A vulnerability has been found in D-Link DIR-822A A_101. Affected is the function...
CVE-2026-86510
A vulnerability has been found in D-Link DIR-822A A_101. Affected is the function tunnel_set_params of the component L2T
2026-09-08 归档
今日共收录 1006 条安全情报，包含 268 个 CVE，456 篇安全通告，以及 21 篇研究论文。
← 返回归档列表@sap/cds-mtxs NPM library does not perform sufficient checks on certain functionality used in...
CVE-2026-76969
@sap/cds-mtxs NPM library does not perform sufficient checks on certain functionality used in multitenant CAP applicatio
SAP GUI for Java does not correctly enforce the trust level policy for certain functions invoked...
CVE-2026-66768
SAP GUI for Java does not correctly enforce the trust level policy for certain functions invoked from a connected backen
SAP NetWeaver Message Server does not sufficiently validate the authenticity of internal...
CVE-2026-58240
SAP NetWeaver Message Server does not sufficiently validate the authenticity of internal application server components d
SAP Process Integration (SOAP Adapter) allows a privileged user to send specially crafted...
CVE-2026-58234
SAP Process Integration (SOAP Adapter) allows a privileged user to send specially crafted requests containing deeply nes
A memory safety vulnerability exists in the Extended Passport Protocol (EPP) processing library....
CVE-2026-44756
A memory safety vulnerability exists in the Extended Passport Protocol (EPP) processing library. Under specific conditio
knowns versions before 0.30.0 serve the management API without authentication on all network...
CVE-2026-86543
knowns versions before 0.30.0 serve the management API without authentication on all network interfaces by default, with
knowns through 0.33.0 contains a server-side request forgery vulnerability in the POST /api...
CVE-2026-86539
knowns through 0.33.0 contains a server-side request forgery vulnerability in the POST /api/embedding-models/test endpoi
knowns before 0.30.0 fails to validate import names in the import routes, allowing...
CVE-2026-86542
knowns before 0.30.0 fails to validate import names in the import routes, allowing unauthenticated attackers to write fi
Lara Dashboard before 1.3.2 fails to authorize the MarketplaceModuleBrowser installModule...
CVE-2026-86438
Lara Dashboard before 1.3.2 fails to authorize the MarketplaceModuleBrowser installModule Livewire action, allowing non-
Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template...
CVE-2026-75650
Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability tha
In JetBrains YouTrack before 2025.3.161254, 2026.1.14042 improper authentication in YouTrack...
CVE-2026-86478
In JetBrains YouTrack before 2025.3.161254, 2026.1.14042 improper authentication in YouTrack Helpdesk allowed unauthent
In JetBrains Hub before 2026.2.52442 an unauthenticated attacker could register a trusted service...
CVE-2026-86480
In JetBrains Hub before 2026.2.52442 an unauthenticated attacker could register a trusted service and gain superuser pri
Cloud & Application Security
Cloud & Application Security
From Scanner to Stealer: Inside the trivy-action Supply Chain Compromise
From Scanner to Stealer: Inside the trivy-action Supply Chain Compromise
Next-Gen Identity Security
Next-Gen Identity Security
CrowdStrike Expands Identity Leadership with OpenID and IDPro
CrowdStrike Expands Identity Leadership with OpenID and IDPro
cloud architecture assessment
cloud architecture assessment
ransomware and multifaceted extortion defense
ransomware and multifaceted extortion defense
Google Cloud Next 2026Catch-up sessions on the keynotes and select sessions are now available on demand.Explore content on-demand
Google Cloud Next 2026Catch-up sessions on the keynotes and select sessions are now available on demand.Explore content