Rezultati pretraživanja za 'Od datuma: 01.11.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-66402 | 9.8 | FreeRDP before 3.29.0 (affected versions <= 3.28.0) contains multiple TLS certificate identity validation weaknesses in tls_verify_certificate(), tls_match_hostname(), and x509_utils_get_dns_names(). Because FreeRDP performs custom Common Name and DN | 2026-10-02 19:08:13 | 2026-08-01 13:16:57 |
| CVE-2026-94418 | 7.5 | Under WOLFSSL_SMALL_CERT_VERIFY, ProcessPeerCertParse() runs the certificate signature check separately from the parse to keep peak memory down, then merges the two results, but it merged the signature result back only when the parse returned 0, so a | 2026-10-02 18:59:27 | 2026-09-27 09:16:36 |
| CVE-2026-15442 | 5.3 | In all builds that make use of (D)TLS, including default builds, there is a series of conditional states during the TLS shutdown which could lead to a heap-use-after free. If an application ended up getting a partial wolfSSL_read() which is sometimes | 2026-10-02 18:58:59 | 2026-09-27 10:16:56 |
| CVE-2026-89133 | 5.3 | wolfSSL versions 5.9.2 and earlier contain a flaw in the X.509 certificate validation logic where it fails to properly enforce NameConstraints extensions when there is an unconstrained CA tier between a name-constrained intermediate CA and the leaf c | 2026-10-02 18:58:31 | 2026-09-27 10:16:58 |
| CVE-2026-89134 | 9.1 | A certificate with no dNSName SAN but another SAN type present (e.g. registeredID or iPAddress) bypassed the Subject CN dNSName name-constraint check. The CN-as-DNS fallback was gated on cert->subjectCN != NULL && cert->altNames == NULL && !cert->isC | 2026-10-02 18:57:50 | 2026-09-27 10:16:59 |
| CVE-2026-89135 | 6.5 | A failed X509_verify_cert call permanently plants an unverified attacker CA in the shared CertManager, bypassing certificate validation in every type-blind sibling consumer (native TLS, OCSP, CRL, direct CM verify). This affects version 5.8.4 through | 2026-10-02 18:57:29 | 2026-09-27 10:16:59 |
| CVE-2026-93302 | 8.2 | MatchTrustedPeer ignores the public key used, leading to forged CA clones passing verification. Affected builds are any that enable the macro WOLFSSL_TRUST_PEER_CERT and load CA certificates with wolfSSL_CTX_trust_peer_cert() or wolfSSL_trust_peer_ce | 2026-10-02 18:57:08 | 2026-09-27 10:16:59 |
| CVE-2026-91784 | - | cjbassi/gotop is vulnerable to local argument injection via process termination functionality. The process name is passed directly to pkill without sanitization. A local attacker can create a process with a crafted name beginning with -- (e.g. contai | 2026-10-02 18:54:07 | 2026-10-02 09:16:45 |
| CVE-2026-51898 | - | sinaptik-ai pandas-ai 3.0.0 is vulnerable to Code Injection in CodeExecutor.execute. | 2026-10-02 18:53:46 | 2026-10-02 16:16:49 |
| CVE-2026-103484 | 8.8 | IVFFlat index build in pgvector before 0.8.7 allows a database user to write data out-of-bounds, which can lead to arbitrary code execution. | 2026-10-02 18:53:46 | 2026-10-01 20:17:23 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/12764
Zapisa po stranici: