The MongoDB BI Connector ODBC Driver may write outside the bounds of a fixed-size buffer when an...
CVE-2026-19001
The MongoDB BI Connector ODBC Driver may write outside the bounds of a fixed-size buffer when an application supplies an
2026-08-13 归档
今日共收录 1881 条安全情报，包含 959 个 CVE，493 篇安全通告，以及 113 篇研究论文。
← 返回归档列表IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0...
CVE-2026-11932
IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Ident
CamaleonCMS contains a stored cross-site scripting vulnerability in the cama_contact_form plugin...
CVE-2026-73332
CamaleonCMS contains a stored cross-site scripting vulnerability in the cama_contact_form plugin that allows low-privile
CamaleonCMS contains a stored cross-site scripting vulnerability that allows authenticated low...
CVE-2026-73329
CamaleonCMS contains a stored cross-site scripting vulnerability that allows authenticated low-privileged users to execu
A flaw was found in the cluster-curator-controller component. A local user, by creating a...
CVE-2026-73269
A flaw was found in the cluster-curator-controller component. A local user, by creating a ClusterCurator resource with a
A flaw was found in the cluster-curator-controller component of multicluster engine (MCE). A...
CVE-2026-73268
A flaw was found in the cluster-curator-controller component of multicluster engine (MCE). A tenant with create or updat
Craft CMS versions before 5.10.8 contain a stored cross-site scripting vulnerability in the...
CVE-2026-72787
Craft CMS versions before 5.10.8 contain a stored cross-site scripting vulnerability in the control panel where draft na
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code due to a...
CVE-2026-17083
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflo
ScadaLTS 2.7.8.1 reflects user-supplied input into an HTML response without sanitization. An...
CVE-2026-19657
ScadaLTS 2.7.8.1 reflects user-supplied input into an HTML response without sanitization. An unauthenticated attacker wh
ScadaLTS 2.7.8.1 exposes a server-side method that lacks authorization checks, allowing any...
CVE-2026-19656
ScadaLTS 2.7.8.1 exposes a server-side method that lacks authorization checks, allowing any authenticated user (includin
GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.1.4 and 19...
CVE-2026-19228
GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.1.4 and 19.2 before 19.2.2 that u
compliance-trestle has an URLSecurityValidator SSRF allowlist bypass via IPv4-mapped IPv6 and 0.0.0.0
CVE-2026-52776
### Summary `compliance-trestle` 4.0.3 (latest) ships an `URLSecurityValidator` in `trestle/core/remote/security.py` to
tablib: Stored XSS in the HTML export via unescaped dataset title
CVE-2026-9318
tablib prior to 3.10.0 contains a stored cross-site scripting vulnerability in the HTML export functionality that allows
Firefox browsers
Firefox browsers
Sign in to Cloud
Sign in to Cloud
Sign Up for Free Cloud Tier
Sign Up for Free Cloud Tier
iOS 26.4.2 and iPadOS 26.4.2
iOS 26.4.2 and iPadOS 26.4.2
iOS 18.7.8 and iPadOS 18.7.8
iOS 18.7.8 and iPadOS 18.7.8
iOS 18.7.7 and iPadOS 18.7.7
iOS 18.7.7 and iPadOS 18.7.7
iOS 26.4 and iPadOS 26.4
iOS 26.4 and iPadOS 26.4