Svi - CERT CVE

Rezultati pretraživanja za 'Od datuma: 14.12.2024.'

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2026-103903 8.8 An incorrect authorization vulnerability in the WinBox authentication flow of MikroTik RouterOS allows a remote authenticated attacker with credentials for a low-privilege account permitted to use WinBox to obtain the authorization policy of a differ 2026-10-12 11:17:09
CVE-2026-103902 7.5 Improper verification of cryptographic signature vulnerability in DigiDoc libdigidocpp, DigiDoc DigiDoc4, DigiDoc DigiDoc Android, and DigiDoc DigiDoc iOS. The vulnerability allows an attacker to create forged digital signatures that are displayed a 2026-10-12 11:17:08
CVE-2026-108979 - Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage. 2026-10-12 10:16:44
CVE-2026-108822 5.0 A vulnerability was detected in Kamailio up to 6.0.7/6.1.3. The affected element is the function isup_get_calling_party of the file src/modules/sipt/ss7_parser.c of the component sipt Module. The manipulation of the argument length results in buffer 2026-10-12 10:16:44
CVE-2026-108821 6.5 A security vulnerability has been detected in Tencent WeKnora up to 0.8.1. Impacted is the function validateSubquery of the file internal/utils/inject.go of the component SQL Validator. The manipulation leads to sql injection. The attack is possible 2026-10-12 10:16:44
CVE-2026-108820 6.5 A weakness has been identified in agno-agi agno up to 3.0.6/3.1.1. This issue affects the function member_agent.run in the library libs/agno/agno/team/_default_tools.py of the component Delegation Feature. Executing a manipulation can lead to executi 2026-10-12 10:16:43
CVE-2026-108819 7.5 A security flaw has been discovered in agno-agi agno up to 3.0.6/3.1.1. This vulnerability affects the function exec of the component Agent Orchestration Layer. Performing a manipulation of the argument code results in dynamically-managed code resour 2026-10-12 10:16:43
CVE-2026-107935 9.3 A path traversal vulnerability was found in gvproxy, the network forwarder provided by the gvisor-tap-vsock package. The unauthenticated /services/forwarder/expose endpoint does not validate the caller-supplied socket path, allowing an attacker to de 2026-10-12 10:16:43
CVE-2025-3456 3.8 On affected platforms running Arista EOS, the global common encryption key configuration may be logged in clear text, in local or remote accounting logs. Knowledge of both the encryption key and protocol specific encrypted secrets from the device run 2026-10-12 10:16:41
CVE-2026-1907 - A SQL Injection (SQLi) affects the Kong Gateway (Enterprise and Open Source) clustering communication logic when operating in Hybrid Mode. The issue can be triggered by sending specially crafted RPC requests to the Control Plane (CP), leading to pote 2026-10-12 09:16:43
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/12167
Zapisa po stranici: