfns.c. Attackers can send files such a | 2026-11-13 22:14:15 | 2026-11-13 17:17:29 |
| CVE-2026-129118 | 6.8 | C-Kermit 8.0.200 before 11.1.515 contains an improper certificate hostname validation vulnerability that allows attackers to impersonate hosts by abusing wildcard matching in dNSName_cmp() in ck_ssl.c. Attackers holding a trusted certificate with ove | 2026-11-13 22:14:15 | 2026-11-13 17:17:28 |
| CVE-2026-129117 | 6.8 | C-Kermit 8.0.200 before 11.1.515 contains an improper certificate validation vulnerability that allows machine-in-the-middle attackers to impersonate Telnet servers because ssl_reply() never calls ssl_check_server_name(). Attackers can refuse START-T | 2026-11-13 22:14:15 | 2026-11-13 17:17:28 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/40249
Zapisa po stranici: