AVideo through 29.0 (current revision e01e41ecc) contains a stored cross-site scripting...
CVE-2026-92584
AVideo through 29.0 (current revision e01e41ecc) contains a stored cross-site scripting vulnerability. The unauthenticat
2026-09-17 归档
今日共收录 2425 条安全情报，包含 1381 个 CVE，651 篇安全通告，以及 100 篇研究论文。
← 返回归档列表In AVideo through 29.0, the CloneSite plugin is vulnerable to stored OS command injection. In...
CVE-2026-92580
In AVideo through 29.0, the CloneSite plugin is vulnerable to stored OS command injection. In plugin/CloneSite/cloneClie
A flaw was found in quay-builder-qemu. A remote attacker could exploit this by compromising the...
CVE-2026-85469
A flaw was found in quay-builder-qemu. A remote attacker could exploit this by compromising the upstream `Noelware/docke
AVideo through 29.0 contains a race condition in the enforceRateLimit() function that fails to...
CVE-2026-92583
AVideo through 29.0 contains a race condition in the enforceRateLimit() function that fails to atomically increment rate
In AVideo through 29.0, the autoCSRFGuard() function maintains a hardcoded allowlist of exempt...
CVE-2026-92579
In AVideo through 29.0, the autoCSRFGuard() function maintains a hardcoded allowlist of exempt basenames tested without
Grav: Stored CSS injection via Markdown image resize() bypasses prior media style sanitizers in Grav
CVE-2026-58657
## Summary Grav 2.0.0-rc.9 and the current 2.0 branch still allow stored CSS injection through Markdown image media act
@nuxtjs/mdc's URL sanitizer misses SVG xlink:href and data:text/html, allowing XSS from untrusted markdown at the default configuration
CVE-2026-63671
## Summary `@nuxtjs/mdc` renders untrusted markdown (including raw HTML) to a Vue component tree. Across two prior advi
RMCP: Unauthenticated permanent session-table leak in rmcp Streamable HTTP server transport leads to remote denial-of-service
CVE-2026-63128
### Summary An unauthenticated remote attacker can leak one entry per HTTP request out of the in-memory session table o
RMCP: Missing Resource Field Validation in OAuth Protected Resource Metadata Discovery
CVE-2026-63127
### Summary The `rmcp` library does not validate the `resource` parameter in OAuth Protected Resource metadata (RFC 9728
vLLM: Unauthenticated audio decompression-bomb DoS in /v1/chat/completions
CVE-2026-57173
### Summary The audio decode-duration guard (`max_duration_s`, env `VLLM_MAX_AUDIO_DECODE_DURATION_S`, default 600s) tha
Grav CMS — Improper Handling of Highly Compressed Data in Installer::unZip()
CVE-2026-59193
### Summary An authenticated admin.super user can crash Grav or fill the disk by uploading a specially crafted ZIP archi
djust has an unauthenticated arbitrary module import via the WebSocket/SSE view-mount path
CVE-2026-61599
### Impact The djust live transport resolves the LiveView to mount from a **client-supplied dotted path** by calling `__
djust: WebSocket/runtime reconstructed request omits the client Host, causing host/subdomain TenantResolvers to misresolve the tenant on the live path
CVE-2026-61589
### Impact The WebSocket `handle_mount` and `ViewRuntime._build_request` rebuild an `HttpRequest` via `RequestFactory().
djust has broken object-level access control (IDOR)
CVE-2026-61596
### Impact djust's per-object authorization (`get_object` + `has_object_permission`, ADR-017) was enforced on the WebSoc
djust: Unsigned client state snapshot is restored as trusted view state (privilege escalation / state injection)
CVE-2026-61591
### Impact For views that opt into state snapshots, the snapshot `state_json` embedded in the client page was restored o
PrestaShop blockwishlist through 3.0.2 fails to validate wishlist ownership in the...
CVE-2026-92810
PrestaShop blockwishlist through 3.0.2 fails to validate wishlist ownership in the getUrlByIdWishListAction method, allo
ComfyUI before 0.30.0 fails to sanitize folder_name input in dataset save nodes, allowing...
CVE-2026-92816
ComfyUI before 0.30.0 fails to sanitize folder_name input in dataset save nodes, allowing attackers to write files to ar
Metabase through 0.63.18 fails to properly validate the unspecified address 0.0.0.0 in custom...
CVE-2026-92813
Metabase through 0.63.18 fails to properly validate the unspecified address 0.0.0.0 in custom GeoJSON URLs, allowing una
decap-server contains a path traversal vulnerability in the local proxy containment guard that...
CVE-2026-92812
decap-server contains a path traversal vulnerability in the local proxy containment guard that uses plain string prefix
changedetection.io through 0.60.6 fails to escape the scraped page title in HTML notifications,...
CVE-2026-92814
changedetection.io through 0.60.6 fails to escape the scraped page title in HTML notifications, allowing arbitrary marku