| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-118253 | - | Highcharts JS is a JavaScript charting library based on SVG. From 1.0.0 until 4.2.3, Highcharts Dashboards edit mode parses fullscreen language labels as HTML rather than inserting them as text. An attacker who controls Dashboards language options ca | 2026-10-29 21:17:15 | 2026-10-28 19:17:29 |
| CVE-2026-118249 | - | Highcharts JS is a JavaScript charting library based on SVG. From 13.0.0 until 13.1.0, Highcharts builds series data columns by using point option keys directly as column IDs. Own enumerable __proto__ and constructor keys from parsed point objects ca | 2026-10-29 21:17:15 | 2026-10-28 18:17:16 |
| CVE-2026-118245 | - | Highcharts JS is a JavaScript charting library based on SVG. From 1.0.0 until 4.2.2, Highcharts Dashboards uses chartConstructor as an unchecked property lookup in the Highcharts namespace and invokes the selected member with the component container | 2026-10-29 21:17:15 | 2026-10-28 18:17:15 |
| CVE-2026-116124 | 7.5 | A security vulnerability has been detected in GNOME libgsf up to 1.14.60. The impacted element is the function ole_info_read_metabat of the file gsf/gsf-infile-msole.c of the component OLE2 Parser. The manipulation leads to heap-based buffer overflow | 2026-10-29 21:17:14 | 2026-10-26 07:17:09 |
| CVE-2026-116121 | 2.6 | A vulnerability was identified in NocoDB up to 2026.08.0. This issue affects some unknown processing of the file users.service.ts of the component Registration. Such manipulation leads to race condition. The attack may be performed from remote. The a | 2026-10-29 21:17:14 | 2026-10-26 06:17:41 |
| CVE-2026-116118 | 6.5 | A vulnerability has been found in Z.ai Zcode up to 3.14.3/3.15.1. Affected by this issue is some unknown functionality of the component Sed Command Filter. The manipulation leads to os command injection. Remote exploitation of the attack is possible. | 2026-10-29 21:17:14 | 2026-10-26 05:17:54 |
| CVE-2026-116115 | 1.8 | A security vulnerability has been detected in Yoosee GM8135S Camera 21.00.01.36. This impacts an unknown function of the file wpa_supplicantX.conf of the component WiFi Configuration. Such manipulation leads to improper initialization. The attack can | 2026-10-29 21:17:14 | 2026-10-26 04:17:54 |
| CVE-2026-116211 | 8.2 | YesWiki 4.5.0 before 4.7.0 contains an SQL injection vulnerability in PageManager::save(), where the date_maj_fiche field of a Bazar entry-creation request is concatenated unescaped into an INSERT statement. Unauthenticated attackers on default insta | 2026-10-29 21:17:14 | 2026-10-25 14:17:02 |
| CVE-2026-116205 | 5.3 | YesWiki before 4.7.0 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to fetch arbitrary URLs by supplying [[|URL]] wiki syntax to the render handler. Attackers can pass the syntax in the content para | 2026-10-29 21:17:14 | 2026-10-25 14:17:01 |
| CVE-2026-116201 | 8.8 | Snipe-IT before 8.5.0 contains a SAML assertion replay vulnerability that allows attackers to reuse captured assertions by exploiting a non-atomic nonce check in the SAML acs handler. Attackers can send concurrent POST requests to /saml/acs with one | 2026-10-29 21:17:14 | 2026-10-25 14:17:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39855
Zapisa po stranici: