FlyEnv before 4.18.0 fails to sanitize HTML from markdown rendering and AI chat content passed to...
CVE-2026-69116
FlyEnv before 4.18.0 fails to sanitize HTML from markdown rendering and AI chat content passed to Vue v-html directives.
2026-08-11 归档
今日共收录 1506 条安全情报，包含 770 个 CVE，368 篇安全通告，以及 83 篇研究论文。
← 返回归档列表An unauthenticated SQL injection vulnerability exists in the web server of TBEA TLogger V2.1.0...
CVE-2025-13294
An unauthenticated SQL injection vulnerability exists in the web server of TBEA TLogger V2.1.0.0B0.0.0.0. Multiple HTTP
TBEA TLogger V2.1.0.0B0.0.0.0 contains an authentication bypass in its web server. After a user...
CVE-2025-15681
TBEA TLogger V2.1.0.0B0.0.0.0 contains an authentication bypass in its web server. After a user has previously authentic
TBEA TLogger V2.1.0.0B0.0.0.0 contains multiple unauthenticated denial-of-service vulnerabilities...
CVE-2025-15683
TBEA TLogger V2.1.0.0B0.0.0.0 contains multiple unauthenticated denial-of-service vulnerabilities in its web server. An
TBEA TLogger V2.1.0.0B0.0.0.0 exposes a UART interface on the device's circuit board without...
CVE-2025-15680
TBEA TLogger V2.1.0.0B0.0.0.0 exposes a UART interface on the device's circuit board without sufficient protection. A ph
Cachet through 2.4.1 contains a server-side template injection vulnerability in incident template...
CVE-2026-69118
Cachet through 2.4.1 contains a server-side template injection vulnerability in incident template rendering that allows
A hard-coded or default root account credential in TBEA TLogger V2.1.0.0B0.0.0.0 allows an...
CVE-2025-13293
A hard-coded or default root account credential in TBEA TLogger V2.1.0.0B0.0.0.0 allows an unauthenticated remote attack
CyberPanel 2.4.3, fixed in commit eca0c3c, contains an authenticated remote code execution...
CVE-2026-71965
CyberPanel 2.4.3, fixed in commit eca0c3c, contains an authenticated remote code execution vulnerability in the remote b
Hugging Face Accelerate through 1.14.0 contains a path traversal vulnerability in...
CVE-2026-69112
Hugging Face Accelerate through 1.14.0 contains a path traversal vulnerability in load_checkpoint_in_model and load_chec
TBEA TLogger V2.1.0.0B0.0.0.0 contains an unauthenticated resource exhaustion vulnerability in...
CVE-2025-15682
TBEA TLogger V2.1.0.0B0.0.0.0 contains an unauthenticated resource exhaustion vulnerability in its web server. An unauth
CyberPanel 2.4.3, fixed in commit eca0c3c, contains an arbitrary file read vulnerability in the...
CVE-2026-71964
CyberPanel 2.4.3, fixed in commit eca0c3c, contains an arbitrary file read vulnerability in the file manager component t
OP-TEE OS through 4.10.0, fixed in commit 8794043, contains a use-after-free vulnerability in the...
CVE-2026-71968
OP-TEE OS through 4.10.0, fixed in commit 8794043, contains a use-after-free vulnerability in the Trusted Application lo
Flowise versions 2.2.4 through 3.1.4 contain a missing authorization vulnerability in the POST ...
CVE-2026-71962
Flowise versions 2.2.4 through 3.1.4 contain a missing authorization vulnerability in the POST /api/v1/openai-assistants
OP-TEE OS through 4.10.0, fixed in commit 7b8b494, contains a buffer underwrite vulnerability in...
CVE-2026-71969
OP-TEE OS through 4.10.0, fixed in commit 7b8b494, contains a buffer underwrite vulnerability in the RSA NOPAD encrypt a
Calling wordexp with WRDE_APPEND in the GNU C Library version 2.0 to version 2.43 can cause the...
CVE-2026-6368
Calling wordexp with WRDE_APPEND in the GNU C Library version 2.0 to version 2.43 can cause the interface to return inva
When expanding paths that begin with a tilde (~) followed by a username, the internal parse_tilde...
CVE-2026-6791
When expanding paths that begin with a tilde (~) followed by a username, the internal parse_tilde function extracts the
OP-TEE OS through 4.10.0, fixed in commit 0aadfc2, contains a null pointer dereference...
CVE-2026-71967
OP-TEE OS through 4.10.0, fixed in commit 0aadfc2, contains a null pointer dereference vulnerability in the Widevine pse
The AWS Systems Manager Parameter Store and Secrets Manager backends in Apache Airflow's Amazon...
CVE-2026-68872
The AWS Systems Manager Parameter Store and Secrets Manager backends in Apache Airflow's Amazon provider resolved a team
The Azure Key Vault secrets backend in Apache Airflow's Microsoft Azure provider resolved a team...
CVE-2026-68870
The Azure Key Vault secrets backend in Apache Airflow's Microsoft Azure provider resolved a team-scoped Connection or Va
A Zip Slip vulnerability in the WebUI ISP Upgrade functionality allows arbitrary file write via a...
CVE-2026-12339
A Zip Slip vulnerability in the WebUI ISP Upgrade functionality allows arbitrary file write via a crafted archive contai