Tutte le CVE degli ultimi sei mesi, aggiornate ogni giorno.

Mostrate 4 di 4

• AltaCVE-2026-77584Punteggio CVSS 7.020 ago 2026

  Tor before 0.4.9.10 did not reject a CONFLUX_LINK cell that arrives on a circuit which already has attached streams. A malicious client could send a RELAY_COMMAND_BEGIN before the CONFLUX_LINK on the same circuit, attaching an exit stream that would later end

  CWE-821torproject tor
• MediaCVE-2026-56132Punteggio CVSS 6.919 giu 2026

  In libexpat before 2.8.2, there is a heap-based buffer overflow in doProlog in xmlparse.c because scaffold backing array reallocation is mishandled when there is data-structure sharing across parsers.

  CWE-821libexpat_project libexpat
• CriticaCVE-2026-43198Punteggio CVSS 9.86 mag 2026

  In the Linux kernel, the following vulnerability has been resolved: tcp: fix potential race in tcp_v6_syn_recv_sock() Code in tcp_v6_syn_recv_sock() after the call to tcp_v4_syn_recv_sock() is done too late. After tcp_v4_syn_recv_sock(), the child socket is al

  CWE-362CWE-821linux linux_kernel
• MediaCVE-2026-21919Punteggio CVSS 6.59 apr 2026

  An Incorrect Synchronization vulnerability in the management daemon (mgd) of Juniper Networks Junos OS and Junos OS Evolved allows a network-based attacker with low privileges to cause a complete Denial-of-Service (DoS) of the management plane. When NETCONF se

  CWE-821juniper junosjuniper junos_os_evolved