CVE-2026-33452 is a buffer overflow vulnerability in the Secure Access Windows client prior to...
CVE-2026-33452
CVE-2026-33452 is a buffer overflow vulnerability in the Secure Access Windows client prior to 14.50. Attackers with lo
2026-05-01 归档
今日共收录 1019 条安全情报，包含 232 个 CVE，445 篇安全通告，以及 40 篇研究论文。
← 返回归档列表IBM Langflow Desktop 1.0.0 through 1.8.4 IBM Langflow is vulnerable to server-side request...
CVE-2026-3340
IBM Langflow Desktop 1.0.0 through 1.8.4 IBM Langflow is vulnerable to server-side request forgery (SSRF). This may allo
CVE-2026-40951 is a memory corruption vulnerability on Secure Access Windows clients prior to 14...
CVE-2026-40951
CVE-2026-40951 is a memory corruption vulnerability on Secure Access Windows clients prior to 14.50. Attackers with loc
CVE-2026-33446 is a buffer overflow in the authentication sub-system of the Secure Access client...
CVE-2026-33446
CVE-2026-33446 is a buffer overflow in the authentication sub-system of the Secure Access client prior to 14.50. Attack
SSCMS v7.4.0 contains a reflected cross-site scripting vulnerability in the STL processing...
CVE-2026-7429
SSCMS v7.4.0 contains a reflected cross-site scripting vulnerability in the STL processing endpoint that allows attacker
CVE-2026-33449 is a buffer overflow in a message handling function of the Secure Access client...
CVE-2026-33449
CVE-2026-33449 is a buffer overflow in a message handling function of the Secure Access client prior to 14.50. Attacker
CVE-2026-33448 is a format string vulnerability in the logging subsystem of Secure Access client...
CVE-2026-33448
CVE-2026-33448 is a format string vulnerability in the logging subsystem of Secure Access client for MacOS prior to 14.
CVE-2026-33447 is a buffer overflow in a message parsing function of the Secure Access client...
CVE-2026-33447
CVE-2026-33447 is a buffer overflow in a message parsing function of the Secure Access client prior to 14.50. Attackers
Improper neutralization of inputs used in an OS command in the FSx Windows File Server volume...
CVE-2026-7461
Improper neutralization of inputs used in an OS command in the FSx Windows File Server volume mounting component in Amaz
An issue in open5gs v.2.7.3 allows a remote attacker to cause a denial of service via a crafted...
CVE-2025-46115
An issue in open5gs v.2.7.3 allows a remote attacker to cause a denial of service via a crafted PDU Session Modification
Assertion failure vulnerability in the PCO (Protocol Configuration Options) parser in the SMF ...
CVE-2025-56568
Assertion failure vulnerability in the PCO (Protocol Configuration Options) parser in the SMF (Session Management Functi
Arcane Vulnerable to Unauthenticated Disclosure of Custom Compose Template Content (incl. `.env` secrets)
CVE-2026-42461
### Summary Four `GET` endpoints under `/api/templates*` in Arcane's Huma backend are registered without any `Security`
Multiple authenticated cross-site scripting (XSS) vulnerabilities in the...
CVE-2026-36766
Multiple authenticated cross-site scripting (XSS) vulnerabilities in the XssHttpServletRequestWrapper class of shopizer
A stored cross-site scripting (XSS) vulnerability in the /api/blade-desk/notice/submit endpoint...
CVE-2026-36763
A stored cross-site scripting (XSS) vulnerability in the /api/blade-desk/notice/submit endpoint of SpringBlade v4.8.0 al
A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive...
CVE-2026-3833
A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of `nameConstra
An XML external entity (XXE) vulnerability in the /designer/loadReport endpoint of SpringBlade v4...
CVE-2026-36765
An XML external entity (XXE) vulnerability in the /designer/loadReport endpoint of SpringBlade v4.8.0 allows authenticat
A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a...
CVE-2026-3832
A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted Online
A Server-Side Request Forgery (SSRF) in the /plugins/-/install-from-uri endpoint of halo v2.22.14...
CVE-2026-36756
A Server-Side Request Forgery (SSRF) in the /plugins/-/install-from-uri endpoint of halo v2.22.14 allows authenticated a
Weaver (Fanwei) E-cology 9.5 versions prior to 10.52 contain an arbitrary file read vulnerability...
CVE-2022-50992
Weaver (Fanwei) E-cology 9.5 versions prior to 10.52 contain an arbitrary file read vulnerability in the XmlRpcServlet i
A stored cross-site scripting (XSS) vulnerability in the /msg/msgInner/save endpoint of JeeSite...
CVE-2026-36761
A stored cross-site scripting (XSS) vulnerability in the /msg/msgInner/save endpoint of JeeSite v5.15.1 allows attackers