Frappe ERPNext before 16.34.1 Unauthorized Method Invocation
CVE-2026-96672
Frappe ERPNext versions before 16.34.1 fail to validate that Financial Report Template calculation_formula values refere
2026-09-24 归档
今日共收录 1600 条安全情报，包含 683 个 CVE，518 篇安全通告，以及 100 篇研究论文。
← 返回归档列表Isotope eCommerce through 2.9.10 SQL Injection via Backend Callbacks
CVE-2026-96600
Isotope eCommerce through 2.9.10 contains a blind SQL injection vulnerability in backend callbacks that interpolate requ
Isotope eCommerce through 2.9.10 Weak Order Identifier Generation
CVE-2026-96599
Isotope eCommerce through 2.9.10 derives order identifiers from uniqid() instead of a cryptographically secure source, a
Streamlink: HTTPSession follows HTTP redirects into file:// URLs, reading local files
CVE-2026-92164
Streamlink is a CLI utility which pipes video streams from various services into a video player. Prior to 8.6.0, HTTPSes
Solspace Freeform: Limited Twig template injection via submitted field values
CVE-2026-73858
Solspace Freeform plugin for Craft CMS 5.x is a super flexible form-building tool. From 5.0.0 through 5.10.13, submitted
CVE-2026-96611
CVE-2026-96611
FFmpeg before 9.0 has a signed integer overflow in libavformat/mov.c. In mov_read_ispe(), uint32_t width/height values f
WPGraphQL: Contributor can publish and modify posts without the required capabilities via updatePost
CVE-2026-88974
WPGraphQL provides a GraphQL API for WordPress sites. Prior to 2.22.2, the updatePost mutation in src/Mutation/PostObjec
CVE-2026-96609
CVE-2026-96609
Robur Albatross 1.0.0 through 2.x before 2.7.2 does not limit use of the ring buffer, leading to an albatross-console lo
REDAXO: Unwhitelisted ORDER BY Column in rex_list Allows Authenticated Column Enumeration
CVE-2026-62998
REDAXO is a PHP-based content management system. Prior to 5.21.2, rex_list::getSortColumn() in redaxo/src/core/lib/list.
scim-patch: Mutation of Inherited Built-in Method Objects
CVE-2026-61834
scim-patch is a library for applying SCIM patch operations. Prior to 0.9.2, navigate() reads inherited properties and as
LightLLM through 1.2.0 Unauthenticated Remote Code Execution via NCCL PD RPyC Control Channel
CVE-2026-96560
LightLLM through 1.2.0 contains a remote code execution vulnerability in the KV-transfer worker when started with --pd_t
Pake grants unrestricted IPC access to every HTTPS origin loaded in generated applications
CVE-2026-96454
Pake turns a website into a desktop application built on Tauri. Every application it generates inherits two settings fro
Tauri framework v2 missing updater signature version number validation can be exploited into forced downgrade
CVE-2026-95625
The Tauri updater plugin verifies update binaries using minisign signatures, but the signature covers only the raw binar
JusticeRage Manalyze PE Parser pe.cpp _parse_relocations integer underflow
CVE-2026-95958
A security flaw has been discovered in JusticeRage Manalyze 1.0.0. Impacted is the function PE::_parse_relocations of th
jackson-databind: unbounded growth of the type id cache in TypeDeserializerBase retains every unknown raw type ID
CVE-2026-91776
TypeDeserializerBase._findDeserializer() in FasterXML jackson-databind caches the resolved deserializer under the raw, a
iFlytek astron-agent debugToolV2 API endpoint UrlCheckTool.checkUrl server-side request forgery
CVE-2026-95930
A security vulnerability has been detected in iFlytek astron-agent up to 1.0.6. Affected by this vulnerability is the fu
jackson-core: UTF8DataInputJsonParser._reportInvalidToken() does not honor maxErrorTokenLength, allowing unbounded StringBuilder growth
CVE-2026-89425
UTF8DataInputJsonParser._reportInvalidToken() in FasterXML jackson-core builds the offending-token text for its error me
iFlytek astron-agent getBotList API endpoint ChatBotMarketMapper.xml sql injection
CVE-2026-95929
A weakness has been identified in iFlytek astron-agent up to 1.0.7. Affected is an unknown function of the file console/
recommenders-team recommenders Dict Loading mind_iterator.py pickle.load deserialization
CVE-2026-95928
A security flaw has been discovered in recommenders-team recommenders up to 1.2.1. This impacts the function pickle.load
Ghidra before 12.1.4 Denial of Service via Crafted Database
CVE-2026-96273
Ghidra before 12.1.4 fails to validate the TYPE_COL byte in OptionsDB.createUnregisteredOption(), causing an ArrayIndexO