#
20 entries
2026-08-02
ID: 694
CVE-2026-61892 - Weintek cMT3092X Incorrect Permission Assignment for Critical Resource
2026-08-02
ID: 693
CVE-2026-66337 - Libsoup: libsoup: heap buffer over-read via integer underflow in soup_filter_input_stream_read_until()
2026-08-02
ID: 691
CVE-2026-66339 - Libsoup: libsoup: proxy credentials leak to destination server via proxy-authorization header in connect tunnels
2026-08-02
ID: 688
CVE-2026-66038 - FFmpeg LCL/ZLIB Video Decoder Information Disclosure via lcldec.c
2026-08-02
ID: 684
CVE-2025-71408 - NLTK < 3.9.2 Eval Injection via collocations.py Command-Line Arguments
2026-08-02
ID: 681
CVE-2026-17107 - Cluster-proxy: cluster-proxy: impersonation header injection in service-proxy grants cluster-admin on every managed cluster
2026-08-02
ID: 680
CVE-2026-48021 - epa4all Security Incident: Implement keystore based on Telematik TSL, implement hostname check and certificate check for lib-vau
2026-08-02
ID: 676
CVE-2026-48035 - Hulumi: AccountFoundation audit-delivery S3 bucket could be silently weakened
2026-08-02
ID: 675
CVE-2026-48036 - Hulumi: Drift classifier fails open on adapter errors and over-promotes Mixed verdicts
2026-08-02
ID: 674
CVE-2026-48037 - Hulumi: AccountFoundation reuse paths silently downgrade GuardDuty / Security Hub posture
2026-08-02
ID: 673
CVE-2026-54342 - TLS Certificate Verification Disabled on CXF Transport Clients in epa4all
2026-08-02
ID: 670
CVE-2026-66037 - FFmpeg IAMF Demuxer Uncontrolled Resource Consumption via mix_presentation_obu()
2026-08-02
ID: 667
CVE-2026-65708 - sysPass 3.2.11 Insecure Direct Object Reference via AccountFileController
2026-08-02
ID: 666
CVE-2026-65709 - sysPass 3.2.11 Missing Object-Level Authorization via JSON-RPC API
2026-08-02
ID: 665
CVE-2026-65710 - sysPass 3.2.11 Missing Authorization via PublicLinkController Account Decryption
2026-08-02
ID: 664
CVE-2026-65711 - sysPass 3.2.11 Authenticated OS Command Injection via Backup Path