| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-124951 | 8.8 | Privilege escalation in the Nimbus Desktop Client component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7. | 2026-11-13 14:17:51 | 2026-11-10 14:17:29 |
| CVE-2026-125108 | 3.7 | Rack is a modular Ruby web server interface. Prior to 2.2.25, 3.1.23, and 3.2.8, Rack::Multipart::Parser.parse_boundary can skip a leading empty or quoted boundary parameter in a multipart Content-Type header and accept a later parameter. Rack can th | 2026-11-13 14:17:51 | 2026-11-09 22:18:41 |
| CVE-2026-125106 | 6.5 | Wagtail is an open source content management system built on Django. Prior to 7.0.9, 7.3.4, 7.4.3, and 8.0rc2, a Wagtail CMS user with the submit translations permission can call the Admin API copy for translation action for a source page that the us | 2026-11-13 14:17:51 | 2026-11-09 22:18:41 |
| CVE-2026-124999 | 7.5 | A security vulnerability has been detected in braindecode up to 1.8.2. This affects the function EEGModuleMixin._from_pretrained of the file braindecode/models/base.py of the component Hub Integration. Such manipulation of the argument filename leads | 2026-11-13 14:17:51 | 2026-11-09 22:18:39 |
| CVE-2026-124761 | - | P-Net before 1.0.4 copies the IP suite of a DCP Set request to the current and the non-volatile configuration, and starts saving it, before the state of the device is checked. If the request is refused, for example because an Application Relationship | 2026-11-13 14:17:50 | 2026-11-13 14:17:50 |
| CVE-2026-124759 | - | P-Net before 1.0.4 routes a received RTA alarm frame to an Application Relationship using only the destination alarm reference in the frame, without checking the source of the frame. A host with ADJACENT network access can abort an established Applic | 2026-11-13 14:17:50 | 2026-11-13 14:17:50 |
| CVE-2026-124742 | 5.5 | A flaw was found in BusyBox. The volume identification component fails to properly validate cluster parameters when analyzing specially formatted FAT filesystems. An attacker able to present a crafted storage device or disk image can trigger a divide | 2026-11-13 14:17:50 | 2026-11-11 12:19:47 |
| CVE-2026-124854 | 8.8 | Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7. | 2026-11-13 14:17:50 | 2026-11-10 14:17:17 |
| CVE-2026-123041 | - | The request-callout plugin in Kong Gateway Enterprise and Kong AI Gateway omits callout headers not sent by the client from its cache key, allowing a cached callout response for a caller to be served to another. | 2026-11-13 14:17:49 | 2026-11-10 22:18:28 |
| CVE-2026-121287 | 8.8 | An unauthenticated attacker on an adjacent network segment can send crafted RIPv2 packets to a RIP-enabled interface on the device to trigger the Rip agent crash without providing valid credentials. Repeated exploitation reliably interrupts routing s | 2026-11-13 14:17:49 | 2026-11-10 20:18:53 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/40249
Zapisa po stranici: