Lemonldap::NG::Handler versions from 2.0.0 before 2.16.10, from 2.17.0 before 2.21.6, from 2.22.0...
CVE-2026-95811
Lemonldap::NG::Handler versions from 2.0.0 before 2.16.10, from 2.17.0 before 2.21.6, from 2.22.0 before 2.23.4 for Perl
2026-09-25 归档
今日共收录 784 条安全情报，包含 0 个 CVE，390 篇安全通告，以及 100 篇研究论文。
← 返回归档列表Secure Folder 1.2 stores files selected for its password-protected vault as unencrypted files in...
CVE-2026-84283
Secure Folder 1.2 stores files selected for its password-protected vault as unencrypted files in the Android shared-stor
Root Browser Classic 3.3.0 passes the path of a selected SQLite database to an operating-system...
CVE-2026-85082
Root Browser Classic 3.3.0 passes the path of a selected SQLite database to an operating-system shell without safely sep
A logic flaw in Java cache key handling object comparison handling could lead to improper...
CVE-2026-14441
A logic flaw in Java cache key handling object comparison handling could lead to improper identifier resolution when pro
Krayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that...
CVE-2026-48543
Krayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that allows authenticated attack
The Botslab G980H dash camera firmware accepts a reusable authentication value without adequately...
CVE-2026-77967
The Botslab G980H dash camera firmware accepts a reusable authentication value without adequately verifying its freshnes
Omni C20 lacks proper certificate validation which could allow an attacker to perform a man-in...
CVE-2026-93291
Omni C20 lacks proper certificate validation which could allow an attacker to perform a man-in-the-middle attack which c
Krayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that...
CVE-2026-48540
Krayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that allows authenticated attack
Krayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that...
CVE-2026-48541
Krayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that allows authenticated attack
The Botslab G980H dash camera firmware contains an authorization vulnerability in its session...
CVE-2026-84399
The Botslab G980H dash camera firmware contains an authorization vulnerability in its session based command functionalit
The Botslab G980H dash camera firmware contains a session management vulnerability in which...
CVE-2026-82566
The Botslab G980H dash camera firmware contains a session management vulnerability in which authentication state can rem
Krayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that...
CVE-2026-48542
Krayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that allows authenticated attack
An unauthenticated Remote Code Execution via Arbitrary File Upload vulnerability in the web...
CVE-2026-13249
An unauthenticated Remote Code Execution via Arbitrary File Upload vulnerability in the web management interface in Hone
Contao: Server-Side Request Forgery (SSRF) via Unvalidated RSS Feed URL in Feed Reader Module
CVE-2026-57232
### Summary The Feed Reader front-end module passes RSS feed URLs from its configuration directly to `$this->feedIo->re
social-auth-core has a Session Fixation issue
CVE-2026-57179
### Impact The partial-pipeline resume mechanism accepted `partial_token` as a bearer credential without binding it to
social-auth-core: VK App backend accepts unsigned callback data when auth_key is missing
CVE-2026-57178
### Impact The `vk-app` backend accepted VK application callback data without verifying the callback signature when the
social-auth-core has Login CSRF via Missing State Parameter in LoginRadius Backend
CVE-2026-57177
### Impact The LoginRadius backend did not validate OAuth state during the authentication flow. Applications using thi
social-auth-core Vulnerable to Account Takeover via Identity Binding Flaw in Vend Backend
CVE-2026-57176
### Impact The Vend OAuth2 backend used only the numeric Vend `user_id` as the social-auth UID. When multiple Vend sho
social-auth-core has an Improper Authentication issue
CVE-2026-57175
### Impact The SAML backend accepted SAML responses on the Assertion Consumer Service endpoint without verifying that t
Ash: Private action arguments can be set by user input via string-keyed params and atomic changesets
CVE-2026-55736
### Summary Ash fails to consistently strip private action arguments (those declared with `public?: false`) when a chan