| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2025-9230 | 9.8 | Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write. Impact summary: This out-of-bounds read may trigger a crash which leads to Denial of Service for an a | 2026-11-09 20:57:31 | 2025-09-30 14:15:41 |
| CVE-2025-9231 | 5.9 | Issue summary: A timing side-channel which could potentially allow remote recovery of the private key exists in the SM2 algorithm implementation on 64 bit ARM platforms. Impact summary: A timing side-channel in SM2 signature computations on 64 bit A | 2026-11-09 20:51:27 | 2025-09-30 14:15:41 |
| CVE-2024-13176 | 4.6 | Issue summary: A timing side-channel which could potentially allow recovering the private key exists in the ECDSA signature computation. Impact summary: A timing side-channel in ECDSA signature computations could allow recovering the private key by | 2026-11-09 20:22:46 | 2025-01-20 14:15:26 |
| CVE-2026-97677 | 8.1 | IBM Langflow OSS 1.0.0 through 1.12.2 An authenticated flow author could write attacker-controlled file content into any directory writable by the service account, bypassing the platform's local file access isolation safeguard. Via a crafted on-disk | 2026-11-09 20:18:15 | 2026-11-08 19:17:54 |
| CVE-2026-8860 | 6.5 | IBM Security Verify Directory 10.0.0 through 10.0.4 and IBM Verify Directory 11.0.0 accepts GET requests for authentication, allowing credentials to be passed as URL parameters. This causes passwords to be exposed in browser history and server logs. | 2026-11-09 20:18:15 | 2026-11-08 19:17:43 |
| CVE-2026-87857 | - | Temporal Server does not bind a workflow-history pagination token to the namespace and workflow named in the request that presents it. GetWorkflowExecutionHistory and GetWorkflowExecutionHistoryReverse authorize the caller against the namespace in th | 2026-11-09 20:18:14 | 2026-11-09 20:18:14 |
| CVE-2026-17427 | 6.5 | IBM Power Systems Firmware FW1060.00 through FW1060.81, OP940.00 through OP940.A2, OP910.00 through OP910.95, and OP940.00 through OP940.82 could allow a remote attacker to cause a denial of service due to improper validation of input length. | 2026-11-09 20:18:14 | 2026-11-08 20:17:24 |
| CVE-2026-16682 | 6.5 | IBM Power Systems Firmware FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, OP940.00 through OP940.A2, OP910.00 through OP910.95, and OP940.00 through OP940.82 could allow a remote attacker to cause a denial of s | 2026-11-09 20:18:14 | 2026-11-08 20:17:24 |
| CVE-2026-84228 | 3.1 | IBM Guardium Data Protection 12.2.4 could allow a remote authenticated attacker to obtain sensitive information due to improper input validation. | 2026-11-09 20:18:14 | 2026-11-08 19:17:41 |
| CVE-2026-18525 | 4.9 | IBM Secure Proxy 6.1.0.0 through 6.2.1.2 could allow a remote authenticated attacker to cause a denial of service due to improper validation of listener IP address and port. | 2026-11-09 20:18:14 | 2026-11-08 18:17:04 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/40089
Zapisa po stranici: