Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Directives in...
CVE-2026-48317
Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Directives in Dynamically Evaluated Code ('Eva
2026-08-04 归档
今日共收录 1122 条安全情报，包含 327 个 CVE，410 篇安全通告，以及 104 篇研究论文。
← 返回归档列表Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used...
CVE-2026-48330
Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL
A vulnerability in Tenable Sensor Proxy allows a remote attacker to execute code with elevated...
CVE-2026-18667
A vulnerability in Tenable Sensor Proxy allows a remote attacker to execute code with elevated privileges by inducing an
An issue in the HS_MonitorApplications() component of NASA cFS v7.0.1 allows attackers to force...
CVE-2026-67969
An issue in the HS_MonitorApplications() component of NASA cFS v7.0.1 allows attackers to force the processor to reset v
A security flaw has been discovered in OpenAkita up to 1.27.12. This vulnerability affects...
CVE-2026-18682
A security flaw has been discovered in OpenAkita up to 1.27.12. This vulnerability affects unknown code of the file /api
Emlog CMS <= 2.6.14 contains a stored cross-site scripting (XSS) vulnerability in the article...
CVE-2026-52520
Emlog CMS <= 2.6.14 contains a stored cross-site scripting (XSS) vulnerability in the article publishing module (/admin/
Shlink contains a server-side request forgery vulnerability that allows authenticated API key...
CVE-2026-18736
Shlink contains a server-side request forgery vulnerability that allows authenticated API key holders to cause the serve
OPNsense before 26.1.9 contains a stored cross-site scripting vulnerability that allows...
CVE-2026-49132
OPNsense before 26.1.9 contains a stored cross-site scripting vulnerability that allows authenticated attackers to injec
Apache NiFi 2.0.0 through 2.10.0 support creating, reading, and deleting Assets associated with...
CVE-2026-68980
Apache NiFi 2.0.0 through 2.10.0 support creating, reading, and deleting Assets associated with Parameter Contexts throu
Improper Neutralization of Input During Web Page Generation (XSS) vulnerability in lud oaskit...
CVE-2026-66296
Improper Neutralization of Input During Web Page Generation (XSS) vulnerability in lud oaskit allows reflected cross-sit
A security vulnerability has been detected in jina-ai reader up to...
CVE-2026-18647
A security vulnerability has been detected in jina-ai reader up to 1574bfd380d249c86c82db4dace0d9c8fe17e2b1. This issue
A race condition exists in the cloud-based Omada device adoption process when an attacker may be...
CVE-2025-15630
A race condition exists in the cloud-based Omada device adoption process when an attacker may be able to interact with t
A vulnerability was found in GL-iNet GL-MT3000 up to 4.4.5. Impacted is the function s2s...
CVE-2026-18614
A vulnerability was found in GL-iNet GL-MT3000 up to 4.4.5. Impacted is the function s2s.enable_echo_server of the file
osTicket 1.18.3 generates API keys using a predictable construction based on MD5 hashing. The use...
CVE-2026-38447
osTicket 1.18.3 generates API keys using a predictable construction based on MD5 hashing. The use of MD5, combined with
A vulnerability was determined in GL-iNet GL-MT3000 up to 4.4.5. The affected element is the...
CVE-2026-18615
A vulnerability was determined in GL-iNet GL-MT3000 up to 4.4.5. The affected element is the function wg-server.generate
A vulnerability was identified in GL-iNet GL-MT3000 up to 4.4.5. The impacted element is the...
CVE-2026-18616
A vulnerability was identified in GL-iNet GL-MT3000 up to 4.4.5. The impacted element is the function server.set_peer of
A cryptographic weakness exists in the Omada device adoption process. During adoption,...
CVE-2025-15544
A cryptographic weakness exists in the Omada device adoption process. During adoption, authentication credentials assoc
Sequelize: SQL Injection (Oracle DB)
CVE-2026-69240
### Summary SQL Injection is possible with strings only **if dialect is set to `oracle`**. The vulnerability was confirm
ip-address: Address4 decodes leading-zero octets as decimal while resolvers decode them as octal, allowing SSRF and trust-boundary bypass
CVE-2026-69192
### Summary `Address4` accepts an octet written with a leading zero and decodes it as decimal, while the WHATWG URL hos
ip-address: a CIDR suffix on the parsed address suppresses special-use classification and can bypass SSRF and trust-boundary checks
CVE-2026-69198
### Summary Every special-use classification method is built on `isInSubnet`, which short-circuits to `false` whenever