A Permissive Cross-domain Security Policy with Untrusted Domains in Armoury Crate allows a remote...
CVE-2026-12962
A Permissive Cross-domain Security Policy with Untrusted Domains in Armoury Crate allows a remote user to obtain a local
2026-09-08 归档
今日共收录 1006 条安全情报，包含 268 个 CVE，456 篇安全通告，以及 21 篇研究论文。
← 返回归档列表Exposed Dangerous Method or Function in ASUS Armoury Crate allow a local user to cause a brief...
CVE-2026-75810
Exposed Dangerous Method or Function in ASUS Armoury Crate allow a local user to cause a brief system stall by bypassing
Sensitive Information in Resource Not Removed Before Reuse in ASUS Armoury Crate driver allows a...
CVE-2026-18023
Sensitive Information in Resource Not Removed Before Reuse in ASUS Armoury Crate driver allows a local user to disclose
Exposure of Sensitive System Information to an Unauthorized Control Sphere in Armoury Crate...
CVE-2026-16006
Exposure of Sensitive System Information to an Unauthorized Control Sphere in Armoury Crate driver allows a local user t
SAP Web Dispatcher, Internet Communication Manager and SAP Content Server allows an authenticated...
CVE-2026-76968
SAP Web Dispatcher, Internet Communication Manager and SAP Content Server allows an authenticated low-privileged attacke
Due to a Server-Side Request Forgery (SSRF) vulnerability in SAP Manufacturing Integration and...
CVE-2026-76971
Due to a Server-Side Request Forgery (SSRF) vulnerability in SAP Manufacturing Integration and Intelligence, an attacker
Due to a missing authorization check in Application Server ABAP of SAP NetWeaver and ABAP...
CVE-2026-76963
Due to a missing authorization check in Application Server ABAP of SAP NetWeaver and ABAP Platform, an authenticated att
SAP UI5 does not sufficiently validate the parent frame's origin against the configured allowlist...
CVE-2026-76977
SAP UI5 does not sufficiently validate the parent frame's origin against the configured allowlist. An unauthenticated at
SAP S/4HANA (Manage Bank Chains app) does not perform sufficient authorization checks within...
CVE-2026-76962
SAP S/4HANA (Manage Bank Chains app) does not perform sufficient authorization checks within certain affected functional
SAP S/4HANA Finance (Advanced Payment Management) does not perform sufficient Cross-Site Request...
CVE-2026-76961
SAP S/4HANA Finance (Advanced Payment Management) does not perform sufficient Cross-Site Request Forgery protection on c
SAP NetWeaver Business Client does not perform sufficient validation when processing certain...
CVE-2026-76967
SAP NetWeaver Business Client does not perform sufficient validation when processing certain locally stored data during
SAP S/4HANA Finance (Advanced Payment Management) does not perform sufficient Cross-Site Request...
CVE-2026-76959
SAP S/4HANA Finance (Advanced Payment Management) does not perform sufficient Cross-Site Request Forgery protection on c
SAP S/4HANA Finance (Advanced Payment Management) does not perform sufficient Cross-Site Request...
CVE-2026-76960
SAP S/4HANA Finance (Advanced Payment Management) does not perform sufficient Cross-Site Request Forgery protection on c
SAP NetWeaver Application Server for ABAP and ABAP Platform allows an unauthenticated user to...
CVE-2026-66767
SAP NetWeaver Application Server for ABAP and ABAP Platform allows an unauthenticated user to send a specially crafted p
SAP Integration Suite does not sufficiently validate XML documents accepted from untrusted...
CVE-2026-76958
SAP Integration Suite does not sufficiently validate XML documents accepted from untrusted sources in certain internal c
SAP S/4HANA (Intercompany Matching and Reconciliation) allows a low-privileged authenticated user...
CVE-2026-44766
SAP S/4HANA (Intercompany Matching and Reconciliation) allows a low-privileged authenticated user to inject malicious in
knowns versions before 0.30.0 fail to validate filesystem paths in MCP tool arguments, allowing...
CVE-2026-86439
knowns versions before 0.30.0 fail to validate filesystem paths in MCP tool arguments, allowing attackers to read, creat
knowns versions before 0.30.0 contain an authorization bypass vulnerability where mutating code...
CVE-2026-86544
knowns versions before 0.30.0 contain an authorization bypass vulnerability where mutating code actions are incorrectly
knowns versions before 0.30.0 contain a path traversal vulnerability in the handleCodeReplace()...
CVE-2026-86541
knowns versions before 0.30.0 contain a path traversal vulnerability in the handleCodeReplace() function that allows att
knowns versions before 0.30.0 contain a path traversal vulnerability in the POST /api/templates...
CVE-2026-86538
knowns versions before 0.30.0 contain a path traversal vulnerability in the POST /api/templates/preview endpoint that al