In OpenStack Designate before 22.0.2, the mDNS handler performs pool-blind lookups when resolving...
CVE-2026-71194
In OpenStack Designate before 22.0.2, the mDNS handler performs pool-blind lookups when resolving record queries and NOT
2026-08-13 归档
今日共收录 1881 条安全情报，包含 959 个 CVE，493 篇安全通告，以及 113 篇研究论文。
← 返回归档列表Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-15424
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
The web interface of the affected device relies on the HTTP referrer header as part of request...
CVE-2026-15141
The web interface of the affected device relies on the HTTP referrer header as part of request validation. Requests con
PDF::WebKit versions through 1.2 for Perl allow argument injection into wkhtmltopdf via meta tags...
CVE-2026-16770
PDF::WebKit versions through 1.2 for Perl allow argument injection into wkhtmltopdf via meta tags in the source document
PDF::WebKit versions through 1.2 for Perl allow OS command injection via a 2-arg open() of the...
CVE-2026-17431
PDF::WebKit versions through 1.2 for Perl allow OS command injection via a 2-arg open() of the output path in to_pdf and
A flaw was found in insights-client. The component's ServiceAccount is bound to a ClusterRole...
CVE-2026-71846
A flaw was found in insights-client. The component's ServiceAccount is bound to a ClusterRole granting cluster-wide secr
A flaw was found in the `search-v2-operator` component. A user with specific administrative...
CVE-2026-71473
A flaw was found in the `search-v2-operator` component. A user with specific administrative permissions on a managed clu
A flaw was found in search-v2-api. An unauthenticated attacker can exploit this by sending...
CVE-2026-71469
A flaw was found in search-v2-api. An unauthenticated attacker can exploit this by sending requests with unique random b
vinny/views.py: (ModifyEmailNotifications) IDOR: view fetches VinceCommEmail by raw pk from URL...
CVE-2026-18750
vinny/views.py: (ModifyEmailNotifications) IDOR: view fetches VinceCommEmail by raw pk from URL and toggles email_functi
The type=track branch authorises on _is_my_case(t_attach.case) only and never checks...
CVE-2026-18749
The type=track branch authorises on _is_my_case(t_attach.case) only and never checks VinceTrackAttachment.shared. A coor
Any authenticated case participant can fetch any OTHER vendor's CaseStatement + per-vul...
CVE-2026-18744
Any authenticated case participant can fetch any OTHER vendor's CaseStatement + per-vul CaseMemberStatus by supplying th
A data source definition containing an over-length file path setting may cause the MongoDB BI...
CVE-2026-19003
A data source definition containing an over-length file path setting may cause the MongoDB BI Connector ODBC Driver setu
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to buffer overflow in the...
CVE-2026-10534
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to buffer overflow in the IXF IMPORT parser.
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and...
CVE-2026-17485
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and obtain sensitive information
Ansible FreeBSD Jail Connection Plugin: Jail escape via symlink following in put_file (host-side root mv)
CVE-2026-55074
Through version 1.3.0, the jailexec connection plugin's put_file resolved a transfer's destination to a path on the jail
rConfig before 8.2.13 contains a path traversal vulnerability that allows authenticated attackers...
CVE-2026-64826
rConfig before 8.2.13 contains a path traversal vulnerability that allows authenticated attackers to read arbitrary file
MongoDB SQL Schema Builder CLI records its startup configuration to standard output and, when...
CVE-2026-19502
MongoDB SQL Schema Builder CLI records its startup configuration to standard output and, when file logging is enabled, t
IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 (ACS) is vulnerable to downloading...
CVE-2026-13433
IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 (ACS) is vulnerable to downloading unverified product code when c
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (includes...
CVE-2026-18097
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could
IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to zip slip path traversal...
CVE-2026-13105
IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to zip slip path traversal exploit when importing a