An issue in the Externalizable.readExternal() component of Controller v12.0.5 allows attackers to...
CVE-2026-36501
An issue in the Externalizable.readExternal() component of Controller v12.0.5 allows attackers to cause a Denial of Serv
2026-06-06 归档
今日共收录 1443 条安全情报，包含 665 个 CVE，387 篇安全通告，以及 120 篇研究论文。
← 返回归档列表A flaw has been found in D-Link DWR-M920 up to 1.1.50. The impacted element is the function...
CVE-2026-11341
A flaw has been found in D-Link DWR-M920 up to 1.1.50. The impacted element is the function sub_412DA0 of the file /boaf
On affected platforms running Arista EOS where a tunnel decapsulation configuration—such as VXLAN...
CVE-2026-7473
On affected platforms running Arista EOS where a tunnel decapsulation configuration—such as VXLAN (Virtual Extensible LA
A vulnerability has been found in code-projects Hotel and Tourism Reservation System 1.0. This...
CVE-2026-11342
A vulnerability has been found in code-projects Hotel and Tourism Reservation System 1.0. This affects an unknown functi
A denial-of-service vulnerability exists in the RTSP server component of TP-Link Tapo C520WS v2...
CVE-2026-8714
A denial-of-service vulnerability exists in the RTSP server component of TP-Link Tapo C520WS v2 due to improper handling
Markdown Preview Enhanced before 0.8.28 opens external files and links from the preview through a...
CVE-2026-49492
Markdown Preview Enhanced before 0.8.28 opens external files and links from the preview through a shell and does not val
In a CVX cluster, an EOS switch connected to a CVX server is not resilient to certain malformed...
CVE-2025-5089
In a CVX cluster, an EOS switch connected to a CVX server is not resilient to certain malformed messages received from t
DataDog::DogStatsd versions through 0.07 for Perl allow metric injections. DataDog::DogStatsd...
CVE-2026-9270
DataDog::DogStatsd versions through 0.07 for Perl allow metric injections. DataDog::DogStatsd does not properly sanitis
A vulnerability was detected in D-Link DWR-M920 up to 1.1.50. The affected element is the...
CVE-2026-11339
A vulnerability was detected in D-Link DWR-M920 up to 1.1.50. The affected element is the function sub_41CF20 of the fil
A vulnerability has been found in tittuvarghese CollegeManagementSystem...
CVE-2026-11336
A vulnerability has been found in tittuvarghese CollegeManagementSystem 3e476335cfbfb9a049e09f474c7ec885f69a9df3/a388529
A vulnerability was found in tittuvarghese CollegeManagementSystem...
CVE-2026-11337
A vulnerability was found in tittuvarghese CollegeManagementSystem 3e476335cfbfb9a049e09f474c7ec885f69a9df3/a38852979f7e
An authenticated Redis session could be used to obtain full root access to all servers in the CVX...
CVE-2025-5088
An authenticated Redis session could be used to obtain full root access to all servers in the CVX cluster. Note that thi
CVX is not resilient to unexpected messages from a connected switch. This leads to agent crashes...
CVE-2025-5090
CVX is not resilient to unexpected messages from a connected switch. This leads to agent crashes on CVX causing instabil
DataDog::DogStatsd versions through 0.07 for Perl allow metric injections from event tags. ...
CVE-2026-11362
DataDog::DogStatsd versions through 0.07 for Perl allow metric injections from event tags. DataDog::DogStatsd does not
A security vulnerability has been detected in SourceCodester Ship Ferry Ticket Reservation System...
CVE-2026-11338
A security vulnerability has been detected in SourceCodester Ship Ferry Ticket Reservation System 1.0. Impacted is an un
Klever-Go KVM: Throttler slot leak in trie account-data sync causes epoch bootstrap / state sync DoS
CVE-2026-49343
## Summary The account-data trie syncers leak bounded throttler slots on error paths in `syncDataTrie()`. Each failed
DbGate: Remote Code Execution via functionName injection in loadReader endpoint
CVE-2026-48017
### Summary The `POST /runners/load-reader` endpoint in DbGate accepts a `functionName` parameter that is directly inte
Sync-in Server: SSRF protection bypass via IPv4-mapped IPv6 addresses in regExpPrivateIP
CVE-2026-47684
Summary: The private IP blocklist regex used in the URL download feature does not match IPv4-mapped IPv6 addresses (e.g.
Source controller: Improper path handling allows traversal
CVE-2026-47680
### Impact An actor with the ability to influence the contents of a bucket referenced by a `Bucket` resource can cause
Authenticated Remote Code Execution via loadReader functionName code injection in DbGate
CVE-2026-47670
### Summary DbGate is vulnerable to authenticated Remote Code Execution (RCE). Any user with valid DbGate credentials c