FileRun up to and including version 2026.2.0 contains an OS command injection vulnerability that...
CVE-2026-14863
FileRun up to and including version 2026.2.0 contains an OS command injection vulnerability that allows authenticated at
2026-08-12 归档
今日共收录 1910 条安全情报，包含 1065 个 CVE，437 篇安全通告，以及 97 篇研究论文。
← 返回归档列表In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of...
CVE-2026-73282
In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of remote-forwarding operat
In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to...
CVE-2026-73281
In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, includi
Snipe-IT before 8.6.0 contains an authorization bypass (insecure direct object reference) in the...
CVE-2026-19579
Snipe-IT before 8.6.0 contains an authorization bypass (insecure direct object reference) in the asset checkout-request
In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be...
CVE-2026-73283
In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwar
A flaw was found in acm-search-v2-api-rhel9. When the `getFederationConfig` function refreshes...
CVE-2026-71468
A flaw was found in acm-search-v2-api-rhel9. When the `getFederationConfig` function refreshes its cache, it improperly
Bash-it 3.2.0 contains a terminal escape sequence injection vulnerability in the barbuk theme's...
CVE-2026-73036
Bash-it 3.2.0 contains a terminal escape sequence injection vulnerability in the barbuk theme's Python virtualenv prompt
A flaw was found in insights-client. The setDefault() function logs the value of every...
CVE-2026-71845
A flaw was found in insights-client. The setDefault() function logs the value of every environment variable it processes
An unauthenticated remote code execution vulnerability was identified in GMS 9.5.1 (Build 9510...
CVE-2026-66145
An unauthenticated remote code execution vulnerability was identified in GMS 9.5.1 (Build 9510.1044) and earlier version
A flaw was found in insights-client. A compromised managed cluster, referred to as a 'spoke', can...
CVE-2026-71475
A flaw was found in insights-client. A compromised managed cluster, referred to as a 'spoke', can inject unencoded data
A flaw was found in search-v2-api. The authentication middleware in the affected component...
CVE-2026-71467
A flaw was found in search-v2-api. The authentication middleware in the affected component unconditionally skips authent
The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for...
CVE-2026-19091
The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to
The InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress is vulnerable to Remote...
CVE-2026-13457
The InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress is vulnerable to Remote Code Execution in all
A vulnerability was found in Open5GS up to 2.7.1. This affects the function...
CVE-2024-14042
A vulnerability was found in Open5GS up to 2.7.1. This affects the function hss_ogs_diam_s6a_air_cb/hss_ogs_diam_s6a_ulr
An issue in MongoDB Server's query execution engine could allow an authenticated user with read...
CVE-2026-18711
An issue in MongoDB Server's query execution engine could allow an authenticated user with read and write privileges to
DSPy 3.3.0b1 contains a file exfiltration vulnerability in the Image and Audio output field...
CVE-2026-72742
DSPy 3.3.0b1 contains a file exfiltration vulnerability in the Image and Audio output field adapters that allows attacke
An issue in MongoDB Server's $graphLookup aggregation stage could allow an authenticated user...
CVE-2026-18706
An issue in MongoDB Server's $graphLookup aggregation stage could allow an authenticated user able to issue aggregation
OpenIM Server v3.8.3 contains a missing authorization vulnerability that allows any authenticated...
CVE-2026-69115
OpenIM Server v3.8.3 contains a missing authorization vulnerability that allows any authenticated user to access admin-o
An issue in MongoDB Server's Queryable Encryption maintenance operations could allow an...
CVE-2026-18712
An issue in MongoDB Server's Queryable Encryption maintenance operations could allow an authenticated user with privileg
Taubyte Tau v1.1.10 contains a missing authorization vulnerability in the services/auth HTTP...
CVE-2026-69119
Taubyte Tau v1.1.10 contains a missing authorization vulnerability in the services/auth HTTP service that allows any aut