- EPSS -
- Veröffentlicht 13.10.2026 01:05:46
- Zuletzt bearbeitet 13.10.2026 02:17:00
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitL...
- EPSS 0.31%
- Veröffentlicht 08.10.2026 06:42:09
- Zuletzt bearbeitet 08.10.2026 17:24:11
The Bricksforge plugin for WordPress is vulnerable to unauthenticated arbitrary file upload in versions up to, and including, 3.1.8.9. This is due to insufficient validation of the attacker-controlled URL field in the 'temporaryFileUploads' parameter...
- EPSS 0.48%
- Veröffentlicht 07.10.2026 13:07:13
- Zuletzt bearbeitet 07.10.2026 16:17:32
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. By abusing this path, a remote unauthenticated attacker could potentially exploit this vulnerability to direct th...
- EPSS 93.91%
- Veröffentlicht 13.05.2026 18:15:10
- Zuletzt bearbeitet 09.06.2026 12:47:03
Authentication bypass vulnerabilities in the GlobalProtect portal and gateway of Palo Alto Networks PAN-OS® software allows the attacker to bypass security restrictions and establish an unauthorized VPN connection. Panorama and Cloud NGFW are not im...