Consul Community Edition and Consul Enterprise 1.19.1 through 2.0.2 did not enforce the {{session...
CVE-2026-19016
Consul Community Edition and Consul Enterprise 1.19.1 through 2.0.2 did not enforce the {{session:write}} ACL permission
2026-08-08 归档
今日共收录 1332 条安全情报，包含 443 个 CVE，483 篇安全通告，以及 115 篇研究论文。
← 返回归档列表A security flaw has been discovered in SourceCodester Simple Doctors Appointment System 1.0. This...
CVE-2026-19231
A security flaw has been discovered in SourceCodester Simple Doctors Appointment System 1.0. This vulnerability affects
Consul Community Edition and Consul Enterprise 1.13.0 through 2.0.2 are vulnerable to an...
CVE-2026-15972
Consul Community Edition and Consul Enterprise 1.13.0 through 2.0.2 are vulnerable to an unauthenticated denial of servi
Broadcast control frames can disconnect multiple aircraft simultaneously leading to delayed...
CVE-2025-71411
Broadcast control frames can disconnect multiple aircraft simultaneously leading to delayed clearances and air traffic c
Grav CMS's scheduler-webhook plugin contains an authentication bypass in the webhook token check....
CVE-2026-11430
Grav CMS's scheduler-webhook plugin contains an authentication bypass in the webhook token check. When the webhook featu
A vulnerability was identified in SourceCodester Photo Share Website 1.0. This affects an unknown...
CVE-2026-19230
A vulnerability was identified in SourceCodester Photo Share Website 1.0. This affects an unknown part of the file /soci
Consul Community Edition and Consul Enterprise 1.3.0 through 2.0.2 are vulnerable to an...
CVE-2026-19113
Consul Community Edition and Consul Enterprise 1.3.0 through 2.0.2 are vulnerable to an unauthenticated denial of servic
In sol commit 373d848 (2024-12-12), the broker does not fully release resources when handling...
CVE-2025-63235
In sol commit 373d848 (2024-12-12), the broker does not fully release resources when handling malformed or duplicate CON
pypdf: Possible large memory usage for large /ToUnicode streams
CVE-2026-71870
### Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory consumption. This requir
pypdf: Possible long runtimes/large memory usage for large CID font width ranges
CVE-2026-71852
### Impact An attacker who uses this vulnerability can craft a PDF which leads to long runtimes and large memory consum
Hono: `memo()` retains SSR output across requests, leading to cross-user data disclosure
CVE-2026-71850
### Summary `memo()` from `hono/jsx` retains the result of a server-side render and reuses it for later renders with co
Hono: Proxy Helper does not remove response headers listed in the `Connection` header
CVE-2026-71849
### Summary The Proxy Helper (`hono/proxy`) does not remove response headers named by the origin's `Connection` header.
Hono: Algorithmic Complexity DoS in Language Middleware
CVE-2026-71848
### Summary The `languageDetector` middleware is vulnerable to algorithmic complexity denial of service when processing
Ruby JSON: JSON::ResumableParser#partial_value dereferences a freed input buffer and crashes on truncated duplicate-key streams
CVE-2026-71847
### Summary Ruby's JSON native C extension clears the consumed `JSON::ResumableParser` input buffer but leaves `state.s
A vulnerability was determined in SourceCodester Online Clothing Store. Affected by this issue is...
CVE-2026-19229
A vulnerability was determined in SourceCodester Online Clothing Store. Affected by this issue is some unknown functiona
An SQL injection vulnerability in Plesk Obsidian up to 18.0.80 for Linux and Windows allows an...
CVE-2026-64636
An SQL injection vulnerability in Plesk Obsidian up to 18.0.80 for Linux and Windows allows an authenticated user to rea
A vulnerability was identified in WonderTrader up to 0.9.9. Affected is the function _undone_qty...
CVE-2026-19213
A vulnerability was identified in WonderTrader up to 0.9.9. Affected is the function _undone_qty in the library src/WtCo
A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote...
CVE-2026-20338
A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condi
A vulnerability in the XAR file format parser of ClamAV could allow an unauthenticated, remote...
CVE-2026-20348
A vulnerability in the XAR file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS c
A vulnerability in the Mach-O file format parser of ClamAV could allow an unauthenticated, remote...
CVE-2026-20347
A vulnerability in the Mach-O file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a Do