[ Latest · 16,702 CVEs ]
Newly published CVEs.
Every CVE the NVD lists as published in the last 30 days, newest first. Rows marked green on the left are on the matters-most list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-107406 | 8 Oct 2026 | CVSS 9.5 | NetScaler ADCMemory overflow vulnerability leading to Remote Code Execution or Denial of Service Vulnerability in NetScaler ADC. NetScaler ADC or NetScaler… | Fix |
| CVE-2026-78401 | 8 Oct 2026 | CVSS 9.8 | IBM Security Verify AccessIBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote unauthenticated attacker to… | |
| CVE-2026-78406 | 8 Oct 2026 | CVSS 9.8 | IBM Security Verify AccessIBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote unauthenticated attacker to… | |
| CVE-2026-78407 | 8 Oct 2026 | CVSS 5.4 | IBM Security Verify AccessIBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 are vulnerable to cross-site scripting. This… | |
| CVE-2026-79842 | 8 Oct 2026 | CVSS 9.1 | Hewlett Packard Enterprise HPE Intelligent Management Center (iMC)An authentication bypass vulnerability exists in HPE Intelligent Management Center (iMC) prior to v7.3 E0713 | |
| CVE-2026-95116 | 8 Oct 2026 | CVSS 7.5 | VulnerabilityAn issue in libming through 0.4.8 allows a remote attacker to cause a denial of service via the readtag_file() in src/blocks/fromswf.c. | |
| CVE-2026-78388 | 8 Oct 2026 | CVSS 8.8 | IBM Security Verify AccessIBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 is vulnerable to cross-site request forgery which… | |
| CVE-2026-78399 | 8 Oct 2026 | CVSS 6.5 | IBM Security Verify AccessIBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow an authenticated user to cause a… | |
| CVE-2026-19491 | 8 Oct 2026 | CVSS 7.5 | IBM Security Verify AccessIBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote attacker to bypass… | |
| CVE-2026-19493 | 8 Oct 2026 | CVSS 7.5 | IBM Security Verify AccessIBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote attacker to perform an… | |
| CVE-2026-19494 | 8 Oct 2026 | CVSS 6.5 | IBM Security Verify AccessIBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to… | |
| CVE-2026-19498 | 8 Oct 2026 | CVSS 7.5 | IBM Security Verify AccessIBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote attacker to cause a denial… | |
| CVE-2026-19878 | 8 Oct 2026 | CVSS 6.5 | IBM Security Verify AccessIBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to… | |
| CVE-2026-16823 | 8 Oct 2026 | CVSS 7.5 | IBM Security Verify AccessIBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote attacker to bypass security… | |
| CVE-2026-16830 | 8 Oct 2026 | CVSS 5.4 | IBM Security Verify AccessIBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to… | |
| CVE-2026-16916 | 8 Oct 2026 | CVSS 8.8 | IBM Security Verify AccessIBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to… | |
| CVE-2026-17189 | 8 Oct 2026 | CVSS 6.1 | IBM Security Verify AccessIBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 is vulnerable to cross-site scripting. This… | |
| CVE-2026-18740 | 8 Oct 2026 | CVSS 8.8 | IBM Security Verify AccessIBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to… | |
| CVE-2026-19482 | 8 Oct 2026 | CVSS 8.8 | IBM Security Verify AccessIBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to… | |
| CVE-2026-12109 | 8 Oct 2026 | CVSS 7.2 | IBM Security Verify AccessIBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow an attacker with administrative… | |
| CVE-2026-11888 | 8 Oct 2026 | CVSS 7.5 | IBM Security Verify AccessIBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 is vulnerable to an information disclosure attack. | |
| CVE-2026-11930 | 8 Oct 2026 | CVSS 7.5 | IBM Security Verify AccessIBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 may not enforce authorization correctly for some… | |
| CVE-2026-11936 | 8 Oct 2026 | CVSS 5.4 | IBM Security Verify AccessIBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 local management interface in certain… | |
| CVE-2026-11939 | 8 Oct 2026 | CVSS 5.3 | IBM Security Verify AccessIBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 may be vulnerable to audit log forgery. | |
| CVE-2026-12091 | 8 Oct 2026 | CVSS 5.3 | IBM Security Verify AccessIBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a denial of service due to a… | |
| CVE-2026-107781 | 8 Oct 2026 | CVSS 7.4 | dromara skyeyeDromara Skyeye through commit 003549ae5615bd114ba5bb8ddf6a8e8ead97c321 contains a server-side request forgery and missing authorization vulnerability… | |
| CVE-2026-107782 | 8 Oct 2026 | CVSS 7.8 | winsiderss System InformerSystem Informer before 4.0.26241.138 contains an incorrect authorization vulnerability in the phsvc helper that allows local attackers to reach… | |
| CVE-2026-11318 | 8 Oct 2026 | CVSS 7.8 | Zuler Technology DeskInDeskin through 3.3.4.3 contains a privilege escalation vulnerability in the com.deskin.service.installer XPC service that allows local unprivileged… | |
| CVE-2026-107708 | 8 Oct 2026 | CVSS 4.9 | MIT krb5MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerability in the KDC's get_pac_princ_with_realm() that returns success while leaving… | |
| CVE-2026-107778 | 8 Oct 2026 | CVSS 6.5 | MIT krb5MIT Kerberos 5 (krb5) through 1.22.2 contains a NULL pointer dereference in make_cred_list() in rd_cred.c that allows authenticated Kerberos clients… | |
| CVE-2026-107779 | 8 Oct 2026 | CVSS 9.8 | dromara skyeyeDromara Skyeye through commit 003549ae5615bd114ba5bb8ddf6a8e8ead97c321 contains a missing authentication vulnerability in bundled xxl-job-admin… | |
| CVE-2026-107780 | 8 Oct 2026 | CVSS 9.8 | dromara skyeyeDromara Skyeye through commit 003549ae5615bd114ba5bb8ddf6a8e8ead97c321 contains an OS command injection vulnerability in the unauthenticated… | |
| CVE-2026-101024 | 8 Oct 2026 | CVSS 8.8 | Satel Netco DesignSatel Netco Design versions prior to v2.1.7 contains a relative path traversal vulnerability in its data export functionality. An authenticated user… | |
| CVE-2026-102368 | 8 Oct 2026 | CVSS 5.4 | TP-Link System Inc. Tapo S505 v1.6Affected Tapo device firmware stores device-specific cryptographic material in plaintext within nonvolatile storage. An attacker with physical access… | |
| CVE-2026-106435 | 8 Oct 2026 | CVSS 4.7 | MongoDB Python DriverThe MongoDB Python Driver's binary accelerator can read outside a buffer when an application decodes malformed BSON containing a truncated… | |
| CVE-2026-107318 | 8 Oct 2026 | CVSS 7.4 | @fastify/reply-from@fastify/reply-from is a Fastify plugin that forwards requests to an upstream HTTP or HTTPS server. In versions prior to 12.7.0, all of the built-in… | |
| CVE-2026-107397 | 8 Oct 2026 | CVSS 4.4 | Indico: Cross-Site-Scripting in minutes editorIndico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. Prior to 3.3.13, users who can… | Fix |
| CVE-2026-84275 | 8 Oct 2026 | CVSS 7.5 | IBM Guardium Data ProtectionIBM Guardium Data Protection 12.2 is vulnerable to path traversal in the GIM file-upload functionality. An unauthenticated attacker could exploit… | |
| CVE-2026-82344 | 8 Oct 2026 | CVSS 9.8 | IBM Guardium Data ProtectionIBM Guardium Data Protection 12.0, 12.1 is vulnerable to a heap-based buffer overflow in the S-TAP TrafficTap TDS login reassembly functionality. An… | |
| CVE-2026-84244 | 8 Oct 2026 | CVSS 6.1 | IBM Guardium Data ProtectionIBM Guardium Data Protection 12.2 IBM Security Guardium Data Protection is vulnerable to stored cross-site scripting (XSS) in the Quick Search… | |
| CVE-2026-84245 | 8 Oct 2026 | CVSS 7.8 | IBM Guardium Data ProtectionIBM Guardium Data Protection 12.2 is vulnerable to a local privilege escalation in the cp_wrapper component. A low-privileged local user could… | |
| CVE-2026-84250 | 8 Oct 2026 | CVSS 7.8 | IBM Guardium Data ProtectionIBM Guardium Data Protection 12.2 is vulnerable due to weak cryptographic protection and a hard-coded recovery key in the pkcrypto passkey component… | |
| CVE-2026-84271 | 8 Oct 2026 | CVSS 7.8 | IBM Guardium Data ProtectionIBM Guardium Data Protection 12.2 is vulnerable to a signature verification bypass in the patch installer. An attacker with local access could… | |
| CVE-2026-84272 | 8 Oct 2026 | CVSS 9.8 | IBM Guardium Data ProtectionIBM Guardium Data Protection 12.1 and 12.2.2 are vulnerable to missing authentication in the edge-controller component. An unauthenticated remote… | |
| CVE-2026-84274 | 8 Oct 2026 | CVSS 6.5 | IBM Guardium Data ProtectionIBM Guardium Data Protection 12.2.2 is affected by a sensitive information exposure vulnerability. During SECRET and API_KEY rotation processing… | |
| CVE-2026-82334 | 8 Oct 2026 | CVSS 9.1 | IBM Guardium Data ProtectionIBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based out-of-bounds read in the TDS7 LOGIN7 protocol parser. A remote attacker… | |
| CVE-2026-82335 | 8 Oct 2026 | CVSS 9.8 | IBM Guardium Data ProtectionIBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based buffer overflow in the MongoDB protocol parser. A remote attacker could… | |
| CVE-2026-107705 | 8 Oct 2026 | CVSS 6.5 | freedesktop popplerPoppler 0.42.0 through 26.10.0 contains a stack-based buffer overflow in Decrypt::revision6Hash() that allows attackers controlling the password to… | |
| CVE-2026-107706 | 8 Oct 2026 | CVSS 4.3 | dolibarrDolibarr ERP CRM before 24.0.2 contains an incorrect authorization vulnerability in htdocs/core/ajax/updateextrafield.php that checks only read… | |
| CVE-2026-107707 | 8 Oct 2026 | CVSS 7.8 | Intego AntivirusIntego Antivirus for Windows through 3.0.0.1 contains a link following vulnerability in its optimization module that allows local unprivileged users… | |
| CVE-2026-107394 | 8 Oct 2026 | CVSS 6.8 | Indico: Incomplete Server-Side Request Forgery (SSRF) checkIndico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. Prior to 3.3.13, the previous fix… | Fix |
| CVE-2026-107395 | 8 Oct 2026 | CVSS 4.3 | Indico: Missing access check in legacy session export APIIndico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. Prior to 3.3.13, an authenticated… | Fix |
| CVE-2026-107396 | 8 Oct 2026 | CVSS 5.4 | Indico: Cross-Site-Scripting in link fieldsIndico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. Prior to 3.3.13, users who can… | Fix |
| CVE-2026-107608 | 8 Oct 2026 | CVSS 5.5 | aws-cdk-libImproper link resolution before file access in the asset bundling output handling in AWS aws-cdk-lib before 2.267.0 might allow a context-dependent… | |
| CVE-2026-107389 | 8 Oct 2026 | CVSS 5.5 | music-metadata: EBML parser trusts element lengths, allowing memory exhaustion or process abortmusic-metadata is a metadata parser for audio and video media files. Prior to 11.16.0, the Matroska and WebM EBML parser decodes an… | Fix |
| CVE-2026-107390 | 8 Oct 2026 | CVSS 7.5 | Borewit music-metadatamusic-metadata is a metadata parser for audio and video media files. Prior to 11.16.0, the MP4 parser accepts an attacker-controlled 64-bit extended… | Fix |
| CVE-2026-107391 | 8 Oct 2026 | CVSS 7.5 | music-metadata: MP4 stsd sample-entry size==0 causes a synchronous infinite loop (DoS) — unreleased regression on mastermusic-metadata is a metadata parser for audio and video media files. In the public development revision introduced after 11.14.0, a… | Fix |
| CVE-2026-107392 | 8 Oct 2026 | CVSS 7.5 | music-metadata: uncatchable process crash parsing a crafted `.dsf` (residual of GHSA-v6c2-xwv6-8xf7)music-metadata is a metadata parser for audio and video media files. Prior to 11.15.0, the DSF parser handles an unrecognized chunk by calling… | Fix |
| CVE-2026-107393 | 8 Oct 2026 | CVSS 6.1 | freescout-help-desk freescoutFreeScout is a self-hosted help desk and shared mailbox. Prior to 1.8.235, when APP_CLOUDFLARE_IS_USED is enabled, FreeScout trusts an unvalidated… | |
| CVE-2026-106436 | 8 Oct 2026 | CVSS 6.5 | MongoDB PHP DriverThe BSON encoder in the MongoDB PHP Driver does not check some return values after a document exceeds libbson's size limit. This can leave the… | |
| CVE-2026-106432 | 8 Oct 2026 | CVSS 8.2 | MongoDB PHP DriverThe BSON encoder in the MongoDB PHP Driver converts a string length to a 32-bit value without validation. When an affected application encodes a… | |
| CVE-2026-104075 | 8 Oct 2026 | CVSS 9.8 | TVU Networks TVU Receiver / TransceiverTVU Networks Receiver/Transceiver devices running firmware before version 7.9 contain an authentication bypass vulnerability in the web management… | |
| CVE-2026-104076 | 8 Oct 2026 | CVSS 9.1 | TVU Networks TVU Receiver / TransceiverTVU Networks Receiver/Transceiver devices running firmware before version 7.9 contain a missing authentication vulnerability that allows remote… | |
| CVE-2026-106126 | 8 Oct 2026 | CVSS 9.9 | Tenable, Inc. Tenable Identity Exposure (SaaS)A command injection vulnerability in the Active Directory Events Listener of Tenable Identity Exposure (SaaS) allows an authenticated, low-privileged… | Fix |
| CVE-2026-88648 | 8 Oct 2026 | CVSS 3.7 | VulnerabilityIncomplete X.509 implementation in GnuTLS v3.8.13 allows attackers controlling a subordinate Certificate Authority to bypass cross-domain PKI… | |
| CVE-2026-95209 | 8 Oct 2026 | CVSS 5.9 | VulnerabilityAn issue in gnutls v3.8.13 causes legitimate CA certificates to be rejected, leading to a Denial of Service (DoS). | |
| CVE-2026-84276 | 8 Oct 2026 | CVSS 7.5 | IBM Guardium Data ProtectionIBM Guardium Data Protection 12.2.2 is affected by a denial-of-service vulnerability in the edge-controller. An unauthenticated remote attacker with… | |
| CVE-2026-84278 | 8 Oct 2026 | CVSS 7.2 | IBM Guardium Data ProtectionIBM Guardium Data Protection 12.2 is affected by a command injection vulnerability in the SUID-root ssh_config_wrapper component. An authenticated… | |
| CVE-2026-84290 | 8 Oct 2026 | CVSS 5.1 | IBM Guardium Data ProtectionIBM Guardium Data Protection 12.0, 12.1, 12.2 is affected by an improper validation of user-supplied pointers in the WfpMonitor kernel driver… | |
| CVE-2026-67693 | 8 Oct 2026 | CVSS 3.7 | VulnerabilityAn issue in gnutls v.3.8.13 allows an attacker to obtain sensitive information via failing to reject end-entity X.509 certificates that contain a… | |
| CVE-2026-40804 | 8 Oct 2026 | CVSS 7.1 | Kodezen LLC aBlocksImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kodezen LLC aBlocks ablocks allows Reflected… | |
| CVE-2026-107700 | 8 Oct 2026 | CVSS 9.8 | ntharim dot-accessdot-access 0.0.3 through 1.0.0 contains a code injection vulnerability that allows remote attackers to execute JavaScript by supplying crafted paths… | |
| CVE-2026-107701 | 8 Oct 2026 | CVSS 8.2 | ntharim dot-accessdot-access through 1.0.0 contains a prototype pollution vulnerability that allows attackers to modify Object.prototype by supplying a crafted dotted… | |
| CVE-2026-107703 | 8 Oct 2026 | CVSS 9.8 | enmaso @enmaso/node-convert@enmaso/node-convert through 1.0.0 contains an OS command injection vulnerability in convert.js that allows attackers to execute shell commands via… | |
| CVE-2026-107704 | 8 Oct 2026 | CVSS 9.8 | jtescher image_optimizerThe image_optimizer Ruby gem 1.3.0 through 1.9.0 contains an OS command injection vulnerability in ImageOptimizer#identify_format that allows… | |
| CVE-2026-107385 | 8 Oct 2026 | CVSS 7.4 | MariaDB Connector/Node.js: SQL injection in the text protocol when the session uses NO_BACKSLASH_ESCAPESMariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases. Prior to 3.2.5, 3.3.4, 3.4.7, and… | Fix |
| CVE-2026-107386 | 8 Oct 2026 | CVSS 6.3 | amqp091-go: Pre-negotiation frame limit is not enforced to 4KBamqp091-go is a Go AMQP 0.9.1 client. From 1.13.0 until 1.14.0, the frame-size mitigation from the prior allocation advisory can be bypassed before… | Fix |
| CVE-2026-107387 | 8 Oct 2026 | CVSS 5.5 | music-metadata: Uncontrolled memory allocation in APEv2 parsermusic-metadata is a metadata parser for audio and video media files. Prior to 11.16.0, the APEv2 parser reads an attacker-controlled tag-item size… | Fix |
| CVE-2026-107388 | 8 Oct 2026 | CVSS 5.5 | music-metadata: ID3v2 tag size not validated before allocation, causing memory exhaustion DoSmusic-metadata is a metadata parser for audio and video media files. Prior to 11.16.0, the ID3v2 parser trusts the syncsafe tag-size field and… | Fix |
| CVE-2026-107699 | 8 Oct 2026 | CVSS 9.8 | tzwm ppt2pngppt2png through 0.0.6 contains an OS command injection vulnerability that allows attackers to execute operating system commands by supplying… | |
| CVE-2026-107324 | 8 Oct 2026 | CVSS 5.9 | MongoDB Go DriverAn integer overflow in BSON value-length handling in the MongoDB Go Driver can cause a runtime panic when an application validates or accesses a… | |
| CVE-2026-107325 | 8 Oct 2026 | CVSS 5.9 | MongoDB Go DriverImproper validation of a BSON array length in the MongoDB Go Driver can cause an out-of-bounds index and runtime panic when an application calls… | |
| CVE-2026-107382 | 8 Oct 2026 | CVSS 5.9 | MariaDB Connector/Node.js: Uncaught exception crashes the client during ed25519 authentication with zero-configuration TLSMariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases. From 3.3.0 until 3.5.4, the… | Fix |
| CVE-2026-107383 | 8 Oct 2026 | CVSS 7.5 | MariaDB Connector/Node.js exposes uninitialized process memory through malformed GeoJSON parametersMariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases. Prior to 3.2.5, 3.3.4, 3.4.7, and… | Fix |
| CVE-2026-107384 | 8 Oct 2026 | CVSS 8.1 | MariaDB Connector/Node.js: SQL injection through object keys in SET expansion (permitSetMultiParamEntries)MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases. From 3.2.0 until 3.2.5, 3.3.4, 3.4.7… | Fix |
| CVE-2026-106431 | 8 Oct 2026 | CVSS 5.7 | MongoDB C DriverAn off-by-one error in the BSON bulk document writer in the MongoDB C Driver can write one zero byte immediately past a heap allocation when a… | |
| CVE-2026-106433 | 8 Oct 2026 | CVSS 8.8 | MongoDB libmongocryptImproper state management in MongoDB libmongocrypt can cause provider-specific data to be treated as an incompatible type when cleaning up a key… | |
| CVE-2026-106434 | 8 Oct 2026 | CVSS 4.3 | MongoDB libmongocryptThe explicit decryption component of MongoDB libmongocrypt can return an unrecognized encrypted payload unchanged instead of returning a decryption… | |
| CVE-2026-106437 | 8 Oct 2026 | CVSS 6.2 | MongoDB C DriverThe BSON buffer-reservation API in the MongoDB C Driver can record a length smaller than the five-byte BSON minimum. Later append or comparison… | |
| CVE-2026-106438 | 8 Oct 2026 | CVSS 4.0 | MongoDB C DriverAn incorrect calculation in Decimal128 string parsing in the MongoDB C Driver can accept certain over-precision inputs containing leading zeros… | |
| CVE-2026-107322 | 8 Oct 2026 | CVSS 7.8 | aws databases-on-awsAn incomplete list of disallowed inputs in Amazon Agent Plugins for AWS databases-on-aws plugin before 1.7.1 might allow a remote unauthenticated… | |
| CVE-2026-106428 | 8 Oct 2026 | CVSS 3.7 | MongoDB C DriverAn out-of-bounds read in SCRAM authentication response parsing in the MongoDB C Driver can read one byte beyond a fixed-size buffer when processing a… | |
| CVE-2026-106429 | 8 Oct 2026 | CVSS 6.5 | MongoDB libmongocryptAn integer underflow in the KMS endpoint-parsing logic of MongoDB libmongocrypt can cause an allocation failure that terminates the application… | |
| CVE-2026-106430 | 8 Oct 2026 | CVSS 5.9 | MongoDB C++ DriverThe MongoDB C++ Driver discards content after an embedded NUL byte in certain field and collection names accepted by the collection API. This can… | |
| CVE-2026-105570 | 8 Oct 2026 | CVSS 6.7 | Docker SandboxesDocker Sandboxes compared OAuth token-endpoint hostnames case-sensitively when deciding whether to mask managed credential responses, while request… | |
| CVE-2026-101998 | 8 Oct 2026 | CVSS 5.9 | Docker SandboxesDocker Sandboxes could fail open while masking credentials in protected proxy responses. When a response-body read returned data together with an… | |
| CVE-2026-105452 | 8 Oct 2026 | CVSS 5.9 | Docker SandboxesDocker Sandboxes could forward a client-supplied credential alongside a credential injected by the host egress proxy. The proxy removed alternate… | |
| CVE-2026-95184 | 8 Oct 2026 | CVSS 5.9 | VulnerabilityImproper certificate validation in gnutls v3.8.13 causes the application to reject legitimate certificates for valid users, leading to a Denial of… | |
| CVE-2026-95210 | 8 Oct 2026 | CVSS 4.8 | VulnerabilityImproper certificate validation in gnutls v3.8.13 causes the application to accept certificates containing invalid extensions. | |
| CVE-2026-97147 | 8 Oct 2026 | CVSS 7.2 | OpenStack MistralIn OpenStack Mistral through 23.0.0, several of the v2 API write paths resolve the target object with a query that can return another project's… |
Page 100 of 168