Admidio before 5.0.12 fails to sanitize album names in the photo ZIP download functionality,...
CVE-2026-82656
Admidio before 5.0.12 fails to sanitize album names in the photo ZIP download functionality, allowing authenticated user
2026-08-31 归档
今日共收录 884 条安全情报，包含 132 个 CVE，408 篇安全通告，以及 86 篇研究论文。
← 返回归档列表Admidio versions before 5.0.12 contain a broken access control vulnerability in profile_function...
CVE-2026-82658
Admidio versions before 5.0.12 contain a broken access control vulnerability in profile_function.php that allows authent
WWBN AVideo contains a cross-site request forgery vulnerability in sendEmail.json.php that allows...
CVE-2026-82647
WWBN AVideo contains a cross-site request forgery vulnerability in sendEmail.json.php that allows authenticated administ
SiYuan before v3.8.1 fails to properly escape block name, alias, and memo fields in hint,...
CVE-2026-82654
SiYuan before v3.8.1 fails to properly escape block name, alias, and memo fields in hint, backlink, and breadcrumb rende
WWBN AVideo contains an unauthenticated credential submission vulnerability in plugin/Live/api...
CVE-2026-82643
WWBN AVideo contains an unauthenticated credential submission vulnerability in plugin/Live/api/preauthorize.json.php tha
Admidio before 5.0.12 contains a blind SQL injection vulnerability in the relation_type_list...
CVE-2026-82655
Admidio before 5.0.12 contains a blind SQL injection vulnerability in the relation_type_list parameter of lists_show.php
WWBN AVideo (current e01e41ecc and earlier) contains a brute-force rate limiting bypass in...
CVE-2026-82644
WWBN AVideo (current e01e41ecc and earlier) contains a brute-force rate limiting bypass in enforceRateLimit(), which pro
A vulnerability was found in Linux Foundation Magma 1.9.0. The affected element is an unknown...
CVE-2026-82547
A vulnerability was found in Linux Foundation Magma 1.9.0. The affected element is an unknown function of the file tasks
keploy versions 3.1.0 through 3.6.25 bind the agent control-plane HTTP server to all interfaces...
CVE-2026-82641
keploy versions 3.1.0 through 3.6.25 bind the agent control-plane HTTP server to all interfaces without authentication,
A vulnerability was determined in Linux Foundation Magma 1.9.0. The impacted element is an...
CVE-2026-82548
A vulnerability was determined in Linux Foundation Magma 1.9.0. The impacted element is an unknown function of the compo
A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Impacted is an...
CVE-2026-82545
A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the fi
A vulnerability was detected in vastsa FileCodeBox up to 2.3. This vulnerability affects the...
CVE-2026-82543
A vulnerability was detected in vastsa FileCodeBox up to 2.3. This vulnerability affects the function update_file_usage
Qubes OS before qubes-core-dom0-linux 4.3.22 allows OS command injection during a qvm-copy-to-vm...
CVE-2026-82636
Qubes OS before qubes-core-dom0-linux 4.3.22 allows OS command injection during a qvm-copy-to-vm call from dom0 to an at
Frappe Framework development builds contain an authorization flaw in the render_jinja_template...
CVE-2026-82634
Frappe Framework development builds contain an authorization flaw in the render_jinja_template endpoint that allows low-
A flaw has been found in wger-project wger up to 2.6.0-alpha2. This issue affects the function...
CVE-2026-82544
A flaw has been found in wger-project wger up to 2.6.0-alpha2. This issue affects the function reset_user_password of th
NextChat versions from 2.15.8 through 2.16.1 contain an improper URL validation vulnerability in...
CVE-2026-82639
NextChat versions from 2.15.8 through 2.16.1 contain an improper URL validation vulnerability in the proxy endpoint that
A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. Affected is an...
CVE-2026-82540
A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the fi
A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. Affected by...
CVE-2026-82541
A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an
A vulnerability was identified in Beetel 450TC3 01.00.00_01. This vulnerability affects unknown...
CVE-2026-82488
A vulnerability was identified in Beetel 450TC3 01.00.00_01. This vulnerability affects unknown code of the component Us
A vulnerability was found in SiteServer SSCMS 7.4.0. Affected by this issue is some unknown...
CVE-2026-82486
A vulnerability was found in SiteServer SSCMS 7.4.0. Affected by this issue is some unknown functionality of the compone