AVideo Vulnerable to Exposure of Sensitive Information to an Unauthorized Actor and Missing Authorization
CVE-2026-43885
### Summary An unauthenticated user can read `APISecret` from `objects/plugins.json.php` and use it to call protected
2026-05-06 归档
今日共收录 1285 条安全情报，包含 277 个 CVE，391 篇安全通告，以及 322 篇研究论文。
← 返回归档列表ciguard: discover_pipeline_files follows symlinks out of scan root
CVE-2026-44220
## Summary The `discover_pipeline_files()` function in `src/ciguard/discovery.py` (introduced in v0.8.0 and used by the
ciguard: Container image runs as root (no USER directive)
CVE-2026-44218
## Summary The published `ghcr.io/jo-jo98/ciguard` container image inherits the default root user because the `Dockerfi
ciguard: SCA HTTP client reads response body without size cap
CVE-2026-44219
## Summary Both SCA HTTP clients (`src/ciguard/analyzer/sca/osv.py` and `src/ciguard/analyzer/sca/endoflife.py`) call `
sse-channel: SSE Injection via unsanitized event fields
CVE-2026-44217
### Impact Implementations that allows user-provided values to be passed to `event`, `retry` or `id` fields would be su
AVideo: IDOR in PayPalYPT Plugin Allows Any Authenticated User to Cancel Arbitrary PayPal Subscription Agreements
CVE-2026-43883
## Summary `plugin/PayPalYPT/agreementCancel.json.php` cancels a PayPal billing agreement using an attacker-supplied `a
OpAMP client reads unbounded HTTP response bodies
CVE-2026-42348
### Summary When receiving responses from the OpAMP server over HTTP, the OpAMP client allocates an unbounded buffer to
ip-address has XSS in Address6 HTML-emitting methods
CVE-2026-42338
### Summary `Address6.group()` and `Address6.link()` do not HTML-escape attacker-controlled content before embedding it
AVideo has Blind SSRF in YPTWallet Donation Webhook via Missing isSSRFSafeURL() Check and CURLOPT_FOLLOWLOCATION Redirect Bypass
CVE-2026-43879
## Summary An authenticated user can configure their own donation-notification webhook URL to point at internal/loopbac
Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call
CVE-2026-42541
### Impact Kubewarden is a policy engine for Kubernetes. Kubewarden cluster operators can grant permissions to users to
Mongoose's Improper Sanitization of $nor in sanitizeFilter May Allow NoSQL Injection
CVE-2026-42334
### Impact This vulnerability allows bypassing Mongoose’s sanitizeFilter query sanitization mechanism via the `$nor` op
rust-openssl has undefined behavior in X509Ref::ocsp_responders for certificates with non-UTF-8 OCSP URLs
CVE-2026-42327
`X509Ref::ocsp_responders` returns OCSP responder URLs from a certificate's AIA extension as `OpensslString`, whose `Der
Plug.Cowboy vulnerable to unauthenticated remote DoS via HTTP/2 `:scheme` atom-table exhaustion
CVE-2026-32688
## Summary An unauthenticated remote denial-of-service vulnerability in `Plug.Cowboy.Conn` allows any attacker who can
Grav is Vulnerable to Stored XSS via Tag Injection
CVE-2026-42611
### Summary A low-privileged (with the ability to create a page) user can cause XSS with the injection of `svg` element.
Grav has Unauthenticated Path Traversal & Arbitrary File Write in its FormFlash component
CVE-2026-42608
# Vulnerability Report: Grav CMS Unauthenticated Path Traversal & Arbitrary File Write **[ZERO-DAY] Unauthenticated Pat
A vulnerability has been found in D-Link DI-8100 16.07.26A1. This vulnerability affects the...
CVE-2026-7857
A vulnerability has been found in D-Link DI-8100 16.07.26A1. This vulnerability affects the function sprintf of the file
A flaw has been found in D-Link DI-8100 16.07.26A1. This affects an unknown part of the file ...
CVE-2026-7856
A flaw has been found in D-Link DI-8100 16.07.26A1. This affects an unknown part of the file /url_member.asp of the comp
Dify before version 1.14.0 contains an authorization bypass vulnerability that allows...
CVE-2026-41950
Dify before version 1.14.0 contains an authorization bypass vulnerability that allows authenticated users to read the fu
In ProFTPD through 1.3.9a before 7666224, a SQL injection vulnerability in...
CVE-2026-44331
In ProFTPD through 1.3.9a before 7666224, a SQL injection vulnerability in sqltab_fetch_clients_cb() in contrib/mod_wrap
FluentCMS 1.2.3 is vulnerable to Cross Site Scripting (XSS) in TextHTML plugin.
CVE-2026-38947
FluentCMS 1.2.3 is vulnerable to Cross Site Scripting (XSS) in TextHTML plugin.