0.0
CVE-2026-26042 -
Not used
0.0
CVE-2026-26043 -
Not used
0.0
CVE-2026-26044 -
Not used
0.0
CVE-2026-26041 -
Not used
0.0
CVE-2026-26037 -
Not used
0.0
CVE-2026-26036 -
Not used
4.8
CVE-2025-15570 - ckolivas lrzip stream.c lzma_decompress_buf use after free
A vulnerability was found in ckolivas lrzip up to 0.651. This impacts the function lzma_decompress_buf of the file stream.c. Performing a manipulation results in use after free. Attacking locally is a requirement. The exploit has been made public and could be used. The project was informed of the p…
5
CVE-2025-11537 - Keycloak-server: sensitive headers shown in the http access logs
A flaw was found in Keycloak. When the logging format is configured to a verbose, user-supplied pattern (such as the pre-defined 'long' pattern), sensitive headers including Authorization and Cookie are disclosed to the logs in cleartext. An attacker with read access to the log files can extract th…
7.3
CVE-2025-15569 - Artifex MuPDF win_main.c get_system_dpi uncontrolled search path
A flaw has been found in Artifex MuPDF up to 1.26.1 on Windows. The impacted element is the function get_system_dpi of the file platform/x11/win_main.c. This manipulation causes uncontrolled search path. The attack requires local access. The attack is considered to have high complexity. The exploit…
8.5
CVE-2026-25656 -
A vulnerability has been identified in SINEC NMS (All versions), User Management Component (UMC) (All versions < V2.15.2.1). The affected application permits improper modification of a configuration file by a low-privileged user. This could allow an attacker to load malicious DLLs, potentially lea…