[ Latest · 16,702 CVEs ]
Newly published CVEs.
Every CVE the NVD lists as published in the last 30 days, newest first. Rows marked green on the left are on the matters-most list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-76788 | 19 Oct 2026 | CVSS 8.8 | zephyrproject zephyrThe OSDP Control Panel reply parser cp_decode_response() in subsys/mgmt/osdp/src/osdp_cp.c decodes replies from a Peripheral Device into a… | |
| CVE-2026-112302 | 19 Oct 2026 | CVSS 6.3 | kiwilan php-archiveA weakness has been identified in kiwilan php-archive up to 2.3.02. This affects the function ArchiveZip::extract of the file… | |
| CVE-2026-112390 | 19 Oct 2026 | CVSS 8.2 | Pillow: Infinite loop in MIC n_frames when the embedded TIFFPillow is a Python imaging library. From 7.2.0 until 13.0.0, Pillow can enter an infinite loop while determining the frame count of a MIC image… | Fix |
| CVE-2026-112391 | 19 Oct 2026 | CVSS 6.3 | Pillow: PdfParser can recurse without limit in get_value() and linearize_page_tree()Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow's PdfParser.get_value() can recurse without a limit while reading nested PDF… | Fix |
| CVE-2026-112393 | 19 Oct 2026 | CVSS 9.2 | Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIOPillow is a Python imaging library. From 2.0.0 until 13.0.0, Pillow has a heap buffer overflow and stale-heap disclosure in _tiffWriteProc when… | Fix |
| CVE-2026-112394 | 19 Oct 2026 | CVSS 6.3 | Pillow: P;2L and P;4L decoders may read 1 to 3 bytes past the passed buffer sizePillow is a Python imaging library. Prior to 13.0.0, Pillow's P;2L and P;4L raw decoders can read past the end of an input buffer. ImagingRawDecode… | Fix |
| CVE-2026-112395 | 19 Oct 2026 | CVSS 6.5 | Pillow tiled-TIFF decoder reads past tile buffer in copy4 (Unpack.c:1290)Pillow is a Python imaging library. From 8.2.0 until 13.0.0, Pillow's tiled-TIFF decoder can read past the tile buffer while copying four-byte… | Fix |
| CVE-2026-111946 | 19 Oct 2026 | Not scored yet | VulnerabilityPlack::Middleware::ETag versions from 0.04 before 0.06 for Perl disclose file inode numbers in the default ETag header. When the response body is a… | |
| CVE-2026-112299 | 19 Oct 2026 | CVSS 4.3 | smrealms smrA vulnerability was determined in smrealms smr up to f40380c017bc35cd8db6ffdb9d4e78bf65b9d43d. Affected is the function isUrlReachable of the file… | |
| CVE-2026-112300 | 19 Oct 2026 | CVSS 5.3 | DiffSK configobjA vulnerability was identified in DiffSK configobj up to 5.0.9. Affected by this vulnerability is the function _sectionmarker of the file… | |
| CVE-2026-112301 | 19 Oct 2026 | CVSS 7.3 | orbitale imagemagick-phpA security flaw has been discovered in orbitale imagemagick-php up to 3.3.5. Affected by this issue is the function Command::font of the file… | |
| CVE-2026-82166 | 19 Oct 2026 | CVSS 8.8 | Dell Application StoreDell Application Store, versions prior to 26.05.0.7, contain a Missing Authentication for Critical Function vulnerability. An unauthenticated… | |
| CVE-2026-71169 | 19 Oct 2026 | CVSS 7.0 | Dell Application StoreDell Application Store, versions prior to 26.05.0.7, contain an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged… | |
| CVE-2026-71170 | 19 Oct 2026 | CVSS 7.8 | Dell Application StoreDell Application Store, versions prior to 26.05.0.7, contains an Uncontrolled Path Element vulnerability. A low privileged attacker with local access… | |
| CVE-2026-112777 | 19 Oct 2026 | CVSS 7.2 | craftcms cmsCraft CMS 4.x before 4.18.8 and 5.x before 5.11.0 contains a blocklist bypass in the Twig create() function because its class-name checks are… | |
| CVE-2026-112778 | 19 Oct 2026 | CVSS 6.4 | traefikTraefik before 2.11.46, 3.x before 3.6.17, and 3.7.0 lack namespace validation for Ingress and Service annotations in the Kubernetes Ingress… | |
| CVE-2026-112779 | 19 Oct 2026 | CVSS 9.8 | getgrav grav-plugin-apiGrav API plugin (grav-plugin-api) 1.0.40 before 1.0.42 caches a full translation dictionary for every well-formed language code sent to the… | |
| CVE-2026-112780 | 19 Oct 2026 | CVSS 8.8 | getgrav gravGrav from 2.0.15 before 2.2.2 contains an allowlist bypass vulnerability that allows page editors to call arbitrary public static methods by renaming… | |
| CVE-2026-112781 | 19 Oct 2026 | CVSS 6.5 | getgrav gravGrav from 2.0.0 before 2.2.2 contains an information disclosure vulnerability that allows page editors to read protected configuration by adding… | |
| CVE-2026-112782 | 19 Oct 2026 | CVSS 7.5 | getgrav gravGrav 1.7.53 before 1.7.53.5 and 2.0.0-rc.8 before 2.2.2 contains a resource exhaustion vulnerability that allows anonymous visitors to bypass the… | |
| CVE-2026-112770 | 19 Oct 2026 | CVSS 8.8 | craftcms cmsCraft CMS 4.x before 4.18.8 and 5.x before 5.11.0 contains a remote code execution vulnerability in the Twig group filter, which invokes non-string… | |
| CVE-2026-112771 | 19 Oct 2026 | CVSS 6.5 | craftcms cmsCraft CMS 4.0.0 before 4.18.8 and 5.0.0 before 5.11.0 contains a Twig sandbox allowlist bypass because the column, contains, filterByValue, index… | |
| CVE-2026-112772 | 19 Oct 2026 | CVSS 8.8 | craftcms cmsCraft CMS from 5.0.0 before 5.11.0 contains a remote code execution vulnerability that allows authenticated Control Panel users to escape the Twig… | |
| CVE-2026-112773 | 19 Oct 2026 | CVSS 8.8 | craftcms cmsCraft CMS from 5.0.0 before 5.11.0 contains a remote code execution vulnerability that allows authenticated Control Panel users to escape the Twig… | |
| CVE-2026-112774 | 19 Oct 2026 | CVSS 7.2 | craftcms cmsCraft CMS from 5.8.0 before 5.11.0 contains a remote code execution vulnerability that allows authenticated administrators to inject Yii behaviors by… | |
| CVE-2026-112775 | 19 Oct 2026 | CVSS 7.5 | craftcms cmsCraft CMS from 5.0.0 before 5.11.0 contains an authentication bypass vulnerability that allows attackers to reuse verification codes because… | |
| CVE-2026-112776 | 19 Oct 2026 | CVSS 9.8 | craftcms cmsCraft CMS from 5.0.0 before 5.11.0 contains an authorization bypass vulnerability that allows site-scoped GraphQL tokens to mutate other sites'… | |
| CVE-2026-112297 | 19 Oct 2026 | CVSS 4.3 | ptbsare anx-calibre-managerA flaw has been found in ptbsare anx-calibre-manager up to 1.13.12. The impacted element is the function LLMClient.chat of the file… | |
| CVE-2026-112768 | 19 Oct 2026 | CVSS 6.9 | parse-community parse-serverParse Server before 8.6.99 and 9.0.0 before 9.10.3-alpha.2 evaluates checks against the target account during a user update before authorizing the… | |
| CVE-2026-112769 | 19 Oct 2026 | CVSS 2.3 | parse-community parse-serverParse Server before 8.6.98 and 9.0.0 before 9.10.3-alpha.1 does not enforce the create and addField class-level permissions of the _Session class… | |
| CVE-2026-111766 | 19 Oct 2026 | CVSS 3.7 | markdown-it: Quadratic-time denial of service in inline HTML parsing with html enabledmarkdown-it is a Markdown parser. Prior to 14.3.3 and 15.0.3, when the html option or commonmark preset is enabled and the constructs occur inside a… | Fix |
| CVE-2026-112254 | 19 Oct 2026 | CVSS 4.3 | agit8or1 clientst0rA vulnerability was found in agit8or1 clientst0r up to 3.17.586. Affected by this vulnerability is the function _fetch_html of the file… | |
| CVE-2026-112260 | 19 Oct 2026 | CVSS 7.1 | Red Hat Enterprise Linux 10A flaw was found in GIMP. Opening a crafted XCF with a malformed text-layer parasite can cause a heap out-of-bounds read, disclosing adjacent heap… | |
| CVE-2026-112252 | 19 Oct 2026 | CVSS 7.3 | Wuxi Wubang Security Software Wubang Five-in-One Safety Production Management Information SystemA vulnerability has been found in Wuxi Wubang Security Software Wubang Five-in-One Safety Production Management Information System up to 3.5… | |
| CVE-2026-112259 | 19 Oct 2026 | CVSS 5.5 | Red Hat Enterprise Linux 10A flaw was found in GIMP. Importing a crafted SBZ palette without a color-model attribute can cause a NULL pointer dereference during string… | |
| CVE-2026-112249 | 19 Oct 2026 | CVSS 2.4 | grandnode2A vulnerability was detected in grandnode grandnode2 up to 2.3.0. Affected is the function Html.Raw of the file… | |
| CVE-2026-112251 | 19 Oct 2026 | CVSS 4.3 | antoinersx clawhostA vulnerability was detected in antoinersx clawhost up to 0.0.45. This affects the function handleRequest of the file… | |
| CVE-2026-110685 | 19 Oct 2026 | Not scored yet | VulnerabilityCpanel::JSON::XS versions before 4.80 for Perl leak the decoded arguments of a tagged value when its THAW method dies in decode_tag. With allow_tags… | |
| CVE-2026-110686 | 19 Oct 2026 | Not scored yet | VulnerabilityCpanel::JSON::XS versions before 4.80 for Perl use freed filter callbacks when a filter removes itself during decoding in decode_hv. A decode copies… | |
| CVE-2026-110687 | 19 Oct 2026 | Not scored yet | VulnerabilityCpanel::JSON::XS versions from 4.43 before 4.80 for Perl misorder byte-string keys during canonical encoding in utf16_cmp. canonical sorts keys by… | |
| CVE-2026-110688 | 19 Oct 2026 | Not scored yet | VulnerabilityCpanel::JSON::XS versions from 4.51 before 4.80 for Perl allow quadratic CPU use by revalidating the remaining buffer per value in incr_parse. At the… | |
| CVE-2026-110674 | 19 Oct 2026 | Not scored yet | VulnerabilityCpanel::JSON::XS versions from 4.33 before 4.80 for Perl miss duplicate non-ASCII bare keys, allowing type confusion under dupkeys_as_arrayref in… | |
| CVE-2026-110675 | 19 Oct 2026 | Not scored yet | VulnerabilityCpanel::JSON::XS versions from 4.33 before 4.80 for Perl accept malformed UTF-8 in bare hash keys under allow_barekey in decode_hv. With utf8 and… | |
| CVE-2026-110676 | 19 Oct 2026 | Not scored yet | VulnerabilityCpanel::JSON::XS versions before 4.80 for Perl allow memory exhaustion by encoding exponent notation as full decimal digits under allow_bignum. With… | |
| CVE-2026-110677 | 19 Oct 2026 | Not scored yet | VulnerabilityCpanel::JSON::XS versions from 4.28 before 4.80 for Perl leak the array collecting duplicate key values under dupkeys_as_arrayref in decode_hv. With… | |
| CVE-2026-110678 | 19 Oct 2026 | Not scored yet | VulnerabilityCpanel::JSON::XS versions before 4.80 for Perl allow memory exhaustion by buffering incremental input past max_size in incr_parse. The parser appends… | |
| CVE-2026-110680 | 19 Oct 2026 | Not scored yet | VulnerabilityCpanel::JSON::XS versions from 4.20 before 4.80 for Perl write out of bounds when a tied or shared hash grows during canonical encoding in encode_hv… | |
| CVE-2026-110681 | 19 Oct 2026 | Not scored yet | VulnerabilityCpanel::JSON::XS versions before 4.80 for Perl use the parent interpreter's scalars from a parser object cloned into a new ithread. A parser object… | |
| CVE-2026-110682 | 19 Oct 2026 | Not scored yet | VulnerabilityCpanel::JSON::XS versions from 4.42 before 4.80 for Perl let input chunking change the decoded value of top-level numbers in incr_parse. allow_nonref… | |
| CVE-2026-110684 | 19 Oct 2026 | Not scored yet | VulnerabilityCpanel::JSON::XS versions from 3.0202 before 4.80 for Perl leak memory and retain overloaded objects when encoding values as strings in… | |
| CVE-2026-110672 | 19 Oct 2026 | Not scored yet | VulnerabilityCpanel::JSON::XS versions before 4.80 for Perl leak the decoded key of an object rejected for a duplicate key or a missing colon in decode_hv. A… | |
| CVE-2026-110673 | 19 Oct 2026 | Not scored yet | VulnerabilityCpanel::JSON::XS versions before 4.80 for Perl allow stack exhaustion via nested tagged values under allow_tags in decode_tag. With allow_tags, "("… | |
| CVE-2026-109434 | 19 Oct 2026 | CVSS 4.3 | Fenrir Sleipnir Mobile for AndroidFenrir Sleipnir Browser for Android before 3.9.0 contains a UI spoofing vulnerability that allows remote attackers to impersonate the browser's… | |
| CVE-2026-109437 | 19 Oct 2026 | CVSS 9.8 | CognicellAI CognitionCognition before 0.13.0 contains an unauthenticated remote code execution vulnerability due to defaulting its agent sandbox backend to local… | |
| CVE-2025-60482 | 19 Oct 2026 | Not scored yet | VulnerabilityA heap use-after-free in the gf_odf_ac4_cfg_clean_list function (/odf/descriptors.c) of GPAC Project/MP4Box 2.5-DEV-rev1593-gfe88c3545-master allows… | |
| CVE-2026-55644 | 19 Oct 2026 | CVSS 5.1 | element-hq element-x-iosElement X iOS is a Matrix iOS Client provided by Element. Element X iOS before version 26.05.0 fails to check the URL allowlist when parsing… | |
| CVE-2026-6719 | 19 Oct 2026 | CVSS 7.5 | IBM ConcertIBM Concert 1.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. | |
| CVE-2026-3161 | 19 Oct 2026 | CVSS 5.9 | IBM Cloud Pak SystemIBM Cloud Pak System 2.3.6.0, and 2.3.6.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive… | |
| CVE-2026-3295 | 19 Oct 2026 | CVSS 7.4 | IBM Cloud Pak SystemIBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to cross site scripting. The web app user‑supplied input is not properly sanitized or… | |
| CVE-2026-3303 | 19 Oct 2026 | CVSS 3.7 | IBM ConcertIBM Concert 1.0 through 3.0.0 uses cross-origin resource sharing (CORS) which could allow an attacker to carry out privileged actions as the domain… | |
| CVE-2026-3628 | 19 Oct 2026 | CVSS 5.3 | IBM ConcertIBM Concert 1.0 through 3.0.0 allows information disclosure through exposure of schema suggestions. | |
| CVE-2026-4405 | 19 Oct 2026 | CVSS 4.0 | IBM ConcertIBM Concert 1.0 through 3.0.0 allows web page cache to be stored locally which can be read by another user on the system. | |
| CVE-2026-4413 | 19 Oct 2026 | CVSS 6.1 | IBM ConcertIBM Concert 1.0 through 3.0.0 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary… | |
| CVE-2026-4418 | 19 Oct 2026 | CVSS 5.4 | IBM Cloud Pak SystemIBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to HTML injection. A remotely authenticated attacker could inject malicious HTML code, which… | |
| CVE-2026-1501 | 19 Oct 2026 | CVSS 3.7 | IBM ConcertIBM Concert 1.0 through 3.0.0 is vulnerable to Improper Certificate Validation. | |
| CVE-2026-1510 | 19 Oct 2026 | CVSS 4.7 | IBM ConcertIBM Concert 1.0 through 3.0.0 is vulnerable to Information Disclosure via Heap Inspection. | |
| CVE-2026-112377 | 19 Oct 2026 | CVSS 7.4 | CCC-Attestation attested-tls-pocCCC Attestation SIG attested-tls-poc through commit 731ca82 fails to bind early attestation Evidence to the TLS connection, allowing attackers to… | |
| CVE-2026-11319 | 19 Oct 2026 | CVSS 6.2 | TickTick Limited TickTick for AndroidTickTick Android application (com.ticktick.task) 8.2.2.0 contains a path traversal vulnerability in its exported ShareReceiveActivity that allows a… | |
| CVE-2026-112247 | 19 Oct 2026 | CVSS 4.3 | Wuxi Wubang Security Software Five-in-One Safety Production Management Information SystemA weakness has been identified in Wuxi Wubang Security Software Five-in-One Safety Production Management Information System up to 3.5. This affects… | |
| CVE-2026-112248 | 19 Oct 2026 | CVSS 4.7 | grandnode2A security vulnerability has been detected in grandnode grandnode2 up to 2.3.0. This impacts the function… | |
| CVE-2026-111755 | 19 Oct 2026 | CVSS 8.2 | follow-redirects sensitiveHeaders regex escaping can expose credential headersfollow-redirects is a Node.js HTTP and HTTPS client wrapper that automatically follows redirects. From 1.16.0 until 1.16.1, escapeRegex leaves valid… | Fix |
| CVE-2026-111757 | 19 Oct 2026 | CVSS 5.3 | Hono: `serveStatic` decodes the request path a second time, leading to bypass of middleware on static pathsHono is a Web application framework that provides support for any JavaScript runtime. From 4.12.4 until 4.13.11, serveStatic can interpret a… | Fix |
| CVE-2026-111759 | 19 Oct 2026 | CVSS 7.5 | markdown-it: Quadratic complexity in smartquotes with unmatched closing quotesmarkdown-it is a Markdown parser. Prior to 14.3.2 and 15.0.2, when typographer: true is enabled, specially crafted Markdown can cause quadratic… | Fix |
| CVE-2026-107084 | 19 Oct 2026 | Not scored yet | VulnerabilitySlims (Senayan Library Management Systems) 9 Bulian 9.8.0 allows cross-site request forgery (CSRF) against… | |
| CVE-2025-52290 | 19 Oct 2026 | CVSS 7.5 | VulnerabilityA NULL pointer dereference in the avpriv_h264_has_num_reorder_frames function of Ffmpeg version N-119856-gbe46370941 allows attackers to cause a… | |
| CVE-2025-55654 | 19 Oct 2026 | CVSS 5.5 | VulnerabilityA use-after-free in the gf_filter_pid_get_packet function (filter_core/filter_pid.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of… | |
| CVE-2025-55667 | 19 Oct 2026 | CVSS 5.5 | VulnerabilityA segmentation violation in the dump_isom_saps function (/mp4box/filedump.c) of GPAC MP4Box v2.5-DEV-rev1672-gc9a31d0e1-masterallows attackers to… | |
| CVE-2025-60480 | 19 Oct 2026 | CVSS 5.5 | VulnerabilityA heap buffer overflow in the gf_odf_ac4_cfg_alternative_info function (/odf/descriptors.c) of GPAC Project/MP4Box 2.5-DEV-rev1593-gfe88c3545-master… | |
| CVE-2026-105810 | 19 Oct 2026 | CVSS 8.5 | TP-Link Systems Inc. Tapo C320WS v2Tapo C320WS V2.0 contains an authenticated stack-based buffer overflow in the local onboarding Wi-Fi configuration path. An authenticated attacker on… | |
| CVE-2023-38375 | 19 Oct 2026 | CVSS 6.1 | IBM Cloud Pak SystemIBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code… | |
| CVE-2026-6930 | 19 Oct 2026 | CVSS 3.7 | IBM ConcertIBM Concert 1.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. | |
| CVE-2026-14511 | 19 Oct 2026 | CVSS 6.5 | IBM MQIBM MQ 9.4.5.0 through 9.4.5.1 could allow an authenticated user to cause a denial of service by sending a specially crafted message that crashes… | |
| CVE-2026-15661 | 19 Oct 2026 | CVSS 5.3 | IBM ConcertIBM Concert 1.0 through 3.0.0 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements… | |
| CVE-2026-12669 | 19 Oct 2026 | CVSS 3.1 | IBM MQ OperatorIBM MQ could allow an authenticated attacker to trigger a minor out-of-bounds read when sending malformed compressed data, though the data is not… | |
| CVE-2026-12670 | 19 Oct 2026 | CVSS 5.3 | IBM MQ OperatorIBM MQ could allow an authenticated attacker to cause a denial of service through a specially crafted message that triggers excessive memory… | |
| CVE-2026-12727 | 19 Oct 2026 | CVSS 4.3 | IBM MQ OperatorIBM MQ could allow an authenticated attacker to cause potential process instability due to an off-by-one buffer overflow when processing specially… | |
| CVE-2026-12350 | 19 Oct 2026 | CVSS 6.5 | IBM MQ OperatorIBM MQ could allow an authenticated attacker to cause a denial of service by sending a specially crafted asynchronous consume request that crashes… | |
| CVE-2026-12660 | 19 Oct 2026 | CVSS 2.7 | IBM MQ OperatorIBM MQ Web Console could allow an authenticated administrator to write files outside the intended directory due to improper path validation. | |
| CVE-2026-12665 | 19 Oct 2026 | CVSS 8.1 | IBM MQ OperatorIBM MQ could allow a remote attacker to execute arbitrary code due to a stack buffer overflow when processing TLS certificates with malformed… | |
| CVE-2026-12148 | 19 Oct 2026 | CVSS 7.5 | IBM MQ OperatorIBM MQ Operator could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to unrestricted Java… | |
| CVE-2026-12155 | 19 Oct 2026 | CVSS 6.5 | IBM MQ OperatorIBM MQ could allow an authenticated attacker to cause a denial of service by sending specially crafted multicast status messages that trigger a NULL… | |
| CVE-2026-12343 | 19 Oct 2026 | CVSS 6.5 | IBM MQ OperatorIBM MQ could allow an authenticated attacker to cause a denial of service due to improper validation of RFH2 message header fields in queued… | |
| CVE-2026-11828 | 19 Oct 2026 | CVSS 5.9 | IBM MQ OperatorIBM MQ could allow a remote attacker with queue manager control or man-in-the-middle access on unencrypted channels to cause a denial of service in… | |
| CVE-2026-11829 | 19 Oct 2026 | CVSS 6.5 | IBM MQ OperatorIBM MQ could allow an authenticated attacker to cause a denial of service due to improper validation of offset values in MQOPEN requests. | |
| CVE-2026-11831 | 19 Oct 2026 | CVSS 5.4 | IBM MQ OperatorIBM MQ could allow an authenticated attacker to cause a limited denial of service and obtain very limited information about process memory layout due… | |
| CVE-2026-112190 | 19 Oct 2026 | CVSS 5.3 | Webkul Aureus ERPA security vulnerability has been detected in Webkul Aureus ERP up to 1.6.0. This issue affects some unknown processing of the file composer.json… | |
| CVE-2026-112193 | 19 Oct 2026 | CVSS 3.7 | Webkul Aureus ERPA vulnerability was detected in Webkul Aureus ERP up to 1.6.0. Impacted is an unknown function of the file… | |
| CVE-2026-112195 | 19 Oct 2026 | CVSS 4.7 | FusionPBXA flaw has been found in FusionPBX up to 5.4.4/5.5.7/5.6.5. The affected element is an unknown function of the file… | |
| CVE-2026-112159 | 19 Oct 2026 | CVSS 5.5 | JumpServerA security vulnerability has been detected in JumpServer up to 4.10.19. The affected element is an unknown function of the component Template… | |
| CVE-2026-111749 | 19 Oct 2026 | CVSS 2.3 | AIOHTTP: Cookie from subdomain can remove Host-Only Scope from existing cookiesAIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, Host-Only scope on an existing parent-domain cookie… | Fix |
Page 31 of 168