| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-104259 | 5.4 | ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. Prior to 2.9.15 and 3.0.17, msre_fn_removeComments_execute in apache2/re_tfns.c and inplace() in src/actions/transformations/remove_comment | 2026-11-09 22:18:22 | 2026-11-09 22:18:22 |
| CVE-2026-107330 | 7.7 | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to a Server-Side Request Forgery (SSRF) vulnerability. | 2026-11-09 22:18:22 | 2026-11-08 17:16:35 |
| CVE-2026-107891 | 8.1 | musl libc before 1.2.7, when an untrusted regular expression is used with regcomp, has multiple integer overflows, possibly leading to incorrect allocation sizes and out-of-bounds heap writes. | 2026-11-09 22:18:22 | 2026-11-05 16:17:32 |
| CVE-2026-108387 | - | radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.2, attacker-controlled data from several binary format plugins could reach RBinInfo->bclass. Opening or analyzing a crafted Pebble or Sega Mega Drive binary c | 2026-11-09 22:18:22 | 2026-11-04 23:17:18 |
| CVE-2026-108536 | 4.6 | IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to bypass security restrictions due to improper restriction of rendered UI layers or frames. | 2026-11-09 22:18:22 | 2026-11-04 21:17:46 |
| CVE-2026-107479 | - | An integer truncation vulnerability in the QTextCodec conversion functions of the Qt 5 Core Compatibility APIs module impacts the Qt Framework. An application using the affected functionality could crash. | 2026-11-09 22:18:22 | 2026-11-04 13:17:21 |
| CVE-2026-102643 | 8.8 | AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on top of the Python asyncio framework. Prior to 2.24.1, SFTPServer.map_path() uses posixpath.normpath() on a client-supplied path and | 2026-11-09 22:18:21 | 2026-11-09 22:18:21 |
| CVE-2026-102289 | - | zizmor is a static analysis tool for CI/CD systems. In version 1.27.0, debug logging serializes the parsed application configuration with a derived Debug implementation for GitHubToken, causing credentials supplied through GH_TOKEN, GITHUB_TOKEN, ZIZ | 2026-11-09 22:18:21 | 2026-11-09 22:18:21 |
| CVE-2026-102337 | - | Webmin is a web-based system administration tool for Unix-like servers. Prior to 2.652, untrusted users with access to the File Manager or Upload and Download modules can direct Webmin's server-side URL download functionality to non-public network ad | 2026-11-09 22:18:21 | 2026-11-04 23:17:17 |
| CVE-2025-11229 | 7.2 | The system fails to properly enforce scope authorization when the `authorize_all_scopes` configuration is enabled. This allows applications using the client credentials grant type to obtain all API scopes, including sensitive internal and console sco | 2026-11-09 22:18:20 | 2026-11-04 06:16:54 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/40089
Zapisa po stranici: