| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-113867 | 9.1 | Thunderbird did not escape attribute values when serializing outgoing XMPP stanzas. Because values from incoming requests were echoed back in automatic replies, a remote XMPP user could send a crafted request that caused Thunderbird to inject arbitra | 2026-10-29 19:17:16 | 2026-10-20 20:17:19 |
| CVE-2026-112380 | 9.9 | Missing authorization in the WhatsApp group channel in Kiro Crew might allow a remote actor who is a member of an operator-configured WhatsApp group to control the operator's other agent sessions and execute arbitrary commands on the host running Kir | 2026-10-29 19:17:16 | 2026-10-20 20:17:16 |
| CVE-2026-111088 | 6.5 | A Stored Cross-Site Scripting vulnerability exists in the SNS VPN log monitoring screen. | 2026-10-29 19:17:16 | 2026-10-20 19:17:30 |
| CVE-2026-105923 | - | A malicious SVG can trigger an integer overflow which in turn triggers a null-pointer dereference in VectorImage QML Type. | 2026-10-29 19:17:15 | 2026-10-21 10:16:54 |
| CVE-2026-109125 | 5.3 | In NLnet Labs Unbound up to and including version 1.26.1, an observable cache-level side-channel can be exposed with 'unwanted-reply-threshold > 0' configurations (not a default configuration). If a response-like UDP datagram reaches the upstream so | 2026-10-29 19:17:15 | 2026-10-21 09:17:06 |
| CVE-2026-109576 | 5.5 | The parser in PEAK-System PCAN driver correctly detected the malformed record, but the loop iterating the record list advanced its processed-bytes counter even when a record had been rejected as invalid. | 2026-10-29 19:17:15 | 2026-10-20 21:17:15 |
| CVE-2026-108087 | 8.8 | ** UNSUPPORTED WHEN ASSIGNED ** Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Apache Cocoon. This issue affects Apache Cocoon: all versions. Missing input sanitation would allow arbitrary | 2026-10-29 19:17:15 | 2026-10-20 11:17:16 |
| CVE-2026-108086 | 7.5 | ** UNSUPPORTED WHEN ASSIGNED ** Improper restriction of recursive entity references in DTDs ('XML entity expansion') vulnerability in Apache Cocoon. This issue affects Apache Cocoon: all versions. XEE in the fp: form processor could lead to SSRF, | 2026-10-29 19:17:15 | 2026-10-20 11:17:16 |
| CVE-2026-101103 | 5.5 | The PEAK-System PCAN diagnostic call did not validate that the caller-supplied output buffer was large enough to hold the output record. | 2026-10-29 19:17:14 | 2026-10-20 21:17:14 |
| CVE-2026-63889 | 8.1 | In the Linux kernel, the following vulnerability has been resolved: scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 An adjacent Fibre Channel fabric actor that can deliver an FPIN ELS frame to an lpfc or qla2xxx Linux initiator can | 2026-10-29 19:16:22 | 2026-07-19 16:17:06 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39823
Zapisa po stranici: