| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-125269 | 7.0 | FFmpeg through 9.0.2 contains a double free vulnerability in libavcodec/cbs_sei.c where cbs_sei_delete_message() leaves a stale extension_data reference that ff_cbs_sei_add_message() reuses. Attackers can supply a crafted H.264 stream with a display | 2026-11-14 03:17:25 | 2026-11-09 20:18:13 |
| CVE-2026-125265 | 5.3 | FFmpeg through 9.0.2 contains a use-after-free vulnerability in libavcodec/nvdec.c because ff_nvdec_start_frame() fails to reset ctx->bitstream after slice errors. Attackers can supply crafted video that abandons a picture before end_frame, causing c | 2026-11-14 03:17:25 | 2026-11-09 20:18:13 |
| CVE-2026-125261 | 6.1 | FFmpeg through 9.0.2 contains an out-of-bounds read vulnerability in the SGI encoder's encode_frame() in libavcodec/sgienc.c, where unsigned size variables mis-handle negative linesize frames. Attackers can supply a video whose display matrix trigger | 2026-11-14 03:17:25 | 2026-11-09 20:18:12 |
| CVE-2026-125082 | 4.0 | A security flaw has been discovered in sunkaifei FlyCMS up to e71738e0cfb7ffd48c2ce74242a2dbb43f84f25a. Affected by this vulnerability is the function ModelDataService.insertData of the file articles/detail.html of the component Content Rendering. Pe | 2026-11-14 03:17:24 | 2026-11-10 01:17:19 |
| CVE-2026-125076 | 7.5 | A vulnerability was found in SourceCodester Smart Attendance System with QR Code Scanner 1.0. Affected is an unknown function of the file api/attendance_handler.php of the component JSON Endpoint. Performing a manipulation of the argument student_cod | 2026-11-14 03:17:24 | 2026-11-10 00:17:06 |
| CVE-2026-125118 | 6.5 | Mongoose is a MongoDB object modeling tool designed to work in an asynchronous environment. Prior to 6.13.12, 7.8.13, 8.24.7, and 9.11.4, Schema.prototype.virtual() builds nested virtual paths without applying the special-property validation already | 2026-11-14 03:17:24 | 2026-11-09 23:17:22 |
| CVE-2026-125114 | - | Novu provides an API for sending notifications through multiple channels. Prior to 3.15.0, the conditions filter webhook in libs/application-generic/src/usecases/conditions-filter/conditions-filter.usecase.ts passes the user-configured child.webhookU | 2026-11-14 03:17:24 | 2026-11-09 23:17:21 |
| CVE-2026-125110 | 5.3 | Rack is a modular Ruby web server interface. Prior to 2.2.25, 3.1.23, and 3.2.8, Rack::Static serves a path after Utils.clean_path_info normalization but evaluates header_rules against a path that is only URL-decoded. An unauthenticated attacker can | 2026-11-14 03:17:24 | 2026-11-09 22:18:42 |
| CVE-2026-124996 | 7.5 | A weakness has been identified in Turboderp-org ExLlamaV3 up to 1.6.3. The impacted element is the function routing_sel_norm_kernel of the file exllamav3/exllamav3_ext/routing.cu of the component hash-MoE routing. This manipulation of the argument ga | 2026-11-14 03:17:24 | 2026-11-09 22:18:39 |
| CVE-2026-122101 | 3.7 | CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Ex | 2026-11-14 03:17:23 | 2026-11-10 22:18:28 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/40236
Zapisa po stranici: