Rezultati pretraživanja za 'Proizvođač: withknown'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-28507 | 7.2 | Idno is a social publishing platform. Prior to version 1.6.4, there is a remote code execution vulnerability via chained import file write and template path traversal. This issue has been patched in version 1.6.4. | 2026-03-16 14:43:24 | 2026-03-06 05:16:32 |
| CVE-2026-28508 | 8.6 | Idno is a social publishing platform. Prior to version 1.6.4, a logic error in the API authentication flow causes the CSRF protection on the URL unfurl service endpoint to be trivially bypassed by any unauthenticated remote attacker. Combined with th | 2026-03-16 14:03:38 | 2026-03-06 05:16:35 |
| CVE-2026-26273 | 9.8 | Known is a social publishing platform. Prior to 1.6.3, a Critical Broken Authentication vulnerability exists in Known 1.6.2 and earlier. The application leaks the password reset token within a hidden HTML input field on the password reset page. This | 2026-02-18 21:01:56 | 2026-02-13 22:16:11 |
| CVE-2022-33011 | 6.8 | Known v1.3.1+2020120201 was discovered to allow attackers to perform an account takeover via a host header injection attack. | 2022-07-21 13:25:00 | 2022-07-08 12:15:00 |
| CVE-2022-32115 | 4.3 | An issue in the isSVG() function of Known v1.2.2+2020061101 allows attackers to execute arbitrary code via a crafted SVG file. | 2022-07-15 22:50:00 | 2022-07-08 12:15:00 |
| CVE-2022-31290 | 3.5 | A cross-site scripting (XSS) vulnerability in Known v1.2.2+2020061101 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Your Name text field. | 2022-07-15 22:45:00 | 2022-07-08 12:15:00 |
| CVE-2022-30852 | 4.0 | Known v1.3.1 was discovered to contain an Insecure Direct Object Reference (IDOR). | 2022-07-15 22:39:00 | 2022-07-08 12:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/1
Zapisa po stranici: