django-page-cms through 2.0.13 fails to properly validate page permissions in admin helper views,...
CVE-2026-93455
django-page-cms through 2.0.13 fails to properly validate page permissions in admin helper views, allowing any staff acc
2026-09-18 归档
今日共收录 2436 条安全情报，包含 1258 个 CVE，779 篇安全通告，以及 100 篇研究论文。
← 返回归档列表A vulnerability was identified in GPAC 26.08-DEV. This vulnerability affects the function...
CVE-2026-93331
A vulnerability was identified in GPAC 26.08-DEV. This vulnerability affects the function gf_rtp_parse_ttxt of the file
The Deck config API allows authenticated users to set board-scoped configuration keys for...
CVE-2026-77170
The Deck config API allows authenticated users to set board-scoped configuration keys for arbitrary board IDs without va
django-page-cms through 2.0.13 exempts five admin mutation views from CSRF protection in pages...
CVE-2026-93456
django-page-cms through 2.0.13 exempts five admin mutation views from CSRF protection in pages/admin/views.py, allowing
Any authenticated user can lock or unlock files they do not own by targeting absolute WebDAV...
CVE-2026-82980
Any authenticated user can lock or unlock files they do not own by targeting absolute WebDAV paths of other users. The D
A vulnerability was determined in Freedesktop Poppler 26.07.0. This affects the function...
CVE-2026-93314
A vulnerability was determined in Freedesktop Poppler 26.07.0. This affects the function FoFiTrueType::mapCodeToGID of t
A flaw has been found in Freedesktop Poppler 26.07.0. Impacted is the function JBIG2Stream:...
CVE-2026-93312
A flaw has been found in Freedesktop Poppler 26.07.0. Impacted is the function JBIG2Stream::rewind of the file poppler/J
After guessing a 62^15 complex unique identifier, a malicious logged in user was able to retrieve...
CVE-2026-68493
After guessing a 62^15 complex unique identifier, a malicious logged in user was able to retrieve a list of memberships
A vulnerability was identified in O-RAN-SC SMO OAM 2025-06-10. This affects an unknown part of...
CVE-2026-93310
A vulnerability was identified in O-RAN-SC SMO OAM 2025-06-10. This affects an unknown part of the component VES Collect
A vulnerability was detected in Freedesktop Poppler 26.07.0. This issue affects the function...
CVE-2026-93311
A vulnerability was detected in Freedesktop Poppler 26.07.0. This issue affects the function SampledFunction::SampledFun
snappy-java through 1.1.10.8 contains a buffer overflow vulnerability in typed Snappy.uncompress...
CVE-2026-93451
snappy-java through 1.1.10.8 contains a buffer overflow vulnerability in typed Snappy.uncompress*Array methods that allo
snappy-java through 1.1.10.8 contains a buffer overflow vulnerability in Snappy.compress...
CVE-2026-93452
snappy-java through 1.1.10.8 contains a buffer overflow vulnerability in Snappy.compress(ByteBuffer, ByteBuffer) that wr
go-openapi/swag jsonutils before 0.27.1 contains a stack overflow vulnerability in ordered JSON...
CVE-2026-93450
go-openapi/swag jsonutils before 0.27.1 contains a stack overflow vulnerability in ordered JSON parsing and serializatio
SOGo before 5.12.11 constructs password-reset links using the client-supplied Origin header as...
CVE-2026-93453
SOGo before 5.12.11 constructs password-reset links using the client-supplied Origin header as the authority, allowing u
A vulnerability was determined in O-RAN-SC SMO OAM 2025-06-10. Affected by this issue is some...
CVE-2026-93309
A vulnerability was determined in O-RAN-SC SMO OAM 2025-06-10. Affected by this issue is some unknown functionality of t
Incorrect permission assignment for critical resource in M365 Copilot allows an authorized...
CVE-2026-85887
Incorrect permission assignment for critical resource in M365 Copilot allows an authorized attacker to disclose informat
A vulnerability was found in O-RAN-SC SMO OAM 2025-06-10. Affected by this vulnerability is an...
CVE-2026-93308
A vulnerability was found in O-RAN-SC SMO OAM 2025-06-10. Affected by this vulnerability is an unknown functionality of
vLLM through 0.29.0 fails to properly clean up decode-side metadata for rejected inference...
CVE-2026-93436
vLLM through 0.29.0 fails to properly clean up decode-side metadata for rejected inference requests in prefill/decode di
Local privilege escalation due to insecure file permissions. The following products are affected:...
CVE-2026-87886
Local privilege escalation due to insecure file permissions. The following products are affected: Acronis Backup plugin
redis-parser through 3.0.0 contains a denial of service vulnerability in the RESP protocol parser...
CVE-2026-93435
redis-parser through 3.0.0 contains a denial of service vulnerability in the RESP protocol parser that allows malicious