Rezultati pretraživanja za 'Od datuma: 01.11.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-95285 | 8.4 | Missing authorization in WebView in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low) | 2026-10-02 19:49:45 | 2026-09-29 18:17:20 |
| CVE-2026-63975 | 8.8 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp If dcid is received for an already-assigned destination CID the spec requires that both channels to be discarded, but c | 2026-10-02 19:47:46 | 2026-07-19 16:17:16 |
| CVE-2026-95278 | 8.4 | Missing authorization in WakeLock in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low) | 2026-10-02 19:45:21 | 2026-09-29 18:17:19 |
| CVE-2026-63973 | 5.5 | In the Linux kernel, the following vulnerability has been resolved: net: mana: Add NULL guards in teardown path to prevent panic on attach failure When queue allocation fails partway through, the error cleanup frees and NULLs apc->tx_qp and apc->rx | 2026-10-02 19:42:32 | 2026-07-19 16:17:16 |
| CVE-2026-63972 | 7.5 | In the Linux kernel, the following vulnerability has been resolved: net: mana: Skip redundant detach on already-detached port When mana_per_port_queue_reset_work_handler() runs after a previous detach succeeded but attach failed, the port is left i | 2026-10-02 19:41:02 | 2026-07-19 16:17:16 |
| CVE-2026-63971 | 7.8 | In the Linux kernel, the following vulnerability has been resolved: sctp: fix race between sctp_wait_for_connect and peeloff sctp_wait_for_connect() drops and re-acquires the socket lock while waiting for the association to reach ESTABLISHED state. | 2026-10-02 19:39:40 | 2026-07-19 16:17:16 |
| CVE-2026-63970 | 7.8 | In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: bind uarg before filling zerocopy skb virtio_transport_send_pkt_info() allocates or reuses the zerocopy uarg before entering the send loop, but virtio_transport_alloc | 2026-10-02 19:38:05 | 2026-07-19 16:17:16 |
| CVE-2026-71486 | 4.3 | vLLM is an inference and serving engine for large language models. Prior to 0.26.0, the /v1/completions/derender and /v1/chat/completions/derender endpoints accept caller-supplied GenerateResponse objects whose generate_responses, choices, token_ids, | 2026-10-02 19:30:34 | 2026-08-17 20:16:45 |
| CVE-2026-73555 | 5.3 | vLLM is an inference and serving engine for large language models. Prior to 0.26.0, the validation_exception_handler in vllm/entrypoints/openai/server_utils.py converts FastAPI RequestValidationError objects with str(exc), and sanitize_message in vll | 2026-10-02 19:28:34 | 2026-08-13 15:20:17 |
| CVE-2026-93698 | 9.9 | Insufficient validation allows arbitrary commands to be executed via the Multilang adminbin. | 2026-10-02 19:16:42 | 2026-10-02 07:16:39 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/12764
Zapisa po stranici: