| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-91869 | 8.1 | IBM Security QRadar EDR 3.12 through 3.12.26 could allow a remote authenticated attacker to bypass security restrictions due to improper rate limiting on TOTP verification. | 2026-11-13 22:17:26 | 2026-11-13 22:17:26 |
| CVE-2026-91868 | 6.5 | IBM Security QRadar EDR 3.12 through 3.12.26 could allow a remote authenticated attacker to obtain sensitive information due to improper access control. | 2026-11-13 22:17:26 | 2026-11-13 22:17:26 |
| CVE-2026-82102 | 6.4 | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to a server-side request forgery vulnerability. | 2026-11-13 22:17:26 | 2026-11-13 22:17:26 |
| CVE-2026-82414 | 8.8 | BACnet Stack is a BACnet open source protocol stack C library for embedded systems. From versions 1.4.0 to before 1.4.6, 1.5.0 to before 1.5.1, and 1.6.0 to before 1.6.1, the BACnet MS/TP receive path decodes COBS frames into an output pointer inside | 2026-11-13 22:17:26 | 2026-11-13 19:19:36 |
| CVE-2026-93335 | 6.5 | Vault Community Edition and Vault Enterprise did not consistently apply explicit ACL policy deny rules to request paths that differ only by a trailing slash. This may allow an authenticated user who holds a broader delete permission on system configu | 2026-11-13 22:17:26 | 2026-11-13 00:20:19 |
| CVE-2026-93333 | 2.7 | Vault's audit devices did not validate the contents of a configured audit log prefix and did not consistently enforce the server-level setting that restricts audit log prefixing. This may allow a privileged operator to inject content into audit logs, | 2026-11-13 22:17:26 | 2026-11-13 00:20:18 |
| CVE-2026-92735 | 5.9 | HashiCorp Vault and Vault Enterprise are vulnerable to an issue in the integrated storage join process that may allow an unauthenticated attacker with network access to a new, uninitialized node to cause that node to send credentials from its server | 2026-11-13 22:17:26 | 2026-11-13 00:20:18 |
| CVE-2026-5514 | 3.3 | IBM Bob 2.0.3 allows unauthorized extensions to retrieve session tokens via the authentication provider API. The token is exposed in the account identifier field during account enumeration, without requiring explicit user consent. This may allow mali | 2026-11-13 22:17:25 | 2026-11-13 22:17:25 |
| CVE-2026-19194 | 5.9 | The HashiCorp cap JWT validation library before version 0.14.0 is vulnerable to a claims validation bypass that may cause downstream applications to make authorization decisions using claim values different from those validated. Exploitation requires | 2026-11-13 22:17:25 | 2026-11-13 22:17:25 |
| CVE-2026-68551 | - | Budget Board is an app for tracking monthly spending and working towards financial goals. Prior to version 3.6.2, Budget Board's OIDC login flow finds and signs into an existing local account purely by matching the email address asserted in the ident | 2026-11-13 22:17:25 | 2026-11-13 20:19:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/40249
Zapisa po stranici: