CVE ID :CVE-2026-115731 Published : Nov. 3, 2026, 8:40 p.m. | 33 minutes ago Description :Deserialization of untrusted data in the report-processing code of Puppet, as used by Puppet Server, in the affected releases, allows a client that holds any CA-signed…
CVE ID :CVE-2026-115732 Published : Nov. 3, 2026, 8:38 p.m. | 35 minutes ago Description :Incorrect authorization in the certificate-name matching of trapperkeeper-authorization, as used by Puppet Server, in the affected products, allows a client that holds a CA-signed certificate whose…
CVE ID :CVE-2026-95741 Published : Nov. 3, 2026, 8:18 p.m. | 55 minutes ago Description :A missing integrity verification vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow a low-privileged authenticated attacker to gain elevated privileges…
Customers of the mSecure password manager are being urged to act now to protect the confidential information they store in it, possibly by changing passwords, resetting two-factor authentication (2FA), and removing passkeys. The warning came in an email sent on…
CVE ID :CVE-2026-120955 Published : Nov. 3, 2026, 6:42 p.m. | 30 minutes ago Description :The GridFS file download API in the MongoDB C Driver does not check the result of an internal operation under certain error conditions during file retrieval.…
CVE ID :CVE-2026-120678 Published : Nov. 3, 2026, 6:39 p.m. | 34 minutes ago Description :A memory management flaw in the MongoDB C Driver’s handling of compressed responses may cause the client library to hold on to memory that is never…
CVE ID :CVE-2026-63494 Published : Nov. 3, 2026, 6:18 p.m. | 55 minutes ago Description :Rejected reason: This CVE is a duplicate of another CVE. Severity: 8.1 | HIGH Visit the link for more details, such as CVSS details, affected products,…
CVE ID :CVE-2026-63492 Published : Nov. 3, 2026, 6:18 p.m. | 55 minutes ago Description :Rejected reason: This CVE is a duplicate of another CVE. Severity: 8.1 | HIGH Visit the link for more details, such as CVSS details, affected products,…
CVE ID :CVE-2026-29508 Published : Nov. 2, 2026, 8:25 p.m. | 42 minutes ago Description :ReadyMedia (formerly MiniDLNA) versions 1.3.0 through 1.3.3 contain a stack-based buffer overflow vulnerability that allows remote attackers to corrupt stack memory by crafting a malicious DFF…
CVE ID :CVE-2026-97718 Published : Nov. 2, 2026, 8:18 p.m. | 49 minutes ago Description :CVE-2026-97718 Is a cross-site request forgery vulnerability in version 14.60 of the Secure Access server. Because of a bypassed security control, an attacker can cause an…