| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-112318 | 6.5 | The policy RPC stubs in kadmin/server/server_stubs.c in MIT Kerberos 5 (aka krb5) 1.5.3 and later do not reject a NULL policy name decoded by xdr_nullstring(), which allows remote authenticated users to cause a denial of service (kadmind crash via NU | 2026-11-13 14:17:47 | 2026-11-09 19:16:40 |
| CVE-2026-112314 | 7.5 | clnttcp_call() in lib/rpc/clnt_tcp.c in MIT Kerberos 5 (aka krb5) does not free the RPC reply verifier between retries, which allows remote attackers to cause a denial of service (memory leak in GSS-RPC client programs) by injecting RPC replies with | 2026-11-13 14:17:47 | 2026-11-09 19:16:39 |
| CVE-2026-115456 | 3.7 | A flaw was found in gcc. An attacker could cause a Denial of Service (DoS) by passing a string that is not null-terminated to the std::from_chars() function in the libstdc++ library. This issue triggers an out-of-bounds read beyond the allocated buff | 2026-11-13 14:17:47 | 2026-10-30 09:17:14 |
| CVE-2026-103242 | 7.1 | A heap-based buffer overflow flaw was found in rpm. RPMTAG_FILESIGNATURES in a crafted, unsigned RPM package's main header is declared with the wrong header type, causing hex2binv() to allocate a one-byte buffer and then write the tag's attacker-cont | 2026-11-13 14:17:47 | 2026-09-30 12:17:12 |
| CVE-2026-101295 | 7.3 | Path traversal / arbitrary file write in oc-mirror's operator catalog image extraction. When mirroring operator catalogs using either the legacy v1 path (--v1) or the OCI feature path (--use-oci-feature), oc-mirror extracts tar entries from catalog i | 2026-11-13 14:17:46 | 2026-09-30 15:22:19 |
| CVE-2026-0175 | 8.4 | In multiple locations, there is a possible way to bypass key authorization policies during wrapped key import due to a logic error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is n | 2026-11-13 14:17:45 | 2026-11-10 20:17:20 |
| CVE-2026-92615 | 6.6 | A flaw was found in flightctl. The configureRepoHTTPSClient() function in the device-render worker builds a per-repository tls.Config (which may include InsecureSkipVerify, a custom CA bundle, or tenant-supplied mTLS client certificates) and installs | 2026-11-13 13:18:30 | 2026-09-16 16:17:23 |
| CVE-2026-84503 | 6.7 | A flaw was found in ansible-core's ansible.builtin.git module. The module invokes git (ls-remote, clone, fetch) with the repository URL as a positional argument and without a "--" separator, so a repository URL that begins with a dash is interpreted | 2026-11-13 13:18:28 | 2026-11-09 18:17:34 |
| CVE-2026-83589 | 6.1 | A flaw was found in oauth-proxy. The application fails to properly validate the destination redirect parameter (`rd`) during post-login redirection. A remote attacker can exploit this vulnerability by enticing a user to follow a specially crafted lin | 2026-11-13 13:18:27 | 2026-10-01 10:17:17 |
| CVE-2026-75888 | 7.7 | A flaw was found in the OpenShift console. An authenticated console user can exploit a Server-Side Request Forgery (SSRF) vulnerability by providing a specially crafted Helm chart URL without proper validation. This allows the user to make the consol | 2026-11-13 13:18:26 | 2026-10-12 17:17:35 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/40249
Zapisa po stranici: