unearth through 0.18.2, fixed in commit 6c78164, contains a path traversal vulnerability in the...
CVE-2026-73030
unearth through 0.18.2, fixed in commit 6c78164, contains a path traversal vulnerability in the is_within_directory func
2026-08-11 归档
今日共收录 1506 条安全情报，包含 770 个 CVE，368 篇安全通告，以及 83 篇研究论文。
← 返回归档列表SQLBot through 1.10.0, fixed in commit c3f40a5, contains a stored cross-site scripting...
CVE-2026-72743
SQLBot through 1.10.0, fixed in commit c3f40a5, contains a stored cross-site scripting vulnerability in the SQText dashb
A flaw was found in libvirt. A local attacker, specifically a process running as the confined ...
CVE-2026-63622
A flaw was found in libvirt. A local attacker, specifically a process running as the confined `swtpm` user, could exploi
A flaw was found in odh-dashboard. This vulnerability allows an attacker, who has compromised the...
CVE-2026-18949
A flaw was found in odh-dashboard. This vulnerability allows an attacker, who has compromised the dashboard's Service Ac
A flaw was found in the RHOAI training-operator. This vulnerability allows a user with standard...
CVE-2026-18982
A flaw was found in the RHOAI training-operator. This vulnerability allows a user with standard edit or admin roles in a
A flaw was found in Feast. An authorization bypass vulnerability exists in the /materialize and ...
CVE-2026-18947
A flaw was found in Feast. An authorization bypass vulnerability exists in the /materialize and /materialize-incremental
A flaw was found in odh-dashboard. An authenticated user of the dashboard can exploit a...
CVE-2026-18950
A flaw was found in odh-dashboard. An authenticated user of the dashboard can exploit a vulnerability related to how Rol
A flaw was found in the Red Hat OpenShift AI (RHOAI) overlay for the training operator. The RHOAI...
CVE-2026-18951
A flaw was found in the Red Hat OpenShift AI (RHOAI) overlay for the training operator. The RHOAI overlay incorrectly ag
A flaw was found in the Feast operator. A malicious tenant could inject arbitrary code into their...
CVE-2026-18942
A flaw was found in the Feast operator. A malicious tenant could inject arbitrary code into their feature repository. Th
A NULL pointer vulnerability has been found in the the shim application of dp.c library. A...
CVE-2026-19411
A NULL pointer vulnerability has been found in the the shim application of dp.c library. A missing NULL pointer could al
A flaw was found in Feast and feast-operator. The default configuration for both the Feast SDK...
CVE-2026-18941
A flaw was found in Feast and feast-operator. The default configuration for both the Feast SDK and the feast-operator is
A flaw was found in the Data Science Pipelines Operator (DSPO). The operator's ClusterRole, which...
CVE-2026-18608
A flaw was found in the Data Science Pipelines Operator (DSPO). The operator's ClusterRole, which defines its permission
A flaw was found in the trustyai-service-operator's LMEvalJob controller. An authenticated user...
CVE-2026-15467
A flaw was found in the trustyai-service-operator's LMEvalJob controller. An authenticated user within the cluster can e
A flaw was found in the Data Science Pipelines Operator (DSPO). A namespace editor can exploit a...
CVE-2026-18617
A flaw was found in the Data Science Pipelines Operator (DSPO). A namespace editor can exploit a vulnerability in the sp
A flaw was found in Data Science Pipelines. A restricted user, or tenant, can exploit an improper...
CVE-2026-18620
A flaw was found in Data Science Pipelines. A restricted user, or tenant, can exploit an improper authorization vulnerab
A flaw was found in ml-metadata. The statically-linked gRPC stack in ml-metadata is outdated,...
CVE-2026-18618
A flaw was found in ml-metadata. The statically-linked gRPC stack in ml-metadata is outdated, making it vulnerable to kn
A flaw was found in the TrustyAI Service (TAS) deployment. This vulnerability allows any pod on...
CVE-2026-15581
A flaw was found in the TrustyAI Service (TAS) deployment. This vulnerability allows any pod on the cluster network to b
A flaw was found in Data Science Pipelines (DSP). An attacker with namespace editor privileges...
CVE-2026-18621
A flaw was found in Data Science Pipelines (DSP). An attacker with namespace editor privileges can bypass security harde
A flaw was found in the Data Science Pipelines Operator. This vulnerability allows an...
CVE-2026-18611
A flaw was found in the Data Science Pipelines Operator. This vulnerability allows an unauthenticated attacker to derive
CyberPanel 2.4.3, fixed in commit eca0c3c, contains an authenticated command injection...
CVE-2026-71966
CyberPanel 2.4.3, fixed in commit eca0c3c, contains an authenticated command injection vulnerability in the remote backu