Open WebUI before 0.6.27 contains a server-side request forgery vulnerability in the /api/v1...
CVE-2026-56399
Open WebUI before 0.6.27 contains a server-side request forgery vulnerability in the /api/v1/retrieval/process/web endpo
2026-07-01 归档
今日共收录 1573 条安全情报，包含 770 个 CVE，406 篇安全通告，以及 100 篇研究论文。
← 返回归档列表ImageMagick before 7.1.2-24 contains an incorrect policy check that allows attackers to create or...
CVE-2026-56377
ImageMagick before 7.1.2-24 contains an incorrect policy check that allows attackers to create or truncate files disallo
ImageMagick before 7.1.2-19 contains a memory leak vulnerability in the PNG encoder when writing...
CVE-2026-56365
ImageMagick before 7.1.2-19 contains a memory leak vulnerability in the PNG encoder when writing MNG images. Attackers c
ImageMagick before 7.1.2-13 contains a memory leak vulnerability in LoadOpenCLDeviceBenchmark()...
CVE-2026-56364
ImageMagick before 7.1.2-13 contains a memory leak vulnerability in LoadOpenCLDeviceBenchmark() function when parsing ma
phpMyFAQ before 4.1.5 contains a privilege escalation vulnerability in GroupController:...
CVE-2026-57995
phpMyFAQ before 4.1.5 contains a privilege escalation vulnerability in GroupController::updatePermissions that allows GR
Capgo before 12.128.2 lacks an UPDATE row-level security policy for the build_requests table,...
CVE-2026-56334
Capgo before 12.128.2 lacks an UPDATE row-level security policy for the build_requests table, preventing API-key and ano
Capgo before 12.128.2 contains an authorization flaw in POST /private/create_device that accepts...
CVE-2026-56320
Capgo before 12.128.2 contains an authorization flaw in POST /private/create_device that accepts a caller-supplied org_i
Capgo before 12.128.2 allows multiple public channels for the same app and platform to coexist...
CVE-2026-56328
Capgo before 12.128.2 allows multiple public channels for the same app and platform to coexist simultaneously, while unn
n8n contains a stored cross-site scripting vulnerability in the Chat Trigger node's Custom CSS...
CVE-2026-56356
n8n contains a stored cross-site scripting vulnerability in the Chat Trigger node's Custom CSS field due to a misconfigu
Capgo before 12.128.2 contains improper error handling in the /private/accept_invitation endpoint...
CVE-2026-56331
Capgo before 12.128.2 contains improper error handling in the /private/accept_invitation endpoint that returns HTTP 500
Flowise before 3.1.2 sets Access-Control-Allow-Origin to a hardcoded wildcard (*) on its text-to...
CVE-2026-56277
Flowise before 3.1.2 sets Access-Control-Allow-Origin to a hardcoded wildcard (*) on its text-to-speech (TTS) generation
Capgo before 12.128.2 contains an authentication bypass vulnerability in the account deletion...
CVE-2026-56286
Capgo before 12.128.2 contains an authentication bypass vulnerability in the account deletion endpoint that allows delet
Capgo before 12.128.2 contains an information disclosure vulnerability in the /private...
CVE-2026-56318
Capgo before 12.128.2 contains an information disclosure vulnerability in the /private/validate_password_compliance endp
Capgo before 12.128.2 contains an authorization bypass vulnerability in the channel creation...
CVE-2026-56249
Capgo before 12.128.2 contains an authorization bypass vulnerability in the channel creation endpoint that allows authen
ImageMagick before 7.1.2-19 contains an off-by-one error in morphology validation allowing out-of...
CVE-2026-56361
ImageMagick before 7.1.2-19 contains an off-by-one error in morphology validation allowing out-of-bounds heap buffer rea
Capgo before 12.128.2 contains an information disclosure vulnerability in the public...
CVE-2026-56327
Capgo before 12.128.2 contains an information disclosure vulnerability in the public.invite_user_to_org RPC function tha
Capgo before 12.128.2 contains unauthenticated security definer RPC functions get_user_id and...
CVE-2026-56300
Capgo before 12.128.2 contains unauthenticated security definer RPC functions get_user_id and get_org_perm_for_apikey th
Inappropriate implementation in DevTools in Google Chrome prior to 150.0.7871.47 allowed an...
CVE-2026-14154
Inappropriate implementation in DevTools in Google Chrome prior to 150.0.7871.47 allowed an attacker who convinced a use
Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker...
CVE-2026-52193
Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to cause a denial of s
Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker...
CVE-2026-52198
Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to cause a denial of s