[ Latest · 16,702 CVEs ]
Newly published CVEs.
Every CVE the NVD lists as published in the last 30 days, newest first. Rows marked green on the left are on the matters-most list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-101995 | 14 Oct 2026 | CVSS 4.3 | Juniper Networks Junos OSAn Improper Validation of Specified Quantity in Input vulnerability in the l2ald of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent… | |
| CVE-2026-101996 | 14 Oct 2026 | CVSS 6.5 | Juniper Networks Junos OSA Reachable Assertion vulnerability in the l2ald daemon of Juniper Networks Junos OS and Junos OS Evolved devices configured for MC-LAG/ICCP allows… | |
| CVE-2026-101997 | 14 Oct 2026 | CVSS 8.1 | Juniper Networks Junos OSAn Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ipfd of Juniper Networks Junos OS on SRX… | |
| CVE-2026-101999 | 14 Oct 2026 | CVSS 6.5 | Juniper Networks Junos OSA Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos EVO allows an adjacent attacker to cause a denial of… | |
| CVE-2026-101987 | 14 Oct 2026 | CVSS 6.5 | Juniper Networks Junos OSAn Improper Validation of Specified Quantity in Input vulnerability in the routing daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved… | |
| CVE-2026-101988 | 14 Oct 2026 | CVSS 6.5 | Juniper Networks Junos OSA NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an… | |
| CVE-2026-101989 | 14 Oct 2026 | CVSS 6.5 | Juniper Networks Junos OSA Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a compromised LDP… | |
| CVE-2026-101990 | 14 Oct 2026 | CVSS 9.8 | Juniper Networks Junos OSA Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a remote… | |
| CVE-2026-101991 | 14 Oct 2026 | CVSS 3.1 | Juniper Networks Junos OSAn Improper Handling of Length Parameter Inconsistency vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS… | |
| CVE-2026-101992 | 14 Oct 2026 | CVSS 6.5 | Juniper Networks Junos OSAn Improper Input Validation vulnerability in the routing protocol daemon (rpd) process of Juniper Networks Junos OS and Junos OS Evolved allows a… | |
| CVE-2026-101974 | 14 Oct 2026 | CVSS 6.5 | Juniper Networks Junos OSAn Improper Validation of Specified Quantity in Input vulnerability in rpd of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent OSPF… | |
| CVE-2026-101977 | 14 Oct 2026 | CVSS 7.5 | Juniper Networks Junos OSA NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured… | |
| CVE-2026-101978 | 14 Oct 2026 | CVSS 8.8 | Juniper Networks Junos OS EvolvedAn OS Command Injection vulnerability in the bootzd zero-touch provisioning daemon of Juniper Networks Junos OS Evolved on PTX Series allows an… | |
| CVE-2026-101980 | 14 Oct 2026 | CVSS 9.8 | Juniper Networks Junos OSAn Integer Underflow vulnerability in the kernel of Juniper Networks Junos OS with Extended Echo configured allows an unauthenticated, network-based… | |
| CVE-2026-101984 | 14 Oct 2026 | CVSS 6.5 | Juniper Networks Junos OSA Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a network-adjacent… | |
| CVE-2026-101985 | 14 Oct 2026 | CVSS 6.5 | Juniper Networks Junos OS EvolvedA Improper Validation of Specified Quantity in Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS Evolved on PTX… | |
| CVE-2026-101986 | 14 Oct 2026 | CVSS 9.8 | Juniper Networks Junos OSAn Improper Authentication vulnerability in J-Web of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network attacker to… | |
| CVE-2026-101967 | 14 Oct 2026 | CVSS 8.8 | Juniper Networks Junos OS EvolvedAn OS Command Injection vulnerability in the bootzd zero-touch provisioning daemon of Juniper Networks Junos OS Evolved allows an unauthenticated… | |
| CVE-2026-101968 | 14 Oct 2026 | CVSS 5.4 | Juniper Networks Junos OSAn Integer Underflow (Wrap or Wraparound) vulnerability in the rpd process of Juniper Networks Junos OS on EX Series and MX Series, and Junos OS… | |
| CVE-2026-101969 | 14 Oct 2026 | CVSS 6.5 | Juniper Networks Junos OSAn Improper Input Validation vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent… | |
| CVE-2026-101970 | 14 Oct 2026 | CVSS 6.5 | Juniper Networks Junos OSA Use After Free vulnerability in the rpd PIM Join/Prune processing of Juniper Networks Junos OS and Junos OS Evolved platforms allows an… | |
| CVE-2026-101971 | 14 Oct 2026 | CVSS 6.5 | Juniper Networks Junos OSAn Allocation of Resources Without Limits or Throttling vulnerability in rpd, the routing protocol daemon, of Juniper Networks Junos OS and Junos OS… | |
| CVE-2026-101973 | 14 Oct 2026 | CVSS 7.5 | Juniper Networks Junos OSA NULL Pointer Dereference vulnerability in the pkid component of Juniper Networks Junos OS allows an unauthenticated remote attacker to cause a… | |
| CVE-2026-101951 | 14 Oct 2026 | CVSS 7.5 | Juniper Networks Junos OSAn Improper Validation of Consistency within Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS… | |
| CVE-2026-101955 | 14 Oct 2026 | CVSS 8.1 | Juniper Networks Junos OSA Stack-based Buffer Overflow vulnerability in the UTM Anti-Spam SBL of Juniper Networks Junos OS on SRX series allows an unauthenticated remote… | |
| CVE-2026-101956 | 14 Oct 2026 | CVSS 9.8 | Juniper Networks Junos OSAn Improper Authentication vulnerability in the J-Web web management component of Juniper Networks Junos OS allows an unauthenticated remote attacker… | |
| CVE-2026-101957 | 14 Oct 2026 | CVSS 7.5 | Juniper Networks Junos OSAn Improper Initialization vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a remote BGP… | |
| CVE-2026-101960 | 14 Oct 2026 | CVSS 6.5 | Juniper Networks Junos OS EvolvedAn Out-of-bounds Write vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS Evolved on QFX5240, QFX5241 and QFX5250… | |
| CVE-2026-101965 | 14 Oct 2026 | CVSS 8.8 | Juniper Networks Junos OS EvolvedAn Use of Externally-Controlled Format String vulnerability in the gRPC daemon of Juniper Networks Junos OS Evolved allows an authenticated network… | |
| CVE-2026-101966 | 14 Oct 2026 | CVSS 8.2 | Juniper Networks Junos OS EvolvedA Use of Externally-Controlled Format String vulnerability in the jti-dialoutd of Juniper Networks Junos OS Evolved allows an authenticated network… | |
| CVE-2026-101943 | 14 Oct 2026 | CVSS 7.5 | Juniper Networks Junos OSAn Improper Input Validation vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an… | |
| CVE-2026-101944 | 14 Oct 2026 | CVSS 7.5 | Juniper Networks Junos OSAn Integer Overflow or Wraparound vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an… | |
| CVE-2026-101945 | 14 Oct 2026 | CVSS 7.5 | Juniper Networks Junos OSAn Integer Overflow or Wraparound vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows a remote attacker with an… | |
| CVE-2026-101946 | 14 Oct 2026 | CVSS 3.5 | Juniper Networks Junos OSAn Out-of-bounds Read vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent low-privilege attacker to… | |
| CVE-2026-101948 | 14 Oct 2026 | CVSS 7.5 | Juniper Networks Junos OSA NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a remote… | |
| CVE-2026-101950 | 14 Oct 2026 | CVSS 9.8 | Juniper Networks Junos OSA Heap-based Buffer Overflow vulnerability in the SVR component of Juniper Networks Junos OS on SRX Series allows an unauthenticated network attacker… | |
| CVE-2026-101937 | 14 Oct 2026 | CVSS 6.5 | Juniper Networks Junos OSA Signed to Unsigned Conversion Error vulnerability in the srxpfe of Juniper Networks Junos OS on the SRX Series allows an adjacent attacker to cause… | |
| CVE-2026-101938 | 14 Oct 2026 | CVSS 6.5 | Juniper Networks Junos OSAn Integer Underflow (Wrap or Wraparound) vulnerability in the srxpfe of Juniper Networks Junos OS and Junos OS Evolved on the SRX Series allows an… | |
| CVE-2026-101939 | 14 Oct 2026 | CVSS 7.5 | Juniper Networks Junos OSA NULL Pointer Dereference vulnerability in the routing protocol daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows a configured… | |
| CVE-2026-101940 | 14 Oct 2026 | CVSS 7.5 | Juniper Networks Junos OSA NULL Pointer Dereference vulnerability in the rpd routing daemon of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated… | |
| CVE-2026-101941 | 14 Oct 2026 | CVSS 7.5 | Juniper Networks Junos OSA NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured… | |
| CVE-2026-101942 | 14 Oct 2026 | CVSS 7.5 | Juniper Networks Junos OSAn Improper Handling of Length Parameter Inconsistency vulnerability in the routing protocol daemon (rpd) process of Juniper Networks Junos OS and… | |
| CVE-2026-101927 | 14 Oct 2026 | CVSS 7.8 | Juniper Networks Junos OSA Heap-based Buffer Overflow vulnerability in eventd of Juniper Networks Junos OS and Junos OS Evolved on all platforms allows an unprivileged local… | |
| CVE-2026-101934 | 14 Oct 2026 | CVSS 4.4 | Juniper Networks Junos OSAn Out-of-bounds Write vulnerability in eventd of Juniper Networks Junos OS and Junos OS Evolved allows a local attacker to cause a Denial of Service… | |
| CVE-2026-101936 | 14 Oct 2026 | CVSS 6.5 | Juniper Networks Junos OSA Reachable Assertion vulnerability in the srxpfe process of Juniper Networks Junos OS on SRX Series allows an adjacent network attacker to cause a… | |
| CVE-2026-100236 | 14 Oct 2026 | CVSS 8.6 | Red Hat Fast Datapath for RHEL 10A flaw was found in the DPDK GSO library. When software GSO copies packet headers into a new mbuf, it does not check that the header fits in the… | |
| CVE-2016-15060 | 14 Oct 2026 | CVSS 8.3 | PCMan FTP ServerA vulnerability was found in PCMan FTP Server up to 2.0.7. This affects an unknown function of the component PORT Command Handler. The manipulation… | |
| CVE-2026-91883 | 14 Oct 2026 | CVSS 4.3 | Dell Terraform Provider for OMEDell Terraform Provider for OME, versions 1.0.0 through 1.2.3, contains an Insertion of Sensitive Information into Log File vulnerability in the… | |
| CVE-2026-93683 | 14 Oct 2026 | CVSS 6.4 | Red Hat Fast Datapath for RHEL 10A flaw was found in the DPDK vhost library. When handling a virtio indirect descriptor table, the host reads the table length more than once from… | |
| CVE-2026-89077 | 14 Oct 2026 | CVSS 8.8 | Progress MOVEit TransferIncorrect implementation of authentication algorithm vulnerability in Progress MOVEit Transfer (SFTP module). This issue affects MOVEit Transfer… | |
| CVE-2026-91156 | 14 Oct 2026 | CVSS 7.5 | discourseDiscourse is an open-source discussion platform. Prior to 2026.9.0, 2026.8.1, 2026.7.3, and 2026.1.9, MessageBus audience calculation could deliver… | |
| CVE-2026-91157 | 14 Oct 2026 | CVSS 7.5 | discourseDiscourse is an open-source discussion platform. Prior to 2026.9.0, 2026.8.1, 2026.7.3, and 2026.1.9, sites with secure uploads enabled did not… | |
| CVE-2026-91159 | 14 Oct 2026 | CVSS 7.7 | discourseDiscourse is an open-source discussion platform. Prior to 2026.9.0, 2026.8.1, 2026.7.3, and 2026.1.9, oEmbed processing treated an entire… | |
| CVE-2026-91881 | 14 Oct 2026 | CVSS 9.0 | Dell Terraform Provider for RedfishDell Terraform Provider for Redfish, versions prior to 1.6.2, contains an Improper Certificate Validation vulnerability in the HTTP transport… | |
| CVE-2026-91882 | 14 Oct 2026 | CVSS 8.6 | Dell Terraform Provider for OMEDell Terraform Provider for OME, versions 1.0.0 through 1.2.3, contains an Insertion of Sensitive Information into Externally-Accessible File or… | |
| CVE-2026-89068 | 14 Oct 2026 | CVSS 9.8 | Progress MOVEit TransferMissing critical step in authentication vulnerability in Progress MOVEit Transfer (LDAP module). This issue affects MOVEit Transfer: before 2025.1.6… | |
| CVE-2026-89069 | 14 Oct 2026 | CVSS 5.4 | Progress MOVEit TransferImproper neutralization of input during web page generation ('cross-site scripting') vulnerability in Progress MOVEit Transfer (Ad Hoc module). This… | |
| CVE-2026-89070 | 14 Oct 2026 | CVSS 7.5 | Progress MOVEit TransferAuthentication bypass by capture-replay vulnerability in Progress MOVEit Transfer (OIDC module). This issue affects MOVEit Transfer: before 2025.1.6… | |
| CVE-2026-89071 | 14 Oct 2026 | CVSS 8.8 | Progress MOVEit TransferImproper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability in Progress MOVEit Transfer (LDAP module). This… | |
| CVE-2026-89072 | 14 Oct 2026 | CVSS 8.8 | Progress MOVEit TransferIncorrect Authorization vulnerability in Progress MOVEit Transfer (Client Certificates module). This issue affects MOVEit Transfer: before 2025.1.6… | |
| CVE-2026-89073 | 14 Oct 2026 | CVSS 9.8 | Progress MOVEit TransferInsufficient Session Expiration vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0… | |
| CVE-2026-89074 | 14 Oct 2026 | CVSS 8.8 | Progress MOVEit TransferImproper handling of unicode encoding vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from… | |
| CVE-2026-89075 | 14 Oct 2026 | CVSS 7.3 | Progress MOVEit TransferInsecure Storage of Sensitive Information vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from… | |
| CVE-2026-89076 | 14 Oct 2026 | CVSS 8.8 | Progress MOVEit TransferImproper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Progress MOVEit Transfer (Custom Reports… | |
| CVE-2026-86002 | 14 Oct 2026 | CVSS 9.0 | dokkuDokku is a docker-powered platform as a service. In Dokku versions before 0.38.25, a user with app-level Dokku access and remote SSH access to… | |
| CVE-2026-86561 | 14 Oct 2026 | CVSS 6.5 | Red Hat Fast Datapath for RHEL 10A flaw was found in DPDK lib/vhost. Memory size is not adequately validated before mmap during vhost memory-region setup, which can lead to a host… | |
| CVE-2026-87093 | 14 Oct 2026 | CVSS 8.8 | Progress MOVEit TransferIncorrect Permission Assignment for Critical Resource vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6… | |
| CVE-2026-89067 | 14 Oct 2026 | CVSS 8.8 | Progress MOVEit TransferAuthentication bypass using an alternate path or channel vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before… | |
| CVE-2026-76113 | 14 Oct 2026 | CVSS 4.3 | Dell Terraform Provider for RedfishDell Terraform Provider for Redfish, versions 1.1.0 through 1.6.1, contains an Exposure of Sensitive Information to an Unauthorized Actor… | |
| CVE-2026-77572 | 14 Oct 2026 | CVSS 3.3 | VeraCryptVeraCrypt provides disk encryption with strong security based on TrueCrypt. In 1.26.29 and earlier, selected metadata IOCTL handlers in the VeraCrypt… | |
| CVE-2026-67414 | 14 Oct 2026 | CVSS 6.0 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.0.24, 4.1.15, 4.2.10, and 4.3.4, deps/amqp10_common/src/amqp10_binary_parser.erl… | |
| CVE-2026-67416 | 14 Oct 2026 | CVSS 5.3 | rabbitmq-serverRabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.0.24, 4.1.15, 4.2.10, and 4.3.4, the optimized AMQP 1.0 server_mode parser in… | |
| CVE-2026-62858 | 14 Oct 2026 | CVSS 5.3 | YOURLS: Unauthenticated File InclusionYOURLS is a self-hosted, customizable URL shortener written in PHP. Prior to 1.10.5, yourls_get_request() extracted the request path without… | Fix |
| CVE-2026-53615 | 14 Oct 2026 | CVSS 8.0 | util-linuxutil-linux is a random collection of Linux utilities. Before util-linux 2.41.4, `parse_dos_extended()` in `libblkid/src/partitions/dos.c` computes an… | |
| CVE-2026-49206 | 14 Oct 2026 | CVSS 2.9 | d99kris rapidcsvrapidcsv is a C++ CSV parser library. Prior to 8.99, RemoveColumn, InsertColumn, RemoveRow, InsertRow, and GetColumnNames converted size_t indexes to… | |
| CVE-2026-53614 | 14 Oct 2026 | CVSS 7.0 | util-linuxutil-linux is a random collection of Linux utilities. In util-linux 2.39.1 through 2.41.4 and 2.42 through 2.42.1, the SUID `mount` utility reads the… | |
| CVE-2026-110718 | 14 Oct 2026 | CVSS 5.9 | TurboDocx html-to-docxTurboDocx html-to-docx through 1.23.1 contains a server-side request forgery vulnerability that allows attackers supplying HTML to make the server… | |
| CVE-2026-110719 | 14 Oct 2026 | CVSS 7.2 | Portkey-AI gatewayPortkey AI Gateway 1.14.0 through 1.15.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers to reach loopback… | |
| CVE-2026-110734 | 14 Oct 2026 | CVSS 2.5 | godotengine Godot EngineGodot Engine through 4.7.2 has a heap out-of-bounds write in the Radiance HDR (.hdr) image decoder (modules/hdr/image_loader_hdr.cpp). The run-length… | |
| CVE-2026-110735 | 14 Oct 2026 | CVSS 2.5 | godotengine Godot EngineGodot Engine through 4.7.2 has a heap out-of-bounds write in the binary resource loader (core/io/resource_format_binary.cpp… | |
| CVE-2026-110736 | 14 Oct 2026 | CVSS 3.6 | godotengine Godot EngineGodot Engine through 4.7.2 has an out-of-bounds read in the optimized translation loader (core/string/optimized_translation.cpp… | |
| CVE-2026-110661 | 14 Oct 2026 | CVSS 3.3 | CGNSCGNS through 4.5.2 contains a stack out-of-bounds read vulnerability in ADFI_read_node_header that allows attackers to crash applications by… | |
| CVE-2026-110712 | 14 Oct 2026 | CVSS 6.5 | sahlberg libsmb2libsmb2 through 6.2 contains a heap out-of-bounds read vulnerability in smb2_decode_file_all_info that allows malicious SMB servers to crash clients… | |
| CVE-2026-110713 | 14 Oct 2026 | CVSS 6.5 | sahlberg libsmb2libsmb2 through 6.2 contains a heap out-of-bounds read vulnerability in smb2_decode_file_fs_volume_info and smb2_decode_file_fs_attribute_info that… | |
| CVE-2026-110714 | 14 Oct 2026 | CVSS 6.5 | sahlberg libsmb2libsmb2 through 6.2 contains an integer underflow vulnerability in decode_acl that allows malicious SMB servers to trigger heap out-of-bounds reads… | |
| CVE-2026-110715 | 14 Oct 2026 | CVSS 6.1 | Artifex Software MuJSMuJS 1.3.6 before 1.3.9 contains a heap out-of-bounds read and write vulnerability in Array.prototype.sort that allows attackers to corrupt memory by… | |
| CVE-2026-110716 | 14 Oct 2026 | CVSS 5.5 | twogood unshieldunshield through 1.6.2 contains a heap out-of-bounds read vulnerability in unshield_get_file_table() that allows attackers to read past heap… | |
| CVE-2026-110717 | 14 Oct 2026 | CVSS 5.3 | meetecho janus-gatewayJanus WebRTC Server through 1.4.3 contains a path traversal vulnerability in the Record&Play plugin that allows unauthenticated attackers to write… | |
| CVE-2026-110654 | 14 Oct 2026 | CVSS 6.1 | zapping-vbi libzvbilibzvbi through 0.2.45 contains an out-of-bounds write vulnerability in the Teletext decoder that allows attackers to corrupt memory by supplying… | |
| CVE-2026-110655 | 14 Oct 2026 | CVSS 3.1 | miniupnp project miniupnpcminiupnpc through 2.3.3 contains a one-byte heap out-of-bounds read vulnerability in the minixml parseatt function that allows malicious UPnP… | |
| CVE-2026-110656 | 14 Oct 2026 | CVSS 3.1 | miniupnp project miniupnpcminiupnpc through 2.3.3 contains a one-byte heap out-of-bounds read vulnerability in the minixml parseelt function's namespace-prefix handling that… | |
| CVE-2026-110657 | 14 Oct 2026 | CVSS 3.3 | Khronos Group nnefKhronos NNEF-Tools nnef through 1.0.10 and nnef-tools through 1.0.11 contain a path traversal vulnerability that allows attackers to write files… | |
| CVE-2026-110658 | 14 Oct 2026 | CVSS 5.3 | freeswitch sofia-sipSofia-SIP through 1.13.18 contains a heap out-of-bounds read vulnerability in msg_multipart_parse() that allows unauthenticated remote attackers to… | |
| CVE-2026-110659 | 14 Oct 2026 | CVSS 5.5 | serge1 ELFIOELFIO through 3.12 contains a NULL pointer dereference vulnerability in relocation_section_accessor get_entry() that allows attackers to crash… | |
| CVE-2026-110660 | 14 Oct 2026 | CVSS 3.3 | vgmstreamvgmstream through r2117 contains a stack out-of-bounds read vulnerability in the G.722.1/Siren14 decoder in g7221_lib.c, whose bit reader refills… | |
| CVE-2026-109438 | 14 Oct 2026 | CVSS 5.3 | 3proxy3proxy from 0.9.7 through 1.0.1, fixed in commit 206c923, contains an uninitialized stack memory disclosure vulnerability that allows unauthenticated… | |
| CVE-2026-103929 | 14 Oct 2026 | CVSS 7.8 | mise permits untrusted local configuration to override default shell argumentsmise manages dev tools like node, python, cmake, and terraform. Prior to 2026.7.14, in the default non-safe mode, mise loads .mise.toml [settings]… | Fix |
| CVE-2026-101896 | 14 Oct 2026 | CVSS 8.2 | Angular Server-Side Rendering (SSR): Denial of Service via Numeric URL Matrix ParametersAngular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.32… | Fix |
| CVE-2026-101897 | 14 Oct 2026 | CVSS 5.1 | angularAngular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. From 1.20.0 until… | |
| CVE-2026-102695 | 14 Oct 2026 | CVSS 8.2 | omnifacesOmniFaces is a utility library for Faces. In OmniFaces versions before 1.14.3, 2.7.33, 3.14.23, 4.7.12, and 5.4.2, CombinedResourceHandler accepts a… |
Page 55 of 168