LimeSurvey Community Edition 7.0.14 - Reflected XSS through unescaped LSS survey-import warnings
CVE-2026-91775
LimeSurvey fails to safely encode attacker-controlled content from a crafted .lss survey file when displaying import war
2026-09-24 归档
今日共收录 1600 条安全情报，包含 683 个 CVE，518 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-96808
CVE-2026-96808
In Flatpak before 1.18.1, the revokefs writer, used by the flatpak-system-helper to receive repository data from unprivi
CVE-2026-96807
CVE-2026-96807
In Flatpak before 1.18.1, a malicious sandboxed app can replace ~/.var/app/$appid/.ld.so with a symlink, causing regener
Frictionless OS Command Injection via explore Console Command
CVE-2026-93349
Frictionless through 5.20.0rc1 contains an OS command injection vulnerability in the explore console command that allows
Moquette fails open when configured authentication or authorization classes cannot load
CVE-2026-85724 · CVE-2026-95842 · CVE-2026-95843 · CVE-2026-95844 · CVE-2026-95845 · CVE-2026-95846 · CVE-2026-95847 · CVE-2026-95848
Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, when a configured authenticator or authorizator class canno
Moquette client IDs can cause cross-session H2 durable-queue corruption
CVE-2026-85724 · CVE-2026-95842 · CVE-2026-95843 · CVE-2026-95844 · CVE-2026-95845 · CVE-2026-95846 · CVE-2026-95848 · CVE-2026-95847
Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, H2PersistentQueue derives a session's message-map name as q
Moquette publishes Last-Will messages without enforcing write authorization
CVE-2026-85724 · CVE-2026-95842 · CVE-2026-95843 · CVE-2026-95844 · CVE-2026-95845 · CVE-2026-95847 · CVE-2026-95848 · CVE-2026-95846
Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, PostOffice.publishWill publishes a client's Last-Will messa
Moquette unbounded per-session message queues allow memory exhaustion
CVE-2026-85724 · CVE-2026-95842 · CVE-2026-95843 · CVE-2026-95844 · CVE-2026-95846 · CVE-2026-95847 · CVE-2026-95848 · CVE-2026-95845
Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, the broker does not enforce a maximum length for pending pe
Moquette deeply nested MQTT topics can cause stack exhaustion
CVE-2026-85724 · CVE-2026-95842 · CVE-2026-95843 · CVE-2026-95845 · CVE-2026-95846 · CVE-2026-95847 · CVE-2026-95848 · CVE-2026-95844
Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, Moquette does not limit the depth of topic names and topic
Moquette malformed shared subscriptions can crash command processing
CVE-2026-85724 · CVE-2026-95842 · CVE-2026-95844 · CVE-2026-95845 · CVE-2026-95846 · CVE-2026-95847 · CVE-2026-95848 · CVE-2026-95843
Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, PostOffice.subscribe parses a shared-subscription filter th
Moquette uncaught MQTT command exceptions can terminate shared session event loops
CVE-2026-85724 · CVE-2026-95843 · CVE-2026-95844 · CVE-2026-95845 · CVE-2026-95846 · CVE-2026-95847 · CVE-2026-95848 · CVE-2026-95842
Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, SessionEventLoop.run catches only InterruptedException, and
orval before 8.29.0 Code Injection via operationId
CVE-2026-96759
orval before 8.29.0 fails to escape the operationId parameter when emitting it into generated TanStack Query mutator opt
orval before 8.29.0 Code Injection via unescaped OpenAPI media-type
CVE-2026-96757
orval before 8.29.0 fails to escape OpenAPI media-type keys when emitting them into single-quoted Content-Type string li
orval before 8.30.0 Code Injection via Factory Generation
CVE-2026-96756
orval versions before 8.30.0 contain a code injection vulnerability in the @orval/core factory generator that fails to e
orval @orval/effect 8.14.0 through 8.28.1 Code Injection
CVE-2026-96755
orval versions 8.14.0 through 8.28.1 contain a code injection vulnerability in the @orval/effect generator that converts
orval @orval/hono before 8.29.0 Code Injection via OpenAPI Path
CVE-2026-96754
orval versions before 8.29.0 contain a code injection vulnerability in the @orval/hono generator that fails to escape Op
HumHub 1.18.5 - Stored XSS in Profile Field Category title via HForm#renderForm leading to System Administrator account takeover
CVE-2026-93769
HumHub 1.18.5 is affected by a stored cross-site scripting (XSS) vulnerability that allows any user holding the delegate
alsa-lib through 1.2.16.1 Denial of Service via pcm_multi
CVE-2026-96675
alsa-lib through 1.2.16.1 contains a denial of service vulnerability in the multi PCM plugin that fails to validate spar
alsa-lib through 1.2.16.1 Integer Overflow via Topology File
CVE-2026-96674
alsa-lib through 1.2.16.1 computes combined topology element size using 32-bit arithmetic in src/topology/ctl.c, allowin
Photoview through 2.4.0 SQL Injection via album download route
CVE-2026-96673
Photoview through 2.4.0 contains an SQL injection vulnerability in the album download route that allows unauthenticated