| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-125097 | 3.3 | FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in raw_decode() in libavcodec/rawdec.c that fails to verify packet stride covers a full row for 1 to 8 bits per pixel video. Attackers can supply crafted AVI, MOV or NUT f | 2026-11-13 13:18:03 | 2026-11-09 19:16:50 |
| CVE-2026-124987 | 7.5 | A vulnerability has been found in mikefarah yq up to 4.53.3. This affects the function Encode of the file pkg/yqlib/encoder_properties.go. Such manipulation leads to escaping of output. It is possible to launch the attack remotely. The pull request t | 2026-11-13 13:18:02 | 2026-11-09 20:18:10 |
| CVE-2026-124625 | 6.5 | A security vulnerability has been detected in PipraPay 3.0.0. Affected by this issue is the function deleteData of the file pp-content/pp-include/pp-functions.php of the component Admin Panel. The manipulation of the argument selected_ids/ItemID lead | 2026-11-13 13:18:01 | 2026-11-09 14:17:16 |
| CVE-2026-123806 | 4.0 | python-tuf is a Python reference implementation of The Update Framework (TUF). Prior to 7.0.0, DelegatedRole._is_target_in_pathpattern in tuf/api/_payload.py uses fnmatch.fnmatch, which applies os.path.normcase before matching and makes delegation pa | 2026-11-13 13:18:00 | 2026-11-09 22:18:36 |
| CVE-2026-123802 | 8.1 | SuperTokens Core is an open source authentication server. From 11.3.0 until 11.3.8, 11.4.8, 12.0.11, 12.1.2, 12.2.1, and 12.3.1, a licensed deployment with a configured SAML client can authenticate an identity from an assertion that did not satisfy t | 2026-11-13 13:17:59 | 2026-11-09 19:16:47 |
| CVE-2026-123798 | 8.1 | SuperTokens Core is an open source authentication server. From 11.3.0 until 11.3.7, 11.4.7, and 12.0.10, SAML.verifySamlResponseSignature calls OpenSAML SignatureValidator.validate without first applying SAMLSignatureProfileValidator. The Core can th | 2026-11-13 13:17:58 | 2026-11-09 19:16:46 |
| CVE-2026-123372 | - | compose-lint is a Docker Compose security linter that identifies dangerous misconfigurations before deployment. From 0.22.0 until 0.32.0, compose-lint substitutes values from a sibling .env file into image fields and quotes the resolved value in CL-0 | 2026-11-13 13:17:57 | 2026-11-09 18:17:26 |
| CVE-2026-123368 | - | compose-lint is a Docker Compose security linter that identifies dangerous misconfigurations before deployment. From 0.22.0 until 0.31.0, compose-lint follows a sibling .env symbolic link outside the project without applying its normal containment ch | 2026-11-13 13:17:56 | 2026-11-09 18:17:25 |
| CVE-2026-121771 | 5.3 | Insertion of Sensitive Information Into Sent Data vulnerability in PublishPress Gutenberg Blocks advanced-gutenberg allows Retrieve Embedded Sensitive Data.This issue affects Gutenberg Blocks: from n/a through 3.7.6. | 2026-11-13 13:17:55 | 2026-11-13 13:17:55 |
| CVE-2026-122056 | 5.9 | A flaw was found in OpenSCAP. A heap-based buffer overflow can occur when processing a specially crafted Extensible Configuration Checklist Description Format (XCCDF) document using the sds-compose option. An attacker could exploit this vulnerability | 2026-11-13 13:17:55 | 2026-11-09 22:18:34 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/40249
Zapisa po stranici: