A vulnerability has been found in Shandong Hoteam PDM Product Data Management System up to 8.3.10...
CVE-2026-18854
A vulnerability has been found in Shandong Hoteam PDM Product Data Management System up to 8.3.10. The impacted element
2026-08-05 归档
今日共收录 766 条安全情报，包含 0 个 CVE，370 篇安全通告，以及 100 篇研究论文。
← 返回归档列表An issue in open62541 v.1.5.5 and before allows a remote attacker to cause a denial of service...
CVE-2026-67856
An issue in open62541 v.1.5.5 and before allows a remote attacker to cause a denial of service via crafted CreateSubscri
open62541 1.5.5 contains a buffer-overflow in the high-level attribute reading logic in src...
CVE-2026-67862
open62541 1.5.5 contains a buffer-overflow in the high-level attribute reading logic in src/client/ua_client_highlevel.c
Buffer Overflow vulnerability exists in open62541 1.5.5 when the Local Discovery Server (LDS) is...
CVE-2026-67858
Buffer Overflow vulnerability exists in open62541 1.5.5 when the Local Discovery Server (LDS) is built with multicast di
open62541 1.5.5 contains a heap-based buffer overflow in the default HistoryRead path when the...
CVE-2026-67860
open62541 1.5.5 contains a heap-based buffer overflow in the default HistoryRead path when the default history database
An issue in open62541 v.1.5.5 and before allows a remote attacker to cause a denial of service...
CVE-2026-67861
An issue in open62541 v.1.5.5 and before allows a remote attacker to cause a denial of service via the UA_Client_getRemo
Buffer Overflow vulnerability in open62541 v1.5.5 allows a remote attacker to cause a denial of...
CVE-2026-67859
Buffer Overflow vulnerability in open62541 v1.5.5 allows a remote attacker to cause a denial of service via the Discover
open62541 1.5.5 contains an out-of-bounds read in the client-side function...
CVE-2026-67857
open62541 1.5.5 contains an out-of-bounds read in the client-side function responseReadNamespacesArray() in src/client/u
Cross Site Scripting vulnerability in Soliton Systems MailZen Management Protal v.2.62, v.2.63...
CVE-2026-51144
Cross Site Scripting vulnerability in Soliton Systems MailZen Management Protal v.2.62, v.2.63 allows a remote attacker
A vulnerability was identified in Baserow up to 2.3.2. Affected by this vulnerability is the...
CVE-2026-18816
A vulnerability was identified in Baserow up to 2.3.2. Affected by this vulnerability is the function verify of the file
open62541 contains a heap use-after-free in the GDS PushManagement certificate update workflow...
CVE-2026-67855
open62541 contains a heap use-after-free in the GDS PushManagement certificate update workflow when UA_ENABLE_GDS_PUSHMA
A vulnerability was found in H3C NX15 V100R017. This impacts the function reload.reload_config of...
CVE-2026-18814
A vulnerability was found in H3C NX15 V100R017. This impacts the function reload.reload_config of the file /api/esps. Th
A security flaw has been discovered in Baserow up to 2.3.2. Affected by this issue is the...
CVE-2026-18817
A security flaw has been discovered in Baserow up to 2.3.2. Affected by this issue is the function BaserowImpersonateAut
Ghost: Paid gift memberships obtainable at minimal cost via the donations feature
CVE-2026-59817
### Impact A vulnerability in Ghost's public donation checkout flow allowed an unauthenticated attacker to obtain full
Ghost: Member existence leak via magic link sign-in response
CVE-2026-53947
### Impact A discrepancy in responses from the members signin endpoints made it possible for an unauthenticated attacke
XSS in Ghost's ActivityPub client
CVE-2026-53950
### Impact The ActivityPub client in Ghost was vulnerable to JavaScript injection on posts shared by a maliciously cust
Ghost: Session Fixation in Ghost Admin
CVE-2026-70594
### Impact Ghost Admin did not invalidate existing sessions on login which could have allowed for session fixation atta
Ghost: Theme Upload Path Traversal
CVE-2026-70593
### Impact A vulnerability in custom themes allowed a staff user to write files outside of the uploads directory. This
Ghost: Database Backup Path Traversal
CVE-2026-70592
### Impact An Administrator-level user could remotely overwrite certain files on the filesystem leading to integrity an
Ghost: Server-Side Request Forgery in Image Fetching
CVE-2026-70591
### Impact A Server-Side Request Forgery (SSRF) in Ghost Admin allowed any staff-level user to perform a blind HTTP GET