| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-113369 | - | Sonatype Nexus Repository 3 allows a user account that can push manifests to a hosted OCI repository (a user account that holds the edit permission on that repository) to store script content in the artifact type field of an OCI manifest. The script | 2026-11-09 22:18:24 | 2026-11-04 20:18:55 |
| CVE-2026-113368 | - | Sonatype Nexus Repository 3 does not check that a user account is authorized to access a repository before the repository is added as a member of a group repository. A user account that has signed in with valid credentials and holds the add or edit p | 2026-11-09 22:18:24 | 2026-11-04 20:18:55 |
| CVE-2026-111040 | - | The platform allows persistent HTML injection into editable fields managed by TinyMCE. An authenticated attacker with low privileges can inject unsanitised HTML content which is stored in the database and subsequently rendered in other users’ browser | 2026-11-09 22:18:24 | 2026-11-04 10:17:25 |
| CVE-2026-110282 | 6.5 | IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to bypass security restrictions due to improper access control. | 2026-11-09 22:18:23 | 2026-11-04 21:17:48 |
| CVE-2026-108767 | 4.3 | IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to conduct HTTP response splitting due to improper neutralization of HTTP headers. | 2026-11-09 22:18:23 | 2026-11-04 21:17:47 |
| CVE-2026-108588 | 5.4 | IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to bypass security restrictions due to a missing X-Content-Type-Options header allowing MIME type sniffing. | 2026-11-09 22:18:23 | 2026-11-04 21:17:46 |
| CVE-2026-111038 | - | CSV formula injection vulnerability in the export functionality of the Coupa Supplier Portal SaaS platform. The vulnerability arises because certain user-controlled data, such as event names or templates within the Tenders module, are not properly va | 2026-11-09 22:18:23 | 2026-11-04 10:17:25 |
| CVE-2026-111037 | - | A reflected Cross-Site Scripting (XSS) vulnerability in the Tenders module of the Coupa Supplier Portal SaaS platform. The vulnerability arises because the `list_item_function` parameter is reflected in the server’s response without proper output enc | 2026-11-09 22:18:23 | 2026-11-04 10:17:24 |
| CVE-2026-111036 | - | Server-side request forgery (SSRF) vulnerability in the Coupa Supplier Portal SaaS platform, specifically in the document conversion functionality available in the ‘Contracts > Templates’ section. The vulnerability is due to insufficient validation o | 2026-11-09 22:18:23 | 2026-11-04 10:17:24 |
| CVE-2026-110944 | - | Resource exhaustion vulnerability in the HTTP request handling of the QHttpServer component of Qt HTTP Server. | 2026-11-09 22:18:23 | 2026-11-04 08:17:15 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/40089
Zapisa po stranici: