A vulnerability in the web-based management interface of AOS-CX could allow an authenticated...
CVE-2026-73757
A vulnerability in the web-based management interface of AOS-CX could allow an authenticated remote attacker to conduct
2026-09-02 归档
今日共收录 1494 条安全情报，包含 600 个 CVE，479 篇安全通告，以及 120 篇研究论文。
← 返回归档列表A vulnerability exists in a management component that could allow an unauthenticated adjacent...
CVE-2026-73763
A vulnerability exists in a management component that could allow an unauthenticated adjacent attacker to execute arbitr
An authentication vulnerability exists in the AOS-CX management interface and API that may allow...
CVE-2026-73771
An authentication vulnerability exists in the AOS-CX management interface and API that may allow improper authentication
A privilege escalation vulnerability exists in the API endpoint of AOS-CX. Successful...
CVE-2026-73758
A privilege escalation vulnerability exists in the API endpoint of AOS-CX. Successful exploitation could allow an authen
A vulnerability has been identified in the API endpoint of AOS-CX that could allow a remote actor...
CVE-2026-73762
A vulnerability has been identified in the API endpoint of AOS-CX that could allow a remote actor to circumvent existing
A vulnerability in an API endpoint of AOS-CX could allow a remote unauthenticated attacker to...
CVE-2026-73756
A vulnerability in an API endpoint of AOS-CX could allow a remote unauthenticated attacker to obtain sensitive informati
TYPO3 CMS - Broken Access Control in Backend and Install Tool
CVE-2026-19418
### Problem The referrer enforcement introduced with [TYPO3-CORE-SA-2020-006](https://news.typo3.com/security/advisory/t
Filament: Multi-factor authentication (app) codes can still be used after a newer code has been used
CVE-2026-84306
A flaw in the handling of one-time codes for app-based multi-factor authentication allows a previously issued code to be
Filament: Password validity disclosure for accounts denied panel access on login page
CVE-2026-84307
When multi-factor authentication is enabled, the login page presents the multi-factor challenge before evaluating `canAc
Filament: Multi-factor authentication (app) can be bypassed when recovery codes are enabled
CVE-2026-77567
A flaw in the challenge handling for app-based multi-factor authentication allows the second factor to be bypassed. This
pypdf: Possible long runtimes/large memory usage when retrieving outlines
CVE-2026-84310
### Impact An attacker who uses this vulnerability can craft a PDF which leads to long runtimes and large memory consum
pypdf: Possible long runtimes/large memory usage when extracting XForm objects
CVE-2026-84311
### Impact An attacker who uses this vulnerability can craft a PDF which leads to long runtimes and large memory consum
pypdf: Possible infinite loop for TreeObject.insert_child
CVE-2026-84309
### Impact An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires a (us
sqlparse: Reindentation of tuple lists causes near-cap quadratic CPU consumption
CVE-2026-84305
### Summary When SQL is formatted with reindentation enabled, `ReindentFilter` repeatedly rebuilds prefixes of the curr
ApostropheCMS: Stored XSS via SVG SMIL URI-list scheme-policy bypass
CVE-2026-84371
### Summary When SVG animation is allowed, `attributeName="href"` makes `values` a list of URL destinations. `sanitize-h
NLTK: Uncontrolled search path when invoking the Graphviz 'dot' binary
CVE-2026-78680
Two NLTK sites executed the Graphviz `dot` program by bare name, so process creation resolved it via the search path — a
Django REST framework: Potential bypass of Django `DATA_UPLOAD_MAX_MEMORY_SIZE` when parsing oversized JSON and urlencoded request bodies via DRF `request.data`
CVE-2026-73228
## Summary While investigating Django REST Framework's request parsing behavior, I identified that DRF's high-level `re
Django REST framework: AdminRenderer may disclose GET-protected data when rendering invalid write requests
CVE-2026-73229
Summary AdminRenderer may disclose data that would normally be protected by GET permissions when rendering a 400 Bad Re
nanoid: Integer Overflow or Wraparound
CVE-2026-73086
### Summary An integer overflow in `nanoid(size)` permanently corrupts the process-wide CSPRNG pool, causing all subseq
Appium: Reflected XSS / arbitrary JS in @appium/base-driver /test/guinea-pig* routes
CVE-2026-58191
## Summary Appium's base-driver mounts the built-in `/test/guinea-pig`, `/test/guinea-pig-scrollable` and `/test/guinea