Rezultati pretraživanja za 'Od datuma: 27.12.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-118375 | 8.1 | llama.cpp b8841 before b11865 contains an out-of-bounds write vulnerability in the ggml-rpc RDMA transport rdma_recv() function that allows unauthenticated peers to overflow the rpc-server stack. Attackers advertising RDMA capabilities in the HELLO m | 2026-10-28 03:17:14 | 2026-10-28 03:17:14 |
| CVE-2026-76297 | 4.2 | In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, an unauthenticated user could trick a user that holds a role with the edit_federated_providers capability into turning off all federated search providers. Successful exploitatio | 2026-10-28 03:17:14 | 2026-10-21 23:17:27 |
| CVE-2026-118374 | 5.9 | LibreSSL ocspcheck through 4.4.0 contains a memory exhaustion vulnerability that allows malicious OCSP responders to exhaust memory by sending unbounded HTTP responses. Attackers controlling the responder or intercepting plain HTTP AIA OCSP traffic c | 2026-10-28 03:17:13 | 2026-10-28 03:17:13 |
| CVE-2026-118373 | 3.7 | LibreSSL ocspcheck through 4.4.0 contains a cleartext transmission vulnerability because url2host() discards the OCSP URL scheme and http_alloc() only selects TLS for port 443. On-path network attackers can read OCSP requests sent to https responder | 2026-10-28 03:17:13 | 2026-10-28 03:17:13 |
| CVE-2026-118372 | 3.7 | LibreSSL ocspcheck through 4.4.0 contains a CRLF injection vulnerability that allows attackers to inject HTTP headers by embedding CR/LF sequences in a certificate's AIA OCSP URI path. Because url2host() copies the path without rejecting control char | 2026-10-28 03:17:13 | 2026-10-28 03:17:13 |
| CVE-2026-118371 | 3.7 | LibreSSL through 4.4.0 contains a CRLF injection vulnerability in the libcrypto OCSP_sendreq_new() and OCSP_parse_url() functions, which write unvalidated request paths into the OCSP POST request line. Attackers can embed carriage return and line fee | 2026-10-28 03:17:13 | 2026-10-28 03:17:13 |
| CVE-2026-118370 | 5.9 | libexpat through 2.9.0 contains a signed integer overflow vulnerability in storeAtts() in lib/xmlparse.c that allows attackers to trigger out-of-bounds writes via oversized attribute counts. Attackers can supply a multi-gigabyte document with a start | 2026-10-28 03:17:13 | 2026-10-28 03:17:13 |
| CVE-2026-118274 | 4.0 | A vulnerability has been found in a2ui-project a2ui up to 0.10.6. Affected by this issue is some unknown functionality of the file renderers/web_core/src/v0_9/rendering/generic-binder.ts of the component Binder. The manipulation leads to resource con | 2026-10-28 03:17:13 | 2026-10-28 03:17:13 |
| CVE-2026-118273 | 4.0 | A flaw has been found in a2ui-project a2ui up to 0.10.6. Affected by this vulnerability is the function DataModel.set of the file renderers/web_core/src/v0_9/state/data-model.ts. Executing a manipulation can lead to resource consumption. It is possib | 2026-10-28 03:17:12 | 2026-10-28 03:17:12 |
| CVE-2026-117610 | 5.9 | libexpat through 2.9.0 contains a NULL pointer dereference vulnerability in externalEntityInitProcessor2() in lib/xmlparse.c that mishandles the XML_TOK_NONE token from empty input. Attackers who control stream chunking can force an empty non-final f | 2026-10-28 03:17:12 | 2026-10-28 03:17:12 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/12239
Zapisa po stranici: