Incorrect access control in the FirmwareUpgrade function of TOTOLINK T6 4.1.5cu.748_B20211015...
CVE-2026-51733
Incorrect access control in the FirmwareUpgrade function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated att
2026-09-01 归档
今日共收录 1266 条安全情报，包含 424 个 CVE，451 篇安全通告，以及 107 篇研究论文。
← 返回归档列表Incorrect access control in the delVlanCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows...
CVE-2026-51731
Incorrect access control in the delVlanCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attacker
A flaw was found in GDB's STABS debug format parser. The read_member_functions() function in gdb...
CVE-2026-13732
A flaw was found in GDB's STABS debug format parser. The read_member_functions() function in gdb/stabsread.c contains a
A vulnerability was determined in dibo-software diboot 3.8.0. This affects an unknown part of the...
CVE-2026-82818
A vulnerability was determined in dibo-software diboot 3.8.0. This affects an unknown part of the file /api/iam/tenant/r
Incorrect access control in the delWiFiScheduleCfg function of TOTOLINK T6 4.1.5cu.748_B20211015...
CVE-2026-51732
Incorrect access control in the delWiFiScheduleCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated
A malicious virtual function can invoke the certain command handlers in the SMU, causing a denial...
CVE-2023-31308
A malicious virtual function can invoke the certain command handlers in the SMU, causing a denial of service due to out-
Release of an invalid pointer in the AMD kernel mode driver (KMD) could allow a privileged...
CVE-2023-20511
Release of an invalid pointer in the AMD kernel mode driver (KMD) could allow a privileged attacker to create a double f
NLTK before 3.10.3 contains a regular expression denial of service (ReDoS) vulnerability in the...
CVE-2026-80206
NLTK before 3.10.3 contains a regular expression denial of service (ReDoS) vulnerability in the tgrep module. The _tgrep
A user with organization administrator permissions can delete dashboard snapshots belonging to...
CVE-2026-19197
A user with organization administrator permissions can delete dashboard snapshots belonging to other organizations on th
The Grav API plugin (getgrav/grav-plugin-api) before 1.0.18 does not apply the API-key scope cap...
CVE-2026-80204
The Grav API plugin (getgrav/grav-plugin-api) before 1.0.18 does not apply the API-key scope cap in the injectSecurityTa
Kimai before 2.58.0 contains an authentication bypass vulnerability where password reset links...
CVE-2026-80196
Kimai before 2.58.0 contains an authentication bypass vulnerability where password reset links remain valid after passwo
Kimai before 2.54.0 contains a timing oracle vulnerability in TokenAuthenticator that allows...
CVE-2026-80199
Kimai before 2.54.0 contains a timing oracle vulnerability in TokenAuthenticator that allows unauthenticated attackers t
Kimai before 2.53.0 fails to block sensitive User methods in the Twig invoice template sandbox,...
CVE-2026-80201
Kimai before 2.53.0 fails to block sensitive User methods in the Twig invoice template sandbox, allowing admins to call
Kimai before 2.57.0 contains an improper authorization vulnerability in the favorite timesheet...
CVE-2026-80197
Kimai before 2.57.0 contains an improper authorization vulnerability in the favorite timesheet add and remove endpoints
Kimai before 2.56.0 does not enforce team-membership checks in TimesheetVoter::voteOnAttribute(),...
CVE-2026-80202
Kimai before 2.56.0 does not enforce team-membership checks in TimesheetVoter::voteOnAttribute(), which maps permissions
Kimai before 2.64.0 contains a missing authorization vulnerability in the ProjectViewController...
CVE-2026-80194
Kimai before 2.64.0 contains a missing authorization vulnerability in the ProjectViewController export route (report_pro
Socket.IO: Engine.IO WebTransport SID DoS
CVE-2026-59724
### Impact Engine.IO servers with **WebTransport enabled** are vulnerable to a remotely triggerable denial of service.
elFinder: SSRF protection bypass via DNS rebinding in the `fsock_get_contents()` fallback
CVE-2026-81889
[poc.zip](https://github.com/user-attachments/files/30352020/poc.zip) ## Summary elFinder 2.1.69 is vulnerable to a Ser
TYPO3 CMS - Unrestricted File Upload in Form Framework
CVE-2026-15305
### Problem Users were able to upload files with arbitrary MIME types to forms using _FileUpload_ or _ImageUpload_ eleme
A security vulnerability has been detected in Toggl OÜ Toggl Track Extension 4.11.16. This...
CVE-2026-82811
A security vulnerability has been detected in Toggl OÜ Toggl Track Extension 4.11.16. This affects an unknown function o