| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-114406 | 6.8 | The system certificate authority (CA) store in Red Hat products, distributed via ca-certificates RPM packages, included multiple root CA certificates of authorities, which signed intermediate CA certificates with weak private keys issued by the eMudh | 2026-10-29 20:17:25 | 2026-10-21 21:17:58 |
| CVE-2026-107047 | 7.5 | Insecure permissions in mendhak GPSLogger versionCode 137 allows unauthorized attackers to arbitrarily manipulate the app's logging mechanism and log data. | 2026-10-29 20:17:24 | 2026-10-29 17:17:57 |
| CVE-2026-107042 | 7.5 | Insecure permissions in USP Ultimate Screenshot Painter versionCode 240213.009 allows unauthorized attackers to move or overwrite files in another user's private storage via supplying a crafted content URI. | 2026-10-29 20:17:24 | 2026-10-29 16:17:50 |
| CVE-2026-104339 | 9.8 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command. | 2026-10-29 20:17:24 | 2026-10-29 16:17:44 |
| CVE-2026-104316 | 6.5 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker to cancel any victim's running background workflow job by sending a single HTTP request, resulting in loss of in-progress compute work with no flow-level permission check. | 2026-10-29 20:17:24 | 2026-10-29 16:17:43 |
| CVE-2026-104309 | 6.5 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory. | 2026-10-29 20:17:24 | 2026-10-29 16:17:43 |
| CVE-2026-107015 | 9.1 | Insecure permissions in Simple Contacts Pro versionCode 107 allow unauthorized attackers to write and read notes in another user's' note database. | 2026-10-29 20:17:24 | 2026-10-29 15:17:15 |
| CVE-2026-103314 | 7.4 | A flaw was found in Red Hat Advanced Cluster Security for Kubernetes (RHACS). The Central SAML authentication ACS endpoint does not retain used SAML assertion or response identifiers to prevent replay. An attacker who obtains a valid, unexpired signe | 2026-10-29 20:17:23 | 2026-10-19 13:16:53 |
| CVE-2026-102559 | 8.6 | A flaw was found in libsoup. When constructing a masked WebSocket client frame for a very large outgoing payload, size values passed to GByteArray allocation APIs could be truncated while the masking routine still used the full length, causing a heap | 2026-10-29 20:17:23 | 2026-09-29 18:17:08 |
| CVE-2026-102558 | 8.6 | A flaw was found in libsoup. When max-incoming-payload-size is unlimited (0), SoupWebsocketConnection could grow its incoming GByteArray based on an attacker-controlled frame length until the length wrapped, causing a heap buffer overflow while readi | 2026-10-29 20:17:23 | 2026-09-29 18:17:08 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39823
Zapisa po stranici: