Svi - CERT CVE

Rezultati pretraživanja za 'Od datuma: 27.12.2024.'

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2026-58014 7.3 A flaw was found in GLib. An off-by-one error can occur in the g_key_file_get_locale_string_list function in the gkeyfile.c file when loading a key file with an empty value. This flaw can cause an out-of-bounds access of 1 byte or a denial of service 2026-10-29 23:17:00
CVE-2026-58013 6.5 A flaw was found in GLib. A buffer over-read can occur in g_io_channel_read_line_backend() in the giochannel.c file when a custom line terminator with a length greater than one is set, causing memcmp to read past the GString buffer. This vulnerabilit 2026-10-29 23:17:00
CVE-2026-58012 6.5 A flaw was found in GLib. A buffer over-read can occur in the g_regex_replace function when used with the `G_REGEX_RAW` compile flag and case-change replacement escapes because the string_append function processes matched substrings using UTF-8 funct 2026-10-29 23:16:58
CVE-2026-58011 6.5 A flaw was found in GLib. An out-of-bounds read of only 2 bytes can occur in the g_date_time_get_ymd function in the glib/gdatetime.c file when an invalid GDateTime object produced by the g_date_time_add_full function is processed. This flaw can corr 2026-10-29 23:16:58
CVE-2026-58010 6.5 A flaw was found in GLib. An off-by-one error can occur in the gvs_tuple_is_normal function in the glib/gvariant-serialiser.c file when doing an alignment padding check because the bounds check uses > instead of >=, causing an out-of-bounds read of o 2026-10-29 23:16:57
CVE-2026-55655 5.0 A flaw was found in OpenSSH. A local unprivileged attacker on a Linux client host can hijack client-side X11 forwarding connections. This is possible by pre-binding the preferred abstract X socket name when X11 forwarding is enabled and a local UNIX- 2026-10-29 23:16:57
CVE-2026-55653 4.3 A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie-Hellman Group Exchange (DH-GEX) client path. This occurs during FIPS (Federal Information Processing Standards) mode known-group validation when 2026-10-29 23:16:56
CVE-2026-112211 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. 2026-10-29 23:16:55
CVE-2026-107444 4.3 A flaw was found in Katello where the Docker Tags repositories API does not properly enforce organization scoping when listing repositories for a Docker meta tag. An authenticated user with permission to view products in one organization may be able 2026-10-29 23:16:55
CVE-2026-15588 5.3 A denial-of-service and resource exhaustion vulnerability exists within the `GDBus` component of GLib. The `gdbusauth` authentication mechanism fails to enforce proper length limitations on data lines read from a client. An unauthenticated local or r 2026-10-29 23:16:55
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/12382
Zapisa po stranici: