Rezultati pretraživanja za 'Od datuma: 27.12.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-123811 | 7.5 | Dynatrace MCP Server is an MCP server for Dynatrace Observability. Prior to 2.0.0, a server started with the --http option accepts JSON-RPC tools/call requests without authentication, session validation, or Host and Origin protections before dispatch | 2026-11-13 14:17:49 | 2026-11-09 22:18:37 |
| CVE-2026-123876 | 4.4 | A flaw was found in the default seccomp profile used by Podman via containers-common. Deny rules for AF_VSOCK and NETLINK_AUDIT compared socket arguments with unmasked 64-bit equality. Because the kernel truncates those int arguments to 32 bits, sett | 2026-11-13 14:17:49 | 2026-11-06 18:18:05 |
| CVE-2026-118368 | - | Akaunting 3.3.0 contains a stored cross-site scripting vulnerability in the XLSX item-import workflow. An authenticated Manager can import an item whose name contains HTML. When another authenticated user selects that item while creating a document, | 2026-11-13 14:17:48 | 2026-11-11 05:19:27 |
| CVE-2026-116645 | - | LimeSurvey Community Edition 7.8.0 contains an SQL injection vulnerability in the survey-archive participant import and SPSS-response export workflow. An authenticated user with global surveys.create permission can import a crafted .lsa archive whose | 2026-11-13 14:17:48 | 2026-11-11 03:16:48 |
| CVE-2026-120977 | 8.2 | On affected platforms running Arista EOS with 802.1X with Dynamic Host Configuration Protocol (DHCP) device profiling enabled, a network-adjacent attacker can send a crafted DHCP packet to force the device to record a spoofed device profile. This may | 2026-11-13 14:17:48 | 2026-11-10 20:18:52 |
| CVE-2026-120749 | 6.2 | A flaw was found in D-Bus. With a privileged Monitoring client attached (for example dbus-monitor or busctl monitor), an unprivileged local user can cause dbus-daemon to abort if a driver-originated broadcast such as NameOwnerChanged or ActivatableSe | 2026-11-13 14:17:48 | 2026-11-06 07:17:06 |
| CVE-2026-109096 | 5.5 | Incorrect handling of negative returns from ddQueryImageAttributes() when processing XvPutImage requests in X.Org xwayland before 24.1.15 and X Server before 21.1.26 could be used by authenticated X clients to crash the X server. | 2026-11-13 14:17:47 | 2026-11-13 14:17:47 |
| CVE-2026-112318 | 6.5 | The policy RPC stubs in kadmin/server/server_stubs.c in MIT Kerberos 5 (aka krb5) 1.5.3 and later do not reject a NULL policy name decoded by xdr_nullstring(), which allows remote authenticated users to cause a denial of service (kadmind crash via NU | 2026-11-13 14:17:47 | 2026-11-09 19:16:40 |
| CVE-2026-112314 | 7.5 | clnttcp_call() in lib/rpc/clnt_tcp.c in MIT Kerberos 5 (aka krb5) does not free the RPC reply verifier between retries, which allows remote attackers to cause a denial of service (memory leak in GSS-RPC client programs) by injecting RPC replies with | 2026-11-13 14:17:47 | 2026-11-09 19:16:39 |
| CVE-2026-115456 | 3.7 | A flaw was found in gcc. An attacker could cause a Denial of Service (DoS) by passing a string that is not null-terminated to the std::from_chars() function in the libstdc++ library. This issue triggers an out-of-bounds read beyond the allocated buff | 2026-11-13 14:17:47 | 2026-10-30 09:17:14 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/12808
Zapisa po stranici: