| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2025-71365 | 8.1 | picklescan before 0.0.33 fails to detect malicious pickle files that invoke numpy.f2py.crackfortran.myeval function through the reduce method. Attackers can craft malicious pickle files embedding arbitrary code that evades picklescan detection and ex | 2026-10-12 21:10:00 | 2026-06-23 13:16:38 |
| CVE-2025-71341 | 8.1 | picklescan before 0.0.29 fails to detect the profile.Profile.runctx function when analyzing pickle files, allowing attackers to embed undetected malicious code. Remote attackers can craft malicious pickle files using profile.Profile.runctx in the red | 2026-10-12 21:10:00 | 2026-06-23 13:16:38 |
| CVE-2025-71337 | 8.3 | Flowise before 3.0.10 (affected versions 3.0.7 and earlier) contains an unverified email change vulnerability. An authenticated user can change the account email address, used as a login identifier and password-recovery channel, via the account profi | 2026-10-12 21:10:00 | 2026-06-23 13:16:38 |
| CVE-2026-96012 | 9.9 | IBM Db2 Mirror for i 7.4, 7.5, and 7.6 is vulnerable to privilege escalation. An authenticated attacker could craft a malicious request that bypasses additional authorization and input validation checks to execute malicious code. An attacker could ex | 2026-10-12 20:17:10 | 2026-10-12 20:17:10 |
| CVE-2026-95838 | - | containerd is an open-source container runtime. Prior to 1.7.35, 2.0.12, 2.2.8, and 2.3.5, containerd's layer unpack handler repeatedly traverses directories for certain opaque whiteout configurations. A malicious image layer can trigger repeated dir | 2026-10-12 20:17:10 | 2026-10-12 20:17:10 |
| CVE-2026-95837 | 7.8 | containerd is an open-source container runtime. From 2.1.0 until 2.2.7 and 2.3.4, containerd's CRI CreateContainer checkpoint restore is vulnerable because CRIU restores process security state from checkpoint data instead of enforcing the destination | 2026-10-12 20:17:10 | 2026-10-12 20:17:10 |
| CVE-2026-78404 | 6.5 | IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a local privilege escalation via the db2pd utility. | 2026-10-12 20:17:10 | 2026-10-12 19:16:39 |
| CVE-2026-97058 | - | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-10-12 20:17:10 | 2026-09-24 14:18:21 |
| CVE-2026-78002 | 7.5 | A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript `replace()` function by sending specially crafted syslog messages. This vulnerability arises from an incorrect buffer size calculat | 2026-10-12 20:17:10 | 2026-08-27 17:20:29 |
| CVE-2026-41510 | 7.2 | OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.0.0 until 3.8.1, Coraza silently drops arguments after SecArgumentsLimit in internal/corazawaf/transaction.go, while internal/bodyprocessors/urlencoded.go wr | 2026-10-12 20:17:09 | 2026-10-12 20:17:09 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: