Authorization handling for Parameter Context validation requests in Apache NiFi 1.10.0 through 2...
CVE-2026-62354
Authorization handling for Parameter Context validation requests in Apache NiFi 1.10.0 through 2.10.0 allows clients wit
2026-08-04 归档
今日共收录 1122 条安全情报，包含 327 个 CVE，410 篇安全通告，以及 104 篇研究论文。
← 返回归档列表Emlog Pro through 2.6.23 contains a disabled TLS certificate validation vulnerability in include...
CVE-2026-67598
Emlog Pro through 2.6.23 contains a disabled TLS certificate validation vulnerability in include/service/ai.php that all
The DuckDB AWS extension for DuckDB contains a security policy bypass vulnerability that allows...
CVE-2026-58139
The DuckDB AWS extension for DuckDB contains a security policy bypass vulnerability that allows any database user with S
A vulnerability was detected in Blix Email Blue Mail Calendar App 2.2.305. Impacted is the...
CVE-2026-18648
A vulnerability was detected in Blix Email Blue Mail Calendar App 2.2.305. Impacted is the function FileDirectory.getDat
A security flaw has been discovered in danpros HTMLy up to 3.1.1. This affects the function...
CVE-2026-18645
A security flaw has been discovered in danpros HTMLy up to 3.1.1. This affects the function add_content of the file /sys
A vulnerability was determined in Sangfor Operation and Maintenance Security Management System up...
CVE-2026-18641
A vulnerability was determined in Sangfor Operation and Maintenance Security Management System up to 3.0.13. Affected by
Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3.0.1005, contain an Improper...
CVE-2026-59912
Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3.0.1005, contain an Improper Access Control vulnera
A stored cross-site scripting (XSS) vulnerability exists in osTicket 1.18.3 due to improper...
CVE-2026-38446
A stored cross-site scripting (XSS) vulnerability exists in osTicket 1.18.3 due to improper sanitization of the thread e
A vulnerability was identified in jeequan jeepay up to 3.2.9. This vulnerability affects the...
CVE-2026-18631
A vulnerability was identified in jeequan jeepay up to 3.2.9. This vulnerability affects the function WebSecurityConfig
Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3.0.1005, contain a Missing...
CVE-2026-59913
Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3.0.1005, contain a Missing Authentication for Criti
A cryptographic weakness exists in affected Omada devices where site credentials are protected...
CVE-2025-15631
A cryptographic weakness exists in affected Omada devices where site credentials are protected using a legacy hashing al
A vulnerability was identified in danpros HTMLy up to 3.1.1. Affected by this issue is the...
CVE-2026-18644
A vulnerability was identified in danpros HTMLy up to 3.1.1. Affected by this issue is the function unlink of the file /
A security flaw has been discovered in langgenius dify up to 1.14.2. This issue affects the...
CVE-2026-18632
A security flaw has been discovered in langgenius dify up to 1.14.2. This issue affects the function jinja2.Template of
osTicket v1.18.3 is vulnerable to Stored Cross-Site Scripting (XSS) via the email From-header...
CVE-2026-38444
osTicket v1.18.3 is vulnerable to Stored Cross-Site Scripting (XSS) via the email From-header display name. The value is
Affected Omada devices rely on embedded certificates that are shared across deployments to...
CVE-2025-15628
Affected Omada devices rely on embedded certificates that are shared across deployments to establish trust between contr
A cryptographic weakness exists in the Omada adoption protocol where session encryption keys used...
CVE-2025-15629
A cryptographic weakness exists in the Omada adoption protocol where session encryption keys used to protect communicati
python-cryptography verifier accepts wildcard DNS names allowing escape from permittedSubtrees
CVE-2026-69248
### Summary If an intermediate constrained CA permits the DNS name `foo.example.com`, and the leaf certificate has a wil
python-cryptography: Duplicate self-signed intermediates can cause exponential path-building
CVE-2026-69249
### Summary When resolving invalid certificate chains that include duplicate copies of self-signed certificates, the pro
Guzzle: Noncanonical host can bypass host-based checks
CVE-2026-69246
### Impact In affected versions, Guzzle gives a transport the request URI as text and supplies the `Host` header separa
Guzzle: Noncanonical cookie domain keeps subdomain scope
CVE-2026-69245
### Impact `SetCookie::matchesDomain()` gives every subdomain of a cookie `Domain` that cookie unless it recognizes the