Rezultati pretraživanja za 'Od datuma: 01.11.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-117556 | 4.3 | zchunk before 1.5.5 contains a heap out-of-bounds read vulnerability in read_preface() in src/lib/header.c that passes the total header length instead of remaining bytes to compint parsing functions. Attackers can supply a crafted .zck file whose hea | 2026-10-27 16:04:22 | 2026-10-27 14:16:36 |
| CVE-2026-117555 | 6.1 | CImg through 4.0.6 contains a heap out-of-bounds read vulnerability in the _load_bmp() function of CImg.h caused by an integer overflow in the row byte count. Attackers can supply a crafted BMP file with a large header width that wraps dx_bytes, caus | 2026-10-27 16:04:22 | 2026-10-27 14:16:36 |
| CVE-2026-115408 | 5.5 | In `github.com/eclipse-keypont/crypto11/v2` versions `>= 2.0.0-rc3, <= 2.0.0-rc8`, the ML-KEM key-pair lookup functions (`FindMLKEMKeyPair`, `FindMLKEMKeyPairs`, `FindMLKEMKeyPairsWithAttributes`) locate the public half of an ML-KEM key pair by `CKA_ | 2026-10-27 16:04:22 | 2026-10-27 12:17:07 |
| CVE-2026-115216 | - | In Eclipse ioFog Operator versions 3.8.0 before 3.9.2, TLS certificate verification is disabled when the operator contacts the Controller API and when it logs in to an external OIDC issuer. An on-path attacker can present any certificate, capture the | 2026-10-27 16:04:22 | 2026-10-27 12:17:07 |
| CVE-2026-113644 | - | In Eclipse ioFog iofogctl versions 1.0.0 through 3.7.0 and 3.8.0-rc.1 through 3.9.1, the provisioning key and CA certificate returned by the Controller API are concatenated into shell commands (`edgelet provision` and `edgelet config cert` on support | 2026-10-27 16:04:22 | 2026-10-27 12:17:05 |
| CVE-2026-117530 | 6.7 | In JetBrains Junie CLI before 26.8.17 command execution was possible due to incomplete validation of allowlisted commands | 2026-10-27 16:04:22 | 2026-10-27 11:17:33 |
| CVE-2026-116843 | 8.8 | Mistral Vibe before 3.0.3 contains a remote code execution vulnerability that allows attackers to run commands by defining git filter drivers in an untrusted repository's .git/config. When started with --worktree, git worktree add applies .gitattribu | 2026-10-27 16:04:22 | 2026-10-27 01:19:07 |
| CVE-2026-116842 | 6.1 | DevilutionX 1.4.0 through 1.5.5 contains a heap buffer overflow vulnerability in the bundled libmpq libmpq__archive_dup routine when opening crafted MPQ archives. Attackers can supply an MPQ archive whose block table count exceeds its hash table coun | 2026-10-27 16:04:22 | 2026-10-27 01:19:07 |
| CVE-2026-116841 | 5.5 | DevilutionX 1.4.0 through 1.5.5 contains an out-of-bounds read vulnerability in the bundled libmpq libmpq__file_number_from_hash function that allows attackers to read heap memory via unchecked block_table_index values. Attackers can place a crafted | 2026-10-27 16:04:22 | 2026-10-27 01:19:07 |
| CVE-2026-116747 | 8.1 | Kener 3.0.0 before 4.1.10 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge session tokens by using the hardcoded DUMMY_SECRET fallback key. When KENER_SECRET_KEY is empty or unset, attackers knowing an ad | 2026-10-27 16:04:22 | 2026-10-26 22:16:59 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/13496
Zapisa po stranici: