Spring Security Authorization Server's default consent page renders user-controlled values...
CVE-2026-47877
Spring Security Authorization Server's default consent page renders user-controlled values without HTML entity encoding.
今日共收录 918 条安全情报,包含 88 个 CVE,417 篇安全通告,以及 120 篇研究论文。
← 返回归档列表CVE-2026-47877
Spring Security Authorization Server's default consent page renders user-controlled values without HTML entity encoding.
CVE-2026-13415
The CMP WordPress plugin before 4.1.18 does not enforce an option-name allow-list when importing settings via one of it
CVE-2026-47878
DefaultExecutionContextSerializer, used by default in Spring Batch's JDBC job repository, passes Base64-decoded bytes di
CVE-2023-22445
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE-2023-27503
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE-2023-27508
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE-2023-22434
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE-2023-22423
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE-2026-80579
In the Linux kernel, the following vulnerability has been resolved: fbdev: clear fb_info->mode before deleting a videom
CVE-2023-22437
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE-2023-22289
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE-2023-23544
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE-2026-80578
In the Linux kernel, the following vulnerability has been resolved: fbdev: core: Fix pointer desynchronization in fb_io
CVE-2023-22430
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE-2026-80584
In the Linux kernel, the following vulnerability has been resolved: s390/qeth: validate user buffer length in SNMP and
CVE-2026-81491
A flaw has been found in boxpositron with-context-mcp up to 3.0.7. This affects the function ingest_notes/teleport_notes
CVE-2023-22420
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE-2023-22446
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
CVE-2026-80582
In the Linux kernel, the following vulnerability has been resolved: drm/shmem_helper: Check VMA boundaries for PMD mapp
CVE-2023-22433
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused