HTTP::Tiny versions before 0.095 for Perl forward credential headers to cross-origin redirect...
CVE-2026-7017
HTTP::Tiny versions before 0.095 for Perl forward credential headers to cross-origin redirect targets. When the server
2026-07-08 归档
今日共收录 1050 条安全情报，包含 282 个 CVE，378 篇安全通告，以及 103 篇研究论文。
← 返回归档列表An improper access check allows unauthorized users to create custom fields via webservices...
CVE-2026-48958
An improper access check allows unauthorized users to create custom fields via webservices endpoints.
An improper access check allows unauthorized users to access workflow stage and transition...
CVE-2026-48955
An improper access check allows unauthorized users to access workflow stage and transition information.
An unauthenticated remote disclosure vulnerability has been identified in HPE Networking Instant...
CVE-2026-44877
An unauthenticated remote disclosure vulnerability has been identified in HPE Networking Instant On 1830, 1930, and 1960
Lack of escaping leads to an XSS vulnerability in the generic image output layout.
CVE-2026-48953
Lack of escaping leads to an XSS vulnerability in the generic image output layout.
Improper validation leads to a generic XSS vector in the language override feature.
CVE-2026-48954
Improper validation leads to a generic XSS vector in the language override feature.
Lack of escaping leads to an XSS vulnerability in the update list view of com_installer.
CVE-2026-48952
Lack of escaping leads to an XSS vulnerability in the update list view of com_installer.
Lack of escaping leads to XSS vulnerabilities in modalreturn layouts of various components.
CVE-2026-48951
Lack of escaping leads to XSS vulnerabilities in modalreturn layouts of various components.
An improper access check allows user to download vcard exports of com_contact contacts that are...
CVE-2026-48948
An improper access check allows user to download vcard exports of com_contact contacts that are inaccessible.
An improper access check allows privileged users to overwrite media files without editing...
CVE-2026-48947
An improper access check allows privileged users to overwrite media files without editing permissions.
Lack of escaping leads to an XSS vulnerability in the file management view of com_templates.
CVE-2026-48950
Lack of escaping leads to an XSS vulnerability in the file management view of com_templates.
Lack of validation leads to an XSS vulnerability in the MFA management views.
CVE-2026-48949
Lack of validation leads to an XSS vulnerability in the MFA management views.
Better Auth vulnerable to unauthorized invitation acceptance via unverified email match in organization plugin
CVE-2026-53514
### Am I affected? Users are affected if all of the following are true: - Their application uses `better-auth` with th
@aborruso/ckan-mcp-server: SSRF via base_url allows access to internal networks (Potential fix bypass of CVE-2026-33060)
CVE-2026-53509
### Summary A known vulnerability CVE-2026-33060 indicated tools including ckan_package_search and sparql_query that acc
MSI Feature Manager contains a local privilege escalation vulnerability in the KernCoreLib64.sys...
CVE-2026-57851
MSI Feature Manager contains a local privilege escalation vulnerability in the KernCoreLib64.sys kernel driver that allo
Vtiger CRM through 8.4.0 contains an authenticated remote code execution vulnerability in the...
CVE-2026-23698
Vtiger CRM through 8.4.0 contains an authenticated remote code execution vulnerability in the admin module import featur
AWS Research and Engineering Studio (RES) is an open-source solution that enables researchers and...
CVE-2026-14904
AWS Research and Engineering Studio (RES) is an open-source solution that enables researchers and engineers to create an
Vtiger CRM before 8.4.0 contains an authenticated file upload vulnerability that allows low...
CVE-2026-23697
Vtiger CRM before 8.4.0 contains an authenticated file upload vulnerability that allows low-privileged users to achieve
A flaw was found in Jastow. Jastow is vulnerable to Cross-Site Scripting (XSS) attack. If using a...
CVE-2025-12799
A flaw was found in Jastow. Jastow is vulnerable to Cross-Site Scripting (XSS) attack. If using a set of combined config
A Weak Password Recovery Mechanism for Forgotten Password exists in Esri Portal for ArcGIS...
CVE-2026-13020
A Weak Password Recovery Mechanism for Forgotten Password exists in Esri Portal for ArcGIS versions 12.1 and earlier on