| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-70555 | 6.5 | rConfig Core 8.2.3 before 8.2.13 contains an information disclosure vulnerability that allows authenticated users to retrieve cleartext SSH, Telnet, and enable passwords for managed devices through the device-credentials API due to automatic decrypti | 2026-11-13 13:18:25 | 2026-11-09 19:17:05 |
| CVE-2026-63497 | - | titra is an open source time tracking project. In versions 1.0.3 and prior, authenticated API users can abuse the customfields object to inject or overwrite top-level fields in MongoDB documents. At time of publication, there are no publicly known pa | 2026-11-13 13:18:24 | 2026-11-09 22:18:53 |
| CVE-2026-49329 | 7.5 | A flaw was found in openshift/oauth-server. The OAuth login and error page endpoints pass the unauthenticated Accept-Language header to golang.org/x/text/language.ParseAcceptLanguage() without input validation. A bypass of the CVE-2022-32149 mitigati | 2026-11-13 13:18:23 | 2026-09-01 16:16:57 |
| CVE-2026-13732 | 7.0 | A flaw was found in GDB's STABS debug format parser. The read_member_functions() function in gdb/stabsread.c contains a linked list removal bug in the code that separates destructor and non-destructor member functions of C++ classes. The bug causes t | 2026-11-13 13:18:22 | 2026-08-31 20:17:02 |
| CVE-2026-125815 | 5.3 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Noah Hearle We’re Open! opening-hours allows Code Injection.This issue affects We’re Open!: from n/a through 2.8. | 2026-11-13 13:18:21 | 2026-11-13 13:18:21 |
| CVE-2026-125270 | 5.3 | FFmpeg through 9.0.2 contains a heap out-of-bounds read vulnerability in v4l2_buffer_swframe_to_buf() in libavcodec/v4l2_buffers.c that mishandles frames with negative linesize. Attackers can supply bottom-up AVI or PNM/PFM files that are transcoded | 2026-11-13 13:18:20 | 2026-11-09 20:18:13 |
| CVE-2026-125266 | 3.3 | FFmpeg through 9.0.2 contains an uninitialized stack memory disclosure vulnerability in old_codec23() of libavcodec/sanm.c that leaks stack bytes into decoded frames. Attackers can supply a crafted LucasArts SMUSH/SANM animation using codec 23 with a | 2026-11-13 13:18:19 | 2026-11-09 20:18:13 |
| CVE-2026-125262 | 7.8 | FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in libavcodec/lcevcdec.c because LCEVC output picture dimensions are not validated against the allocated frame. Attackers can embed crafted LCEVC enhancement data with differing globa | 2026-11-13 13:18:17 | 2026-11-09 20:18:12 |
| CVE-2026-125250 | 7.8 | FFmpeg through 9.0.2 contains a heap buffer overflow in the GIF encoder's gif_image_write_image() in libavcodec/gif.c because shrunk_buf is sized from the first frame's linesize. Attackers can supply PAL8 video whose frame linesize grows mid-stream, | 2026-11-13 13:18:16 | 2026-11-09 19:17:03 |
| CVE-2026-125222 | 7.0 | FFmpeg through 9.0.2 contains an integer overflow vulnerability in hap_parse_frame_header() in libavcodec/hapdec.c that allows attackers to trigger a heap buffer overflow on 32-bit builds. Attackers can craft Hap video frames with Snappy length prefi | 2026-11-13 13:18:15 | 2026-11-09 19:16:59 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/40249
Zapisa po stranici: