CVE Security

Vikunja is an open-source self-hosted task management platform. In versions 1.0.0 through 2.3.0, when an administrator enables the per-provider `email...

Windows


                                    CVE-2026-62367

Lire l'article

high 8.1

16/10/2026

Vulnérabilité high détectée - CVE-2026-57458

Vikunja is an open-source self-hosted task management platform. In version 2.3.0, a scoped API token limited to the `oauth.authorize` permission can c...

Windows


                                    CVE-2026-57458

Lire l'article

unknown

16/10/2026

Vulnérabilité unknown détectée - CVE-2026-104117

A missing authorization check in the illumos IP management daemon (ipmgmtd) allows a local user to change the persistent IP multipathing (IPMP) config...

iOS Mobile Windows


                                    CVE-2026-104117

Lire l'article

unknown

16/10/2026

Vulnérabilité unknown détectée - CVE-2026-104113

A double free in the IP management daemon (ipmgmtd) of OmniOS and SmartOS allows a local user to crash the daemon. When authorizing a door request tha...

iOS Mobile Windows


                                    CVE-2026-104113

Lire l'article

medium 5.3

16/10/2026

Vulnérabilité medium détectée - CVE-2026-85479

The STTP-based data publisher on openPDC accepts network connections without authentication in its default configuration. An unauthenticated network a...

Windows


                                    CVE-2026-85479

Lire l'article

unknown

16/10/2026

Vulnérabilité unknown détectée - CVE-2026-106581

Before 4.92.0, Docker Desktop for Windows did not verify the signature of a package supplied to Docker Desktop Installer.exe install -package. An atta...

Windows


                                    CVE-2026-106581

Lire l'article

critical 9.8

16/10/2026

Vulnérabilité critical détectée - CVE-2026-100730

A service console interface on openPDC and openHistorian deserializes a client-supplied data structure. On systems using Windows Authentication, an at...

Windows


                                    CVE-2026-100730

Lire l'article

high 8.1

16/10/2026

Vulnérabilité high détectée - CVE-2026-73179

Improper enforcement of single-use authorization code semantics in the JPA OAuth2 authorization code grant provider in Apache CXFallows a remote attac...

Windows


                                    CVE-2026-73179

Lire l'article

critical 9.1

16/10/2026

Vulnérabilité critical détectée - CVE-2026-107938

In Apache CXF, the Netty-based HTTP client transport (cxf-rt-transports-http-netty-client) did not verify that the hostname in the server’s TLS cert...

Windows


                                    CVE-2026-107938

Lire l'article

high 7.1

16/10/2026

Vulnérabilité high détectée - CVE-2026-95608

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginUs.Net HUSKY woocommerce-products-filter a...

Web Windows


                                    CVE-2026-95608

Lire l'article

critical 10

15/10/2026

Vulnérabilité critical détectée - CVE-2026-96207

Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network.

Windows


                                    CVE-2026-96207

Lire l'article

critical 9.9

15/10/2026

Vulnérabilité critical détectée - CVE-2026-94510

Authorization bypass through user-controlled key in Microsoft Bookings allows an unauthorized attacker to elevate privileges over a network.

Windows


                                    CVE-2026-94510

Lire l'article

1 2 3