Setracker2 Android Companion App com.tgelec.setracker versions 3.1.5 and prior have a predictable...
CVE-2026-9219
Setracker2 Android Companion App com.tgelec.setracker versions 3.1.5 and prior have a predictable registration ID derive
2026-06-26 归档
今日共收录 1370 条安全情报，包含 648 个 CVE，378 篇安全通告，以及 115 篇研究论文。
← 返回归档列表Setracker2 Android Companion App com.tgelec.setracker versions 3.1.5 and prior only require the...
CVE-2026-9222
Setracker2 Android Companion App com.tgelec.setracker versions 3.1.5 and prior only require the password hash when authe
The Setracker2 Android Companion App (com.tgelec.setracker) versions 3.1.5 and earlier uses MD5...
CVE-2026-9221
The Setracker2 Android Companion App (com.tgelec.setracker) versions 3.1.5 and earlier uses MD5 to generate a request si
Setracker2 Android Companion App com.tgelec.setracker versions 3.1.5 and prior encrypts requests...
CVE-2026-9220
Setracker2 Android Companion App com.tgelec.setracker versions 3.1.5 and prior encrypts requests between the watch and i
A flaw was found in Apicurio Registry. The DocumentBuilderAccessor correctly blocks external DTD...
CVE-2026-12993
A flaw was found in Apicurio Registry. The DocumentBuilderAccessor correctly blocks external DTD and schema access but d
A flaw was found in the Pen Drive report generator. Cluster-sourced data is rendered into HTML...
CVE-2026-13083
A flaw was found in the Pen Drive report generator. Cluster-sourced data is rendered into HTML reports without proper es
WebSocket endpoints lack proper authentication mechanisms, enabling attackers to impersonate...
CVE-2026-40702
WebSocket endpoints lack proper authentication mechanisms, enabling attackers to impersonate charging stations. As a res
The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows...
CVE-2026-54479
The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to
PKCS7_verify signer confusion allows forged signatures, where the signer associated with a...
CVE-2026-7511
PKCS7_verify signer confusion allows forged signatures, where the signer associated with a signature is not correctly bo
Use after free in AdFilter in Google Chrome on Android prior to 149.0.7827.201 allowed a remote...
CVE-2026-13283
Use after free in AdFilter in Google Chrome on Android prior to 149.0.7827.201 allowed a remote attacker who convinced a
Flowise before 3.0.6 (affected versions 2.2.8 and earlier) contains an arbitrary file access...
CVE-2025-71334
Flowise before 3.0.6 (affected versions 2.2.8 and earlier) contains an arbitrary file access vulnerability due to missin
A flaw was found in Apicurio Registry. The WSDLReaderAccessor creates a wsdl4j WSDLReader without...
CVE-2026-12992
A flaw was found in Apicurio Registry. The WSDLReaderAccessor creates a wsdl4j WSDLReader without disabling the javax.ws
Flowise before 3.0.6 (affected versions 2.2.7-patch.1 and earlier) contains an unsandboxed remote...
CVE-2025-71336
Flowise before 3.0.6 (affected versions 2.2.7-patch.1 and earlier) contains an unsandboxed remote code execution vulnera
Use after free in Payments in Google Chrome on Android prior to 149.0.7827.201 allowed a local...
CVE-2026-13282
Use after free in Payments in Google Chrome on Android prior to 149.0.7827.201 allowed a local attacker to potentially e
A flaw was found in Keycloak. This JWT algorithm confusion vulnerability in the JWT Authorization...
CVE-2026-11800
A flaw was found in Keycloak. This JWT algorithm confusion vulnerability in the JWT Authorization Grant flow allows an a
Flowise contains a path traversal vulnerability in the /api/v1/document-store/loader/process...
CVE-2025-71338
Flowise contains a path traversal vulnerability in the /api/v1/document-store/loader/process endpoint that allows unauth
Flowise contains an authentication bypass vulnerability in the unprotected /api/v1/account...
CVE-2025-71327
Flowise contains an authentication bypass vulnerability in the unprotected /api/v1/account/register endpoint that allows
golang.org/x/crypto/ssh: Invoking VerifiedPublicKeyCallback permissions skip enforcement
CVE-2026-46595
Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of cal
golang.org/x/crypto/ssh/knownhosts vulnerable to auth bypass via unenforced @revoked status
CVE-2026-42508
Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation. Now, both the 'key' and
golang.org/x/crypto/ssh vulnerable to infinite loop on large channel writes
CVE-2026-39834
When writing data larger than 4GB in a single Write call on an SSH channel, an integer overflow in the internal payload