Rezultati pretraživanja za 'Od datuma: 03.11.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-96393 | 3.6 | The Affinity by Canva app before 3.3.1 (October 2026 release) did not perform adequate bounds checking when parsing Affinity document files, leading to an out-of-bounds pointer dereference. A threat actor could craft an Affinity document that, when o | 2026-10-09 17:16:51 | 2026-10-09 13:17:12 |
| CVE-2026-92085 | 5.4 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in TMT Machinery Industry and Trade Co. Ltd. Talassoft Industrial Management Software allows Stored XSS. This issue affects Talassoft Industrial Manag | 2026-10-09 17:16:50 | 2026-10-09 14:17:24 |
| CVE-2026-87108 | 3.1 | An authenticated Ops Manager user with a read-only project role can retrieve a daily host monitoring record associated with a different project when they possess the required record identifier. Insufficient ownership validation can expose deployment | 2026-10-09 17:16:50 | 2026-10-09 06:17:12 |
| CVE-2026-7827 | 8.1 | A stack-based buffer overflow in the _RdbLoadEntity function of the RDB graph decoders (src/serializers/decoders/*/decode_graph_entities.c) in FalkorDB before 4.18.4 allows a remote attacker who can issue Redis replication commands (for example, agai | 2026-10-09 17:16:50 | 2026-10-09 05:16:45 |
| CVE-2026-94440 | 7.5 | Parsing a multipart form can bypass memory limits and read an arbitrarily long line into memory when the remaining limit at the start of a part is less than 400 bytes. | 2026-10-09 17:16:50 | 2026-10-08 23:17:04 |
| CVE-2026-94439 | 7.5 | When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT request and returns without hijacking the connection, the server improperly continues to read and serve requests from the connection. Since a 2xx response to an HTTP/1 CONNECT conv | 2026-10-09 17:16:50 | 2026-10-08 23:17:04 |
| CVE-2026-81829 | 5.3 | A flaw was found in SmallRye JWT's AwsAlbKeyResolver, which is used by applications to verify JSON Web Tokens signed by AWS Application Load Balancers. When the AWS_ALB key provider is configured, the resolver constructs the key-fetch URL by directly | 2026-10-09 17:16:50 | 2026-09-17 14:17:32 |
| CVE-2026-78669 | 7.5 | A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW_SIZE values. | 2026-10-09 17:16:49 | 2026-10-08 23:17:04 |
| CVE-2026-78667 | 7.5 | When parsing a Range header containing a large number of small ranges, FileServer(FS), ServeContent, and ServeFile(FS) can consume an excessive amount of CPU. | 2026-10-09 17:16:49 | 2026-10-08 23:17:03 |
| CVE-2026-78663 | 9.1 | The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (refunding data for any sent-but-unread portion of the stream), and again when a request handler reads the buffered data. A malicio | 2026-10-09 17:16:49 | 2026-10-08 23:17:03 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/12901
Zapisa po stranici: