Shopware: Privilege Escalation via Sync API Integration Admin Flag Bypass
CVE-2026-48008
Shopware is an open commerce platform. Prior to 6.6.10.18 and 6.7.10.1, a non-admin API user with integration:create ACL
2026-07-18 归档
今日共收录 1491 条安全情报，包含 418 个 CVE，581 篇安全通告，以及 194 篇研究论文。
← 返回归档列表Missing copy constraint in halo2_gadgets variable-base scalar multiplication allows under-constrained base, breaking Orchard Action circuit soundness
CVE-2026-54496
ZEBRA is a Zcash node written entirely in Rust. Prior to zebrad 5.0.0, halo2_gadgets 0.5.0, orchard 0.14.0, zcash_primit
pyzipper: Encryption bypass for small files encrypted with pyzipper
CVE-2026-44722
pyzipper is a replacement for Python's zipfile that can read and write AES encrypted zip files. Prior to 0.4.0, a Python
Symfony UX: CSRF Protection Bypass in symfony/ux-live-component — Accept Header is CORS-Safelisted
CVE-2026-49215
Symfony UX is a JavaScript ecosystem for Symfony. From 2.22.0 until 2.36.0 and 3.1.0, Symfony\UX\LiveComponent\EventList
ForgeCode Arbitrary Code Execution via Unvetted .mcp.json in Untrusted Repository
CVE-2026-57860
ForgeCode (tailcallhq/forgecode), an AI pair-programming CLI, automatically loads and executes the MCP servers defined i
Symfony UX: Information exposure via unescaped LIKE wildcards in EntitySearchUtil
CVE-2026-49211
Symfony UX is a JavaScript ecosystem for Symfony. From 2.2.0 until 2.36.0 and 3.1.0, Symfony\UX\Autocomplete\Doctrine\En
Helm Files.Lines Denial of Service via Empty Chart Files
CVE-2026-63308
Helm through 4.2.3, fixed in commit ba6c9a2, contains a denial of service vulnerability in the Files.Lines template help
Chat2DB < 5.3.0 Insecure Direct Object Reference via GET /api/connection/datasource
CVE-2026-63307
Chat2DB before 5.3.0 contains an insecure direct object reference vulnerability in the GET /api/connection/datasource/{i
Symfony UX: Format-less date LiveProps parsed with the permissive DateTime constructor
CVE-2026-49208
Symfony UX is a JavaScript ecosystem for Symfony. From 2.8.0 until 2.36.0 and 3.1.0, when a #[LiveProp] is typed as Date
Symfony UX: XSS in symfony/ux-live-component via attacker-controlled child component tag
CVE-2026-49210
Symfony UX is a JavaScript ecosystem for Symfony. From 2.8.0 until 2.36.0 and 3.1.0, Symfony\UX\LiveComponent\Util\Child
Symfony UX: LiveComponentHydrator HMAC checksum lacks component and slot binding
CVE-2026-49212
Symfony UX is a JavaScript ecosystem for Symfony. From 2.8.0 until 2.36.0 and 3.1.0, the HMAC computed by Symfony\UX\Liv
Symfony UX: Denial of service in symfony/ux-live-component via unbounded batch action requests
CVE-2026-49209
Symfony UX is a JavaScript ecosystem for Symfony. From 2.5.0 until 2.36.0 and 3.1.0, Symfony\UX\LiveComponent\Controller
Open Event Server 1.19.1 Unauthenticated Member Roster Export via CSV Export Endpoint
CVE-2026-63101
Open Event Server through 1.19.1 contains a missing authentication vulnerability that allows unauthenticated attackers t
Maybe 0.6.0 Missing Authorization via HostingsController show/update
CVE-2026-63100
Maybe through 0.6.0 contains a missing authorization vulnerability that allows authenticated low-privilege member-role u
TheHive 4.1.24 Broken Object Level Authorization via Attachment Download Endpoints
CVE-2026-63099
TheHive through 4.1.24 contains a broken object-level authorization vulnerability in the attachment download endpoints t
Dendrite 0.13.8 syncapi /context Endpoint Post-Leave State Exposure
CVE-2026-63097
Dendrite through 0.13.8 contains an improper access control vulnerability in the syncapi /context endpoint (syncapi/rout
Dendrite 0.13.8 SSRF via Unauthenticated Legacy Media Download Endpoint
CVE-2026-63096
Dendrite through 0.13.8 contains a server-side request forgery vulnerability that allows unauthenticated attackers to ca
Mojo::JWT versions before 1.02 for Perl verify HMAC signatures with a non-constant-time string comparison
CVE-2026-9537
Mojo::JWT versions before 1.02 for Perl verify HMAC signatures with a non-constant-time string comparison. The decode()
HTTP::Date versions before 6.08 for Perl allow CPU exhaustion via polynomial regex backtracking in parse_date
CVE-2026-14741
HTTP::Date versions before 6.08 for Perl allow CPU exhaustion via polynomial regex backtracking in parse_date. parse_da
osTicket v1.18.3 - v1.17.7 - BOLA/IDOR in ticket field viewing allows cross-department data disclosure
CVE-2026-14871
osTicket versions v1.18.3 and v1.17.7 contain a Broken Object Level Authorization (BOLA) leading to Insecure Direct Obje