Capgo before 12.128.12 allows authenticated users to modify their mutable public.users.email to...

CVE-2026-56215

Capgo before 12.128.12 allows authenticated users to modify their mutable public.users.email to arbitrary addresses, whi

历史摘要 · 未重新核验 · GitHub Advisory

Cap-go before 12.128.2 contains an authentication bypass vulnerability in OTP verification that...

CVE-2026-56073

Cap-go before 12.128.2 contains an authentication bypass vulnerability in OTP verification that allows attackers to bypa

历史摘要 · 未重新核验 · GitHub Advisory

Cloudflare Quiche: Use-after-free in connection ID iterator FFI functions

CVE-2026-11941

### Impact Cloudflare Quiche was affected by 2 use-after-free vulnerabilities in the connection ID iterator FFI functio

历史摘要 · 未重新核验 · GitHub Advisory

symfony/ux-icons: XSS via unsanitized SVG content in local files and Iconify on-demand responses

CVE-2026-55877

### Description The `ux_icon()` Twig function is marked `is_safe=['html']`, so Twig never escapes its output. `Icon::to

历史摘要 · 未重新核验 · GitHub Advisory

Execution with unnecessary privileges in Azure Synapse allows an authorized attacker to elevate...

CVE-2026-48584

Execution with unnecessary privileges in Azure Synapse allows an authorized attacker to elevate privileges over a networ

历史摘要 · 未重新核验 · GitHub Advisory

Improper authentication in Azure Active Directory allows an unauthorized attacker to elevate...

CVE-2026-45480

Improper authentication in Azure Active Directory allows an unauthorized attacker to elevate privileges over a network.

历史摘要 · 未重新核验 · GitHub Advisory

Outerbase Studio: Stored XSS in Text Widget Leads to Authentication Token Exposure

CVE-2026-55650

## Summary A Stored Cross-Site Scripting (XSS) issue previously existed in the Text Widget in Board of Outerbase Studio

历史摘要 · 未重新核验 · GitHub Advisory

Langflow: Logout button does not clear session

CVE-2026-55423

### Summary The logout button does not clear the session. The previous user stays logged in unless another user explicit

历史摘要 · 未重新核验 · GitHub Advisory

Allure Report: Stored XSS via unescaped ANSI helper in status message/trace rendering

CVE-2026-55847

## Summary The `ansi.js` Handlebars helper in allure-generator passes user-controlled `statusMessage` and `statusTrace`

历史摘要 · 未重新核验 · GitHub Advisory

dbt MCP Server: Unauthenticated OAuth Context Endpoint Leaks dbt Platform Tokens

CVE-2026-55837

## Unauthenticated OAuth Context Endpoint Leaks dbt Platform Tokens ### Summary The local OAuth helper FastAPI server

历史摘要 · 未重新核验 · GitHub Advisory

Craft CMS: Blind SSRF and Arbitrary JavaScript Injection via Host Header Poisoning in actionResourceJs

CVE-2026-55791

**1. Overview** Craft CMS is vulnerable to Server-Side Request Forgery (SSRF) and Arbitrary JavaScript Injection throug

历史摘要 · 未重新核验 · GitHub Advisory

@cyclonedx/cyclonedx-npm: Shell Injection via Unsanitized --workspace Argument

CVE-2026-55849

## Summary A command injection vulnerability exists in `@cyclonedx/cyclonedx-npm` when the CLI is invoked with the `--wo

历史摘要 · 未重新核验 · GitHub Advisory

Firewall for AI

Firewall for AI

历史摘要 · 未重新核验 · Akamai Security Research

FortiBleed: 86,000 Fortinet Device Credentials Compromised

The large-scale credential theft campaign hit roughly half of the internet-accessible Fortinet firewalls and VPNs. The p

历史摘要 · 未重新核验 · SecurityWeek

Firefox browsers

Firefox browsers

历史摘要 · 未重新核验 · Mozilla Security Advisories

Sign in to Cloud

Sign in to Cloud

历史摘要 · 未重新核验 · Oracle Critical Patch Updates

Sign Up for Free Cloud Tier

Sign Up for Free Cloud Tier

历史摘要 · 未重新核验 · Oracle Critical Patch Updates

iOS 26.4.2 and iPadOS 26.4.2

iOS 26.4.2 and iPadOS 26.4.2

历史摘要 · 未重新核验 · Apple Security Releases

iOS 18.7.8 and iPadOS 18.7.8

iOS 18.7.8 and iPadOS 18.7.8

历史摘要 · 未重新核验 · Apple Security Releases

iOS 18.7.7 and iPadOS 18.7.7

iOS 18.7.7 and iPadOS 18.7.7

历史摘要 · 未重新核验 · Apple Security Releases