Svi - CERT CVE

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2023-7357 - A remote code execution (RCE) vulnerability was identified in the FlexNet Publisher lmadmin web user interface. This vulnerability is addressed in the FlexNet Publisher 2023 R2 (11.19.4.0) release. 2026-10-29 17:17:54
CVE-2026-91814 5.3 A signature validation vulnerability exists in Foxit PDF Editor/Reader’s handling of incrementally updated PDF documents. Changes to visible document content may not invalidate the existing signature, allowing attackers to alter signed content and po 2026-10-29 17:15:42
CVE-2026-91798 8.8 A local privilege escalation vulnerability exists in the update daemon of Foxit PDF Editor/Reader due to an insecure permission configuration that allows the configuration file to be modified by regular users, which may lead to arbitrary script execu 2026-10-29 17:14:40
CVE-2026-91794 7.8 An out-of-bounds write vulnerability exists in the PDF rendering process of Foxit PDF Editor/Reader due to insufficient consistency and boundary validation when processing malformed color space data, which may cause the program to crash and potential 2026-10-29 17:13:18
CVE-2026-91788 4.7 When implementing the JavaScript interface, Foxit PDF Editor/Reader did not perform the attribute authorization checks required by the specification. As a result, a trusted malicious PDF could potentially access sensitive content from other documents 2026-10-29 17:11:18
CVE-2026-88010 5.3 Traefik is an open source HTTP reverse proxy and load balancer. From 3.6.11 until 3.7.13, checkPassword in pkg/middlewares/auth/basic_auth.go constructs the BasicAuth singleflight key from the submitted password and stored secret. Concurrent requests 2026-10-29 17:08:46
CVE-2026-83784 8.8 Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges over a network. 2026-10-29 17:06:05
CVE-2026-115396 5.5 Ghidra 10.3 before 12.2 contains an improper handling of highly compressed data vulnerability in ThemeReader.processIconFile() that fails to limit decompressed size or compression ratio. Attackers can persuade a user to import a crafted theme ZIP who 2026-10-29 16:57:37
CVE-2026-115395 5.5 Ghidra 10.3 before 12.2 contains a resource allocation without limits vulnerability in ThemeReader.readZipTheme() that extracts unlimited theme ZIP entries to the images directory. Attackers can persuade users to import a crafted theme archive with m 2026-10-29 16:57:21
CVE-2026-115394 5.5 Ghidra through 12.2 contains an uncontrolled memory allocation vulnerability in BinaryField.read() that allows attackers to exhaust heap memory via an unchecked 32-bit length field. Attackers can persuade users to import a crafted GZF packed database 2026-10-29 16:56:50
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/39839
Zapisa po stranici: