Dell PowerFlex rack, version(s) RCM 3.7/3.7, contain(s) a Host Header Injection vulnerability. An...
CVE-2025-32748
Dell PowerFlex rack, version(s) RCM 3.7/3.7, contain(s) a Host Header Injection vulnerability. An unauthenticated attack
2026-06-18 归档
今日共收录 819 条安全情报，包含 0 个 CVE，417 篇安全通告，以及 115 篇研究论文。
← 返回归档列表Dell PowerFlex Manager, version(s) [Versions], contain(s) an Improper Authentication...
CVE-2026-49502
Dell PowerFlex Manager, version(s) [Versions], contain(s) an Improper Authentication vulnerability. An unauthenticated a
Dell PowerFlex Manager, version(s) 4.6.0.1, contain(s) an Use of a Broken or Risky Cryptographic...
CVE-2026-40641
Dell PowerFlex Manager, version(s) 4.6.0.1, contain(s) an Use of a Broken or Risky Cryptographic Algorithm vulnerability
Dell PowerFlex Manager, version(s) [Versions], contain(s) an Improper Access Control...
CVE-2026-35067
Dell PowerFlex Manager, version(s) [Versions], contain(s) an Improper Access Control vulnerability. A low privileged att
In JazzCore python-pdfkit 1.0.0, the from_string method enables the execution of JavaScript code...
CVE-2025-26240
In JazzCore python-pdfkit 1.0.0, the from_string method enables the execution of JavaScript code within the context of t
Dell PowerFlex Manager, version(s) [Versions], contain(s) an Improper Access Control...
CVE-2026-35066
Dell PowerFlex Manager, version(s) [Versions], contain(s) an Improper Access Control vulnerability. A low privileged att
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_proxy_v2_module and...
CVE-2026-42055
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_proxy_v2_module and ngx_http_grpc_module modules.
OpenStack Horizon before 25.7.4 produces scripts for OpenStack RC file downloading that may have...
CVE-2026-55748
OpenStack Horizon before 25.7.4 produces scripts for OpenStack RC file downloading that may have a crafted project name
Dell PowerFlex Manager, version(s) [Versions], contain(s) an Improper Access Control...
CVE-2026-35162
Dell PowerFlex Manager, version(s) [Versions], contain(s) an Improper Access Control vulnerability. A low privileged att
NGINX Open Source has a vulnerability in the ngx_http_v3_module module. When NGINX Open Source is...
CVE-2026-42530
NGINX Open Source has a vulnerability in the ngx_http_v3_module module. When NGINX Open Source is configured to use the
PickleScan before 0.0.33 fails to include the pty.spawn function in its unsafe globals list,...
CVE-2025-71322
PickleScan before 0.0.33 fails to include the pty.spawn function in its unsafe globals list, allowing attackers to bypas
Missing Authorization in the server management routes (routes/admin.php) in Azuriom Azuriom CMS...
CVE-2026-54415
Missing Authorization in the server management routes (routes/admin.php) in Azuriom Azuriom CMS before 1.2.11 on all pla
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_charset_module module. When...
CVE-2026-48142
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_charset_module module. When content is served or p
A remote attacker can inject LDAP special characters into the Distinguished Name (DN)...
CVE-2026-49268
A remote attacker can inject LDAP special characters into the Distinguished Name (DN) construction in DefaultLdapRealm c
Dell PowerFlex Manager, version(s) [Versions], contain(s) an Improper Authentication...
CVE-2026-32804
Dell PowerFlex Manager, version(s) [Versions], contain(s) an Improper Authentication vulnerability. An unauthenticated a
An integer overflow in the mtar_next() function in src/microtar.c in rxi microtar 0.1.0 allows a...
CVE-2026-54417
An integer overflow in the mtar_next() function in src/microtar.c in rxi microtar 0.1.0 allows a remote attacker to caus
Authentication Bypass Using an Alternate Path or Channel vulnerability in FluxBuilder MStore API...
CVE-2026-54817
Authentication Bypass Using an Alternate Path or Channel vulnerability in FluxBuilder MStore API allows Password Recover
Contributor Arbitrary File Deletion in Fusion Builder <= 3.15.4 versions.
CVE-2026-54193
Contributor Arbitrary File Deletion in Fusion Builder <= 3.15.4 versions.
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...
CVE-2026-54813
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Brainstorm Force S
Improper Control of Generation of Code ('Code Injection') vulnerability in Monetizemore Advanced...
CVE-2026-54816
Improper Control of Generation of Code ('Code Injection') vulnerability in Monetizemore Advanced Ads allows Remote Code