Incorrect access control in NASA cFS v7.0.1 allows attackers to arbitrarily remove low-index...
CVE-2026-67975
Incorrect access control in NASA cFS v7.0.1 allows attackers to arbitrarily remove low-index subscriptions and add new s
2026-08-04 归档
今日共收录 1122 条安全情报，包含 327 个 CVE，410 篇安全通告，以及 104 篇研究论文。
← 返回归档列表A parser boundary flaw in the Software Bus Network (SBN) application's peer subscription message...
CVE-2026-67974
A parser boundary flaw in the Software Bus Network (SBN) application's peer subscription message handling in NASA cFS v7
An integer overflow in the Svc::FileDownlink::SendPartial component of fprime framework v4.2.2...
CVE-2026-67977
An integer overflow in the Svc::FileDownlink::SendPartial component of fprime framework v4.2.2 allows attackers to cause
Incorrect access control in the DS_SetDestPathCmd() component of NASA cFS v7.0.1 allows attackers...
CVE-2026-67970
Incorrect access control in the DS_SetDestPathCmd() component of NASA cFS v7.0.1 allows attackers to access sensitive co
An issue in the CFDP receive path of NASA cFS v7.0.1 allows attackers to cause a Denial of...
CVE-2026-67973
An issue in the CFDP receive path of NASA cFS v7.0.1 allows attackers to cause a Denial of Service (DoS) via replaying f
Camaleon CMS through 2.9.2, fixed in commit 88ab703, contains a missing authorization...
CVE-2026-67616
Camaleon CMS through 2.9.2, fixed in commit 88ab703, contains a missing authorization vulnerability on the drafts endpoi
Microweber CMS through 2.0.20 contains a stored cross-site scripting vulnerability in the content...
CVE-2026-67617
Microweber CMS through 2.0.20 contains a stored cross-site scripting vulnerability in the content tagging system that al
The Ref::SignalGen component of fprime framework v4.2.2 does not validate the safety of user...
CVE-2026-67976
The Ref::SignalGen component of fprime framework v4.2.2 does not validate the safety of user-controlled parameters, allo
A SQL injection vulnerability in Z-BlogPHP 1.7.5 allows authenticated attackers to execute...
CVE-2026-52521
A SQL injection vulnerability in Z-BlogPHP 1.7.5 allows authenticated attackers to execute arbitrary SQL commands via th
FirmaCheck for Windows before 1.3.16 contains a dll hijacking vulnerability that allows local...
CVE-2026-41447
FirmaCheck for Windows before 1.3.16 contains a dll hijacking vulnerability that allows local attackers to execute arbit
The "s init" command in Serverless-Devs @serverless-devs/s <= 3.1.11 passes unsanitized user...
CVE-2026-51190
The "s init" command in Serverless-Devs @serverless-devs/s <= 3.1.11 passes unsanitized user input to child_process.spaw
An issue in the CF_CFDP_RecvMd() component of NASA cFS v7.0.1 allows attackers to contrl where...
CVE-2026-67972
An issue in the CF_CFDP_RecvMd() component of NASA cFS v7.0.1 allows attackers to contrl where received content and data
SQL injection vulnerability in Fastadmin v.1.6.1.20250430 allows an attacker to exectue arbitrary...
CVE-2026-51775
SQL injection vulnerability in Fastadmin v.1.6.1.20250430 allows an attacker to exectue arbitrary code via the applicati
Shlink versions 5.0.0 through 5.1.5 contain a CSV formula injection vulnerability that allows...
CVE-2026-18738
Shlink versions 5.0.0 through 5.1.5 contain a CSV formula injection vulnerability that allows unauthenticated remote att
An OS command injection vulnerability in the openmediavault-md plugin of OpenMediaVault v8.0.4-1...
CVE-2026-52102
An OS command injection vulnerability in the openmediavault-md plugin of OpenMediaVault v8.0.4-1 allows attackers to exe
Shlink contains a blind SQL injection vulnerability that allows any authenticated API key holder...
CVE-2026-18737
Shlink contains a blind SQL injection vulnerability that allows any authenticated API key holder to inject arbitrary SQL
Apache NiFi 1.5.0 through 2.10.0 support gzip-encoded HTTP requests for the application REST API...
CVE-2026-68981
Apache NiFi 1.5.0 through 2.10.0 support gzip-encoded HTTP requests for the application REST API using a Jersey encoding
A weakness has been identified in danpros HTMLy up to 3.1.1. This vulnerability affects unknown...
CVE-2026-18646
A weakness has been identified in danpros HTMLy up to 3.1.1. This vulnerability affects unknown code of the file /system
ClearOS 7.9 contains an OS command injection vulnerability in the Log Viewer component that...
CVE-2026-67599
ClearOS 7.9 contains an OS command injection vulnerability in the Log Viewer component that allows authenticated attacke
Apache NiFI 1.10.0 through 2.10.0 provide a Parameter Context update REST API method that does...
CVE-2026-68979
Apache NiFI 1.10.0 through 2.10.0 provide a Parameter Context update REST API method that does not enforce authorization