Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1...
CVE-2026-96260
Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail to enforce a request
2026-09-23 归档
今日共收录 1513 条安全情报，包含 580 个 CVE，548 篇安全通告，以及 93 篇研究论文。
← 返回归档列表Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1...
CVE-2026-96259
Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail to apply the internal
Vaultwarden through 1.37.3 omits organization membership status validation from three cipher...
CVE-2026-95814
Vaultwarden through 1.37.3 omits organization membership status validation from three cipher access-restriction queries,
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-89019
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
e621ng versions before 26.09.16 pass untrusted request parameters directly to Rails url_for in...
CVE-2026-95813
e621ng versions before 26.09.16 pass untrusted request parameters directly to Rails url_for in PaginatorComponent and co
A stored cross-site scripting (XSS) vulnerability was identified in GitHub Enterprise Server that...
CVE-2026-77912
A stored cross-site scripting (XSS) vulnerability was identified in GitHub Enterprise Server that allowed an authenticat
A server-side request forgery (SSRF) vulnerability was identified in the notebook viewer of...
CVE-2026-77987
A server-side request forgery (SSRF) vulnerability was identified in the notebook viewer of GitHub Enterprise Server. Th
Autonomy Logic OpenPLC 3 is susceptible to an improper neutralization of input during web page...
CVE-2026-88020
Autonomy Logic OpenPLC 3 is susceptible to an improper neutralization of input during web page generation vulnerability
GNU Emacs 28.1 through 31.1 allows arbitrary code execution upon opening a file, because an...
CVE-2026-96269
GNU Emacs 28.1 through 31.1 allows arbitrary code execution upon opening a file, because an untrusted value of read-symb
openEQUELLA before 2026.1.0 contains an authenticated remote code execution vulnerability that...
CVE-2026-67615
openEQUELLA before 2026.1.0 contains an authenticated remote code execution vulnerability that allows any authenticated
An authorization bypass vulnerability was identified in GitHub Enterprise Server that allowed any...
CVE-2026-75101
An authorization bypass vulnerability was identified in GitHub Enterprise Server that allowed any authenticated user of
A vulnerability exists in the maintenance restore functionality of Analytics and Location Engine ...
CVE-2026-76713
A vulnerability exists in the maintenance restore functionality of Analytics and Location Engine (ALE). Successful explo
Multiple vulnerabilities exist in the Analytics and Location Engine (ALE) that may allow for...
CVE-2026-76716
Multiple vulnerabilities exist in the Analytics and Location Engine (ALE) that may allow for unauthorized access or deni
A vulnerability in an administrative component of Analytics and Location Engine (ALE) is...
CVE-2026-76715
A vulnerability in an administrative component of Analytics and Location Engine (ALE) is vulnerable to a man-in-the-midd
An unrestricted upload of files with a dangerous type in the thumbnail-upload endpoint (/index...
CVE-2026-88419
An unrestricted upload of files with a dangerous type in the thumbnail-upload endpoint (/index.php?m=member&f=article&v=
A vulnerability exists in the Analytics and Location Engine (ALE) that may allow for unauthorized...
CVE-2026-76712
A vulnerability exists in the Analytics and Location Engine (ALE) that may allow for unauthorized access, information di
A reachable assertion vulnerability exists in YARA 4.5.8 when loading crafted .yrc compiled rule...
CVE-2026-88341
A reachable assertion vulnerability exists in YARA 4.5.8 when loading crafted .yrc compiled rule files. An attacker can
Vulnerabilities in the Analytics and Location Engine web interface allows remote authenticated...
CVE-2026-76714
Vulnerabilities in the Analytics and Location Engine web interface allows remote authenticated users to run arbitrary co
A vulnerability exists in the Analytics and Location Engine (ALE) management interface that may...
CVE-2026-76710
A vulnerability exists in the Analytics and Location Engine (ALE) management interface that may allow for the disclosure
Missing path validation in the Worktree.remove component of openCode v1.18.26 allows attackers to...
CVE-2026-88624
Missing path validation in the Worktree.remove component of openCode v1.18.26 allows attackers to execute arbitrary recu