Svi - CERT CVE

Rezultati pretraživanja za 'Od datuma: 15.12.2024.'

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2026-95736 8.3 Improper certificate validation vulnerabilities exist in the affected interface of HPE Networking Fabric Composer, which could be exploited by an unauthenticated adjacent attacker if certain preconditions outside of the attacker's control are met. Su 2026-11-09 13:17:10
CVE-2026-95735 8.7 An improper certificate validation vulnerability exists in HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated remote attacker, under certain preconditions outside the attacker's control, to obtain sensitive informa 2026-11-09 13:17:10
CVE-2026-95648 8.1 Improperly controlled modification of Dynamically-Determined object attributes vulnerability in C-Prot Inc. C-Prot AppDefense allows Privilege Escalation. This issue affects C-Prot AppDefense: before 1.0.2729. 2026-11-09 13:17:09
CVE-2026-86468 - Apache Airflow's CLI records its arguments in the audit log but masks secrets by argument position, so some supported command shapes leave secrets in cleartext, for example a trailing `--description` on Variable commands, `--conn-extra`, and the inli 2026-11-09 13:17:09
CVE-2026-95734 8.8 A sensitive information disclosure vulnerability in the API of HPE Networking Fabric Composer could allow an authenticated low-privileged user to access sensitive information beyond what is authorized by the user's existing privilege level. Successfu 2026-11-09 13:17:09
CVE-2026-95733 9.6 A vulnerability exists in a component of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated adjacent attacker to execute arbitrary code on the affected system. 2026-11-09 13:17:09
CVE-2026-95732 9.6 An authentication bypass vulnerability exists in the underlying operating system of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated adjacent attacker to execute arbitrary code on the affected system. 2026-11-09 13:17:09
CVE-2026-95731 9.8 Hardcoded password vulnerabilities in the command-line interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to access the affected system using hardcoded credentials. Successful exploitation could allow an attack 2026-11-09 13:17:09
CVE-2026-88833 6.5 A flaw was found in BusyBox's udhcpc DHCP client. When processing raw DHCP packets, the client replaces the validated packet length with an attacker-controlled value from the IP header without re-validating the minimum size. This leads to an integer 2026-11-09 13:17:09
CVE-2026-68982 - Apache Airflow's CeleryExecutor ran callback workloads (`ExecuteCallback`, used for deadline-alert callbacks) without validating the workload's authentication token. Anyone able to write to the Celery broker could enqueue a forged callback and execut 2026-11-09 13:17:08
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/12733
Zapisa po stranici: