| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-129116 | 7.5 | C-Kermit from 7.0.197 before 11.1.515 contains an authentication bypass vulnerability in the IKSD SSL build that leaves Telnet authentication state at AUTH_VALID after a refused certificate login. Attackers holding a trusted certificate mapped to a r | 2026-11-13 22:14:15 | 2026-11-13 17:17:28 |
| CVE-2026-128132 | - | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, the WebSocket reader continues parsing frames already received after the receive queue pauses the transport, and empty messages are not counted toward th | 2026-11-13 22:11:32 | 2026-11-13 21:17:45 |
| CVE-2026-128131 | - | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, aiohttp decompresses each member of a payload containing many concatenated gzip, deflate, or zstd streams by passing the entire remaining input to a new | 2026-11-13 22:11:32 | 2026-11-13 21:17:45 |
| CVE-2026-128130 | - | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, when the pipelined request queue is full, the pure-Python parser stores the unparsed remainder internally and also returns the same data to its caller. A | 2026-11-13 22:11:32 | 2026-11-13 21:17:44 |
| CVE-2026-128128 | 7.5 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, the C WebSocket reader adds a declared frame length to the size of an already buffered partial message using signed 64-bit arithmetic. A length near two | 2026-11-13 22:11:32 | 2026-11-13 21:17:44 |
| CVE-2026-128127 | - | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, BodyPartReader.read_chunk() processing a multipart part with Content-Transfer-Encoding set to base64 keeps reading until the chunk length is a multiple o | 2026-11-13 22:11:32 | 2026-11-13 21:17:44 |
| CVE-2026-128126 | - | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, Request.post() does not limit the number of fields in a URL-encoded form body, and inserting many repeated keys into MultiDict takes quadratic time on th | 2026-11-13 22:11:32 | 2026-11-13 21:17:44 |
| CVE-2026-128124 | - | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, Application.add_domain() converts every asterisk wildcard in a domain mask into a greedy regular-expression fragment, so a mask containing two or more wi | 2026-11-13 22:11:32 | 2026-11-13 21:17:44 |
| CVE-2026-97692 | 7.7 | BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.6, 1.5.2, and 1.6.1, the BACnet/SC message decoder walks the header-option list by following each option's MORE bit. Nothing rejects a list whos | 2026-11-13 22:11:32 | 2026-11-13 19:20:03 |
| CVE-2026-62977 | - | BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to version 1.5.1, the BACnet FILE object implementation allows remote WriteProperty(PROP_FILE_SIZE) requests to change the size of a stream-access FILE object w | 2026-11-13 22:11:32 | 2026-11-13 19:19:33 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/40249
Zapisa po stranici: