Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in...
CVE-2026-35010
Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in patient_JF.php that allows au
2026-05-21 归档
今日共收录 1079 条安全情报，包含 251 个 CVE，425 篇安全通告，以及 115 篇研究论文。
← 返回归档列表Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in...
CVE-2026-35007
Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in single_unit.php that allows a
Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in single...
CVE-2026-35008
Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in single.php that allows authen
Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in opena...
CVE-2026-35011
Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in opena.php that allows authent
Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in...
CVE-2026-35014
Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in routes_nm.php that allows aut
Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in...
CVE-2026-35012
Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in add_facnote.php that allows a
Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in...
CVE-2026-35015
Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in do_unit_mail.php that allows
ArcGIS Server contains an input validation weakness in the login redirection workflow. An...
CVE-2026-2813
ArcGIS Server contains an input validation weakness in the login redirection workflow. An Authenticated attacker could e
A vulnerability in the BrowserBot component of Cisco ThousandEyes Enterprise Agent could have...
CVE-2026-20206
A vulnerability in the BrowserBot component of Cisco ThousandEyes Enterprise Agent could have allowed an authenticated,
A vulnerability in the access validation of internal REST APIs of Cisco Secure Workload...
CVE-2026-20223
A vulnerability in the access validation of internal REST APIs of Cisco Secure Workload could allow an unauthentica
A flaw was found in Keycloak. The cross-session verification proof is keyed only by (local userId...
CVE-2026-9087
A flaw was found in Keycloak. The cross-session verification proof is keyed only by (local userId, idpAlias) and is not
In Splunk Enterprise versions below 10.2.2 and 10.0.5, and Splunk Cloud Platform versions below...
CVE-2026-20239
In Splunk Enterprise versions below 10.2.2 and 10.0.5, and Splunk Cloud Platform versions below 10.3.2512.8, 10.2.2510.1
In Splunk Enterprise versions below 10.2.2, 10.0.5, 9.4.11, and 9.3.12, and Splunk Cloud Platform...
CVE-2026-20240
In Splunk Enterprise versions below 10.2.2, 10.0.5, 9.4.11, and 9.3.12, and Splunk Cloud Platform versions below 10.4.26
An undocumented configuration export port is accessible on some models of ZKTeco CCTV cameras....
CVE-2026-8598
An undocumented configuration export port is accessible on some models of ZKTeco CCTV cameras. This port does not requi
The affected Kieback & Peter DDC building controllers are vulnerable to cross-site scripting,...
CVE-2026-4293
The affected Kieback & Peter DDC building controllers are vulnerable to cross-site scripting, enabling JavaScript to be
MISP’s OIDC authentication plugin allowed automatic linking of an OIDC identity to an existing...
CVE-2026-9084
MISP’s OIDC authentication plugin allowed automatic linking of an OIDC identity to an existing local user account based
Supply chain compromise via malicious package versions (@cap-js/sqlite, @cap-js/postgres, @cap-js/db-service)
CVE-2026-46421
## Impact On April 29, 2026, compromised versions of `@cap-js/sqlite@2.2.2`, `@cap-js/postgres@2.2.2`, and `@cap-js/db-
FileBrowser Quantum: unauthenticated user share share info
CVE-2026-46410
### Impact Some sensitive info -- such as source and path can get exposed. ### Patches Update to the latest version ##
Dasel: Denial of service in dasel selector lexer due to infinite loop on unterminated regex literal
CVE-2026-46378
### Summary `dasel`'s selector lexer enters a non-terminating loop when tokenizing an unterminated regex pattern such a
Dasel: Index-out-of-range panic in dasel selector lexer on trailing backslash in quoted string
CVE-2026-46377
### Summary `dasel`'s selector lexer panics with an index-out-of-range error when tokenizing a quoted string that ends