Google::Auth versions before 0.09 for Perl allow server side request forgery and credential...
CVE-2026-66901
Google::Auth versions before 0.09 for Perl allow server side request forgery and credential exfiltration via unvalidated
2026-08-05 归档
今日共收录 766 条安全情报，包含 0 个 CVE，370 篇安全通告，以及 100 篇研究论文。
← 返回归档列表Google::Auth versions before 0.06 for Perl run a command named in an external_account credentials...
CVE-2026-66902
Google::Auth versions before 0.06 for Perl run a command named in an external_account credentials JSON via an ungated sy
Incorrect access control in the Executive Services dynamic application start path component of...
CVE-2026-67979
Incorrect access control in the Executive Services dynamic application start path component of NASA cFS v7.0.1 allows at
A flaw has been found in H3C NX15 V100R017. The impacted element is the function esps.ipv6.wan of...
CVE-2026-18812
A flaw has been found in H3C NX15 V100R017. The impacted element is the function esps.ipv6.wan of the file /api/esps. Ex
An issue in Vim Project v9.2.0389 and earlier allows a local attacker to execute arbitrary code...
CVE-2026-51401
An issue in Vim Project v9.2.0389 and earlier allows a local attacker to execute arbitrary code via the vms_fixfilename(
A vulnerability was detected in H3C NX15 V100R017. The affected element is the function Add of...
CVE-2026-18811
A vulnerability was detected in H3C NX15 V100R017. The affected element is the function Add of the file /api/esps. Perfo
An issue in Vim Project v9.2.0389 and earlier allows a local attacker to execute arbitrary code...
CVE-2026-51400
An issue in Vim Project v9.2.0389 and earlier allows a local attacker to execute arbitrary code via the vms_fixfilename(
A vulnerability has been found in H3C NX15 V100R017. This affects the function delete of the file...
CVE-2026-18813
A vulnerability has been found in H3C NX15 V100R017. This affects the function delete of the file /api/esps. The manipul
An uncontrolled search path element in Kiro CLI before version 2.10.0 on Windows might allow a...
CVE-2026-18657
An uncontrolled search path element in Kiro CLI before version 2.10.0 on Windows might allow a remote unauthenticated ac
An improper certificate validation vulnerability was reported in multiple Lenovo XClarity...
CVE-2026-16792
An improper certificate validation vulnerability was reported in multiple Lenovo XClarity Orchestrator (LXCO) 2.2.0 micr
An uncontrolled search path element in Kiro IDE before version 1.0.228 on Windows might allow a...
CVE-2026-18656
An uncontrolled search path element in Kiro IDE before version 1.0.228 on Windows might allow a remote unauthenticated a
A temporary file creation vulnerability in the Linux version of Lenovo XClarity Essentials OneCLI...
CVE-2026-16791
A temporary file creation vulnerability in the Linux version of Lenovo XClarity Essentials OneCLI 5.5.0 and below could
An improper neutralization of special elements used in an operating system command vulnerability...
CVE-2026-16793
An improper neutralization of special elements used in an operating system command vulnerability was reported in Lenovo
A security vulnerability has been detected in H3C NX15 V100R017. Impacted is an unknown function...
CVE-2026-18810
A security vulnerability has been detected in H3C NX15 V100R017. Impacted is an unknown function of the file /api/wizard
Atals-Livre contains a SQL injection vulnerability that allows attackers to manipulate database...
CVE-2026-69704
Atals-Livre contains a SQL injection vulnerability that allows attackers to manipulate database queries by passing unsan
SnailJob 1.7.0 contains a denial of service vulnerability in the FuryUtil.deserialize helper that...
CVE-2026-69702
SnailJob 1.7.0 contains a denial of service vulnerability in the FuryUtil.deserialize helper that allows authenticated a
SNOMED International Snowstorm contains a reflected XSS vulnerability within the "Web Route"...
CVE-2026-66300
SNOMED International Snowstorm contains a reflected XSS vulnerability within the "Web Route" redirection functionality.
A flaw was found in SSSD. The extract_authtok_v1() function in the PAM responder does not...
CVE-2026-68743
A flaw was found in SSSD. The extract_authtok_v1() function in the PAM responder does not validate the auth_token_length
Ghost: Blind Password Hash Disclosure in Ghost Admin API
CVE-2026-70590
### Impact Any staff-level user was able to leak the hashed passwords of other staff users. An offline password-guessin
Ghost: Private IP filtering bypass to make server-side requests to internal services
CVE-2026-53944
### Impact When making an external request, it is possible to bypass the IP filter that ensures the request isn't going