| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-121885 | 6.5 | A flaw was found in Podman. An attacker can trigger a Denial of Service (DoS) by supplying a container image containing crafted metadata labels. Podman's auto-update mechanism improperly trusts these image labels to determine which system services to | 2026-11-13 14:17:49 | 2026-11-10 15:17:15 |
| CVE-2026-123819 | 6.5 | Wagtail is an open source content management system built on Django. Prior to 7.0.9, 7.3.4, 7.4.3, and 8.0rc2, a CMS user who has add permission for a snippet model but lacks change and view permission for an existing snippet can access the snippet c | 2026-11-13 14:17:49 | 2026-11-09 22:18:38 |
| CVE-2026-123815 | - | pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev102, UnTar._safe_extractall in src/pyload/plugins/extractors/UnTar.py validates archive member paths and link targets but does not call TarInfo.isdev to reject s | 2026-11-13 14:17:49 | 2026-11-09 22:18:37 |
| CVE-2026-123811 | 7.5 | Dynatrace MCP Server is an MCP server for Dynatrace Observability. Prior to 2.0.0, a server started with the --http option accepts JSON-RPC tools/call requests without authentication, session validation, or Host and Origin protections before dispatch | 2026-11-13 14:17:49 | 2026-11-09 22:18:37 |
| CVE-2026-123876 | 4.4 | A flaw was found in the default seccomp profile used by Podman via containers-common. Deny rules for AF_VSOCK and NETLINK_AUDIT compared socket arguments with unmasked 64-bit equality. Because the kernel truncates those int arguments to 32 bits, sett | 2026-11-13 14:17:49 | 2026-11-06 18:18:05 |
| CVE-2026-118368 | - | Akaunting 3.3.0 contains a stored cross-site scripting vulnerability in the XLSX item-import workflow. An authenticated Manager can import an item whose name contains HTML. When another authenticated user selects that item while creating a document, | 2026-11-13 14:17:48 | 2026-11-11 05:19:27 |
| CVE-2026-116645 | - | LimeSurvey Community Edition 7.8.0 contains an SQL injection vulnerability in the survey-archive participant import and SPSS-response export workflow. An authenticated user with global surveys.create permission can import a crafted .lsa archive whose | 2026-11-13 14:17:48 | 2026-11-11 03:16:48 |
| CVE-2026-120977 | 8.2 | On affected platforms running Arista EOS with 802.1X with Dynamic Host Configuration Protocol (DHCP) device profiling enabled, a network-adjacent attacker can send a crafted DHCP packet to force the device to record a spoofed device profile. This may | 2026-11-13 14:17:48 | 2026-11-10 20:18:52 |
| CVE-2026-120749 | 6.2 | A flaw was found in D-Bus. With a privileged Monitoring client attached (for example dbus-monitor or busctl monitor), an unprivileged local user can cause dbus-daemon to abort if a driver-originated broadcast such as NameOwnerChanged or ActivatableSe | 2026-11-13 14:17:48 | 2026-11-06 07:17:06 |
| CVE-2026-109096 | 5.5 | Incorrect handling of negative returns from ddQueryImageAttributes() when processing XvPutImage requests in X.Org xwayland before 24.1.15 and X Server before 21.1.26 could be used by authenticated X clients to crash the X server. | 2026-11-13 14:17:47 | 2026-11-13 14:17:47 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/40249
Zapisa po stranici: