A flaw was found in Red Hat Quay. An administrator of any repository, by knowing or guessing a...
CVE-2026-74242
A flaw was found in Red Hat Quay. An administrator of any repository, by knowing or guessing a target notification's Uni
2026-08-15 归档
今日共收录 1312 条安全情报，包含 424 个 CVE，492 篇安全通告，以及 116 篇研究论文。
← 返回归档列表Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-18932
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Laravel Socialite's Facebook provider contains an authentication bypass vulnerability that allows...
CVE-2026-73683
Laravel Socialite's Facebook provider contains an authentication bypass vulnerability that allows unauthenticated attack
Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in...
CVE-2026-69414
Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicl
s2n-quic has excessive memory allocation
CVE-2026-10740
s2n-quic is a Rust implementation of the QUIC protocol. An unauthenticated user can attempt to exhaust server memory on
Token Optimizer MCP: Unauthenticated Path Traversal in Dashboard Session Log API Endpoints
CVE-2026-55156
# Unauthenticated Path Traversal in Dashboard Session Log API Endpoints | Field | Value | | ----------------
Token Optimizer MCP: OS command injection in smart_user via username in get-user-info
CVE-2026-55157
### Summary `token-optimizer-mcp` is vulnerable to OS command injection in the `smart_user` tool. The `get-user-info`
Joomla Extension - icagenda.com - CSRF on frontend registration actions in iCagenda < 2.0.0-4.0...
CVE-2026-67366
Joomla Extension - icagenda.com - CSRF on frontend registration actions in iCagenda < 2.0.0-4.0.11 - Multiple state chan
Joomla Extension - icagenda.com - ACL bypass allowing arbitrary user enumeration < 2.0.0-4.0.11 -...
CVE-2026-71570
Joomla Extension - icagenda.com - ACL bypass allowing arbitrary user enumeration < 2.0.0-4.0.11 - A backend operator gra
Semaphore versions prior to 2.18.20 contain an OS command injection (argument injection)...
CVE-2026-73682
Semaphore versions prior to 2.18.20 contain an OS command injection (argument injection) vulnerability in the repository
Joomla Extension - icagenda.com - Authenticated SQL injection via unescaped numeric filter in...
CVE-2026-71571
Joomla Extension - icagenda.com - Authenticated SQL injection via unescaped numeric filter in iCagenda < 2.0.0-4.0.11 -
Cockpit CMS 2.14.0 and prior contains a command injection vulnerability in the FFmpeg integration...
CVE-2026-73680
Cockpit CMS 2.14.0 and prior contains a command injection vulnerability in the FFmpeg integration that allows authentica
Use of hard-coded cryptographic key vulnerability in Johnson Controls Airwall allows :...
CVE-2026-64887
Use of hard-coded cryptographic key vulnerability in Johnson Controls Airwall allows : Cryptanalytic Attack. This issue
Improper neutralization of special elements used in a command ('command injection') in Microsoft...
CVE-2026-50523
Improper neutralization of special elements used in a command ('command injection') in Microsoft PowerShell allows an au
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-39925
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass...
CVE-2026-17227
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due t
PAX Technology Q80 Application Installer Signature Verification Bypass Remote Code Execution...
CVE-2026-19910
PAX Technology Q80 Application Installer Signature Verification Bypass Remote Code Execution Vulnerability. This vulnera
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to delete...
CVE-2026-18178
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to delete arbitrary files due to path
External control of file name or path vulnerability in Johnson Controls Airwall allows : File...
CVE-2026-34492
External control of file name or path vulnerability in Johnson Controls Airwall allows : File Manipulation. This issue
Cwe-327 Use of a Broken or Risky Cryptographic Algorithm vulnerability in Johnson Controls TL280...
CVE-2026-27871
Cwe-327 Use of a Broken or Risky Cryptographic Algorithm vulnerability in Johnson Controls TL280 allows Cryptanalytic At