Grav: Unauthenticated denial of service via unbounded image derivative dimensions
CVE-2026-53653
### Summary An unauthenticated visitor exhausts server memory and CPU by requesting an image with oversized resize dimen
2026-08-15 归档
今日共收录 1312 条安全情报，包含 424 个 CVE，492 篇安全通告，以及 116 篇研究论文。
← 返回归档列表LimeSurvey Community Edition 7.0.5 contains an authenticated reflected cross-site scripting...
CVE-2026-63361
LimeSurvey Community Edition 7.0.5 contains an authenticated reflected cross-site scripting vulnerability in the HTML ed
A security flaw has been discovered in TOTOLINK A800R 4.1.2cu.5137_B20200730. Affected is the...
CVE-2026-19847
A security flaw has been discovered in TOTOLINK A800R 4.1.2cu.5137_B20200730. Affected is the function setWiFiWpsConfig
A vulnerability was determined in TOTOLINK A800R 4.1.2cu.5137_B20200730. This affects the...
CVE-2026-19845
A vulnerability was determined in TOTOLINK A800R 4.1.2cu.5137_B20200730. This affects the function setStaticDhcpConfig o
An issue was identified in which CSRF tokens were generated using a predictable method,...
CVE-2026-19636
An issue was identified in which CSRF tokens were generated using a predictable method, potentially reducing their effec
A local privilege escalation vulnerability exists in Security Center. An attacker with write...
CVE-2026-19635
A local privilege escalation vulnerability exists in Security Center. An attacker with write access to a specific config
An improper access control vulnerability exists where an authenticated non-administrative...
CVE-2026-19639
An improper access control vulnerability exists where an authenticated non-administrative application user could potenti
A SQL injection vulnerability exists in Security Center that could allow an authenticated...
CVE-2026-19631
A SQL injection vulnerability exists in Security Center that could allow an authenticated administrator to execute arbit
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-73107
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
An input validation vulnerability exists in Security Center's file upload handling, where...
CVE-2026-19679
An input validation vulnerability exists in Security Center's file upload handling, where insufficient sanitization of u
A privilege escalation vulnerability exists in Tenable Security Center that allows a user with ...
CVE-2026-19629
A privilege escalation vulnerability exists in Tenable Security Center that allows a user with "Security Manager" role a
A SQL injection vulnerability exists in Security Center that could allow an attacker to access...
CVE-2026-19680
A SQL injection vulnerability exists in Security Center that could allow an attacker to access unauthorized data from th
Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Unrestricted Upload of...
CVE-2026-66271
Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Unrestricted Upload of File with Dangerous Type
A flaw has been found in TRENDNET TEW-813DRU 1.01b01. Impacted is an unknown function of the file...
CVE-2026-19841
A flaw has been found in TRENDNET TEW-813DRU 1.01b01. Impacted is an unknown function of the file /etc/vsftpd.conf of th
Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Improper Deserialization...
CVE-2026-63701
Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Improper Deserialization of Untrusted Data vuln
A command injection vulnerability exists in Tenable Security Center. An authenticated...
CVE-2026-19628
A command injection vulnerability exists in Tenable Security Center. An authenticated administrator could modify applica
Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain a Use of Hard-coded...
CVE-2026-63702
Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain a Use of Hard-coded Credentials vulnerability. A l
Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain a Missing Authentication...
CVE-2026-66272
Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain a Missing Authentication for Critical Function vul
Nozomi Networks Labs identified a CWE-22: Improper Limitation of a Pathname to a Restricted...
CVE-2026-57471
Nozomi Networks Labs identified a CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2023-7347
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.