A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected...
CVE-2026-75077
A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected by this issue is some u
2026-08-18 归档
今日共收录 810 条安全情报，包含 28 个 CVE，396 篇安全通告，以及 98 篇研究论文。
← 返回归档列表Mattermost Desktop App versions <=6.2 6.2.2.0 fail to redact the pre-auth secret when generating...
CVE-2026-75587
Mattermost Desktop App versions <=6.2 6.2.2.0 fail to redact the pre-auth secret when generating a diagnostics report, w
Mattermost versions 11.7.x <= 11.7.6, 10.11.x <= 10.11.21, 11.8.x <= 11.8.3 fail to validate...
CVE-2026-9816
Mattermost versions 11.7.x <= 11.7.6, 10.11.x <= 10.11.21, 11.8.x <= 11.8.3 fail to validate BoardMember.Scheme* fields
Mattermost versions 10.11.x <= 10.11.20, 11.7.x <= 11.7.5 Mattermost fails to remove thread...
CVE-2026-9693
Mattermost versions 10.11.x <= 10.11.20, 11.7.x <= 11.7.5 Mattermost fails to remove thread membership records when a us
A vulnerability was detected in Webkul Bagisto up to 2.4.4. Impacted is an unknown function of...
CVE-2026-75081
A vulnerability was detected in Webkul Bagisto up to 2.4.4. Impacted is an unknown function of the file /customer/accoun
An issue in O2OA v.10.0.2 allows a local attacker to execute arbitrary code via the the sandbox...
CVE-2026-67961
An issue in O2OA v.10.0.2 allows a local attacker to execute arbitrary code via the the sandbox mechanism of the Invoke
A Server-Side Template Injection (SSTI) vulnerability in the Velocity template engine...
CVE-2026-38165
A Server-Side Template Injection (SSTI) vulnerability in the Velocity template engine configuration of xdocreport v0.9.2
An issue in Halo 2.25.4 allows a remote attacker to execute arbitrary code via the PluginEndpoint...
CVE-2026-67919
An issue in Halo 2.25.4 allows a remote attacker to execute arbitrary code via the PluginEndpoint.java, installFromUri m
Mattermost versions 11.7.x <= 11.7.6, 10.11.x <= 10.11.21, 11.8.x <= 11.8.3 fail to enforce...
CVE-2026-9859
Mattermost versions 11.7.x <= 11.7.6, 10.11.x <= 10.11.21, 11.8.x <= 11.8.3 fail to enforce PermissionManageBoardRoles o
SQL Injection vulnerability in Qcms v.6.0.6 allows a remote attacker to execute arbitrary code
CVE-2026-67854
SQL Injection vulnerability in Qcms v.6.0.6 allows a remote attacker to execute arbitrary code
An issue in PbootCMS v.3.2.15 allows an attacker to execute arbitrary code via the...
CVE-2026-67960
An issue in PbootCMS v.3.2.15 allows an attacker to execute arbitrary code via the MemberController.php, UserController.
A heap-based out-of-bounds write vulnerability exists in S2OPC 1.7.3 in server-side EventFilter...
CVE-2026-67868
A heap-based out-of-bounds write vulnerability exists in S2OPC 1.7.3 in server-side EventFilter handling during CreateMo
Directory Traversal vulnerability in hermes-studio v.0.6.26 allows a remote attacker to obtain...
CVE-2026-67918
Directory Traversal vulnerability in hermes-studio v.0.6.26 allows a remote attacker to obtain sensitive information via
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-54385
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Mahara before 25.04.5 and 26.04.0 is vulnerable to unauthorized access to internal accounts via...
CVE-2026-42163
Mahara before 25.04.5 and 26.04.0 is vulnerable to unauthorized access to internal accounts via Learning Tools Interoper
An issue in Trueview T18061 WiFi 3MP Robot Pan-Tilt Security Camera Version 1.0 allows a...
CVE-2026-51977
An issue in Trueview T18061 WiFi 3MP Robot Pan-Tilt Security Camera Version 1.0 allows a physically proximate attacker t
This vulnerability only affects Grafana stacks configured with multiple organizations; single...
CVE-2026-11817
This vulnerability only affects Grafana stacks configured with multiple organizations; single-organization deployments a
Mattermost versions 11.7.x <= 11.7.6, 10.11.x <= 10.11.21, 11.8.x <= 11.8.3 fails to validate...
CVE-2026-10080
Mattermost versions 11.7.x <= 11.7.6, 10.11.x <= 10.11.21, 11.8.x <= 11.8.3 fails to validate WebSocket command field ty
MLflow: CreateModelVersion source validation does not check READ permission on referenced run_id
CVE-2026-69148
### Summary The `_validate_source_run` and `_validate_source_model` functions in `mlflow/server/handlers.py` verify tha
MLflow: LogInputs endpoint bypasses per-run UPDATE authorization in basic-auth
CVE-2026-69146
### Summary When MLflow is deployed with the built-in basic-auth plugin (`--app-name basic-auth`), any authenticated us