Permissive cross-domain security policy with untrusted domains vulnerability in Progress MOVEit...
CVE-2026-15966
Permissive cross-domain security policy with untrusted domains vulnerability in Progress MOVEit Transfer. This issue af
2026-07-24 归档
今日共收录 841 条安全情报，包含 0 个 CVE，432 篇安全通告，以及 115 篇研究论文。
← 返回归档列表gpsd through release-3.27.5, fixed at commit 4c06658, contains a code injection vulnerability in...
CVE-2026-60122
gpsd through release-3.27.5, fixed at commit 4c06658, contains a code injection vulnerability in the gpsprof utility tha
FFmpeg through 8.1.2 contains an out-of-bounds write vulnerability that allows attackers to cause...
CVE-2026-65704
FFmpeg through 8.1.2 contains an out-of-bounds write vulnerability that allows attackers to cause heap corruption by sup
An issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a local attacker to escalate...
CVE-2026-38764
An issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a local attacker to escalate privileges via the kerne
Datasets through 5.00, fixed in commit ad2d853, contains a symlink-following vulnerability in...
CVE-2026-65010
Datasets through 5.00, fixed in commit ad2d853, contains a symlink-following vulnerability in Extractor.extract() that a
Improper Authentication vulnerability in Progress MOVEit Transfer. This issue affects MOVEit...
CVE-2026-10697
Improper Authentication vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.5,
The WPO365 | Login plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions...
CVE-2026-15212
The WPO365 | Login plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 43
A security issue was discovered in the Kubernetes Java client library where a compromised pod may...
CVE-2026-15687
A security issue was discovered in the Kubernetes Java client library where a compromised pod may be able to create new
Ruby json: JSON generator heap buffer overflow when streaming to an IO
CVE-2026-54696
### Summary `JSON.dump(obj, io)` and `JSON::State#generate(obj, io)` can write past the internal JSON generator buffer
c3p0 can, in combination with other libraries, compose to a "sink" for deserialization gadgets
CVE-2026-55223
### Impact The JDBC spec defines the interface `DataSource`, with a method called `getConnection()`, and `ConnectionPoo
ImageMagick: Information Disclosure in MNG decoder because allocated memory is left unchanged
CVE-2026-53467
In the MNG decoder there is a possible heap information disclosure because part of the pixels are left unchanged.
Vanna through 2.0.2 contains a path traversal vulnerability in the FileSystemConversationStore...
CVE-2026-65702
Vanna through 2.0.2 contains a path traversal vulnerability in the FileSystemConversationStore persistence integration t
PyTorch torchvision through 0.28.0, fixed in commit 4e05dc2, contains an out-of-bounds heap read...
CVE-2026-65918
PyTorch torchvision through 0.28.0, fixed in commit 4e05dc2, contains an out-of-bounds heap read vulnerability in the GI
AgentGPT through 1.0.0 contains an authorization bypass through user-controlled key vulnerability...
CVE-2026-65699
AgentGPT through 1.0.0 contains an authorization bypass through user-controlled key vulnerability that allows authentica
Joomla Extension - phoca.cz - Reflected XSS vulnerability in Phoca Maps 1.0.0-6.0.9 - Improper...
CVE-2026-65763
Joomla Extension - phoca.cz - Reflected XSS vulnerability in Phoca Maps 1.0.0-6.0.9 - Improper validation of user inputs
Diffusers through 0.39.0, fixed in commit cee298c, contains a path traversal vulnerability in the...
CVE-2026-65920
Diffusers through 0.39.0, fixed in commit cee298c, contains a path traversal vulnerability in the _get_checkpoint_shard_
Joomla Extension - phoca.cz - Reflected XSS vulnerability in Phoca Guestbook 1.0.0-6.1.0 -...
CVE-2026-65762
Joomla Extension - phoca.cz - Reflected XSS vulnerability in Phoca Guestbook 1.0.0-6.1.0 - Improper validation of user i
Meshery before 1.0.57 contains an unauthenticated arbitrary file read vulnerability in the /api...
CVE-2026-65919
Meshery before 1.0.57 contains an unauthenticated arbitrary file read vulnerability in the /api/system/fileView and /api
Overseerr through 1.35.0 contains an authorization bypass through user-controlled key...
CVE-2026-65696
Overseerr through 1.35.0 contains an authorization bypass through user-controlled key vulnerability in the push subscrip
Joomla Extension - joomshaper.com - Unauthenticated SQL injection in Easy Store extension 1.0.0-2...
CVE-2026-65761
Joomla Extension - joomshaper.com - Unauthenticated SQL injection in Easy Store extension 1.0.0-2.0.1 - Improper validat