Handlebars.java before 4.5.5 allows directory traversal. In handlebars-springmvc 4.5.3 and 4.5.4,...
CVE-2026-103088
Handlebars.java before 4.5.5 allows directory traversal. In handlebars-springmvc 4.5.3 and 4.5.4, the path-containment f
2026-09-30 归档
今日共收录 1598 条安全情报，包含 728 个 CVE，467 篇安全通告，以及 100 篇研究论文。
← 返回归档列表A vulnerability was identified in gedelumbung HospitalManagement up to...
CVE-2026-102842
A vulnerability was identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Affecte
AiSOC versions 9.0.0 before 12.0.0 fail to enforce authentication on the response-action API...
CVE-2026-103053
AiSOC versions 9.0.0 before 12.0.0 fail to enforce authentication on the response-action API endpoints when AISOC_DEV_MO
AiSOC versions 7.5.0 before 12.0.0 use a hard-coded constant for JWT verification in the realtime...
CVE-2026-103055
AiSOC versions 7.5.0 before 12.0.0 use a hard-coded constant for JWT verification in the realtime WebSocket and SSE serv
A flaw has been found in Nothings stb up to 1.16. This affects the function stbi_write_png_to_mem...
CVE-2026-102805
A flaw has been found in Nothings stb up to 1.16. This affects the function stbi_write_png_to_mem/stbi_write_jpg_core/st
A vulnerability was detected in Nothings stb up to 2c980bb59875b0d32144a71867fbdebb2f77cd20. The...
CVE-2026-102804
A vulnerability was detected in Nothings stb up to 2c980bb59875b0d32144a71867fbdebb2f77cd20. The impacted element is the
A missing authorization vulnerability in the wgagent management daemon's session initialization...
CVE-2026-90441
A missing authorization vulnerability in the wgagent management daemon's session initialization function allows an authe
A NULL pointer dereference vulnerability in Fireware OS's NetFlow packet-processing feature...
CVE-2026-86128
A NULL pointer dereference vulnerability in Fireware OS's NetFlow packet-processing feature allows a remote, unauthentic
An uncontrolled resource consumption vulnerability in Fireware OS's diagnostic tasks feature...
CVE-2026-18105
An uncontrolled resource consumption vulnerability in Fireware OS's diagnostic tasks feature allows a low-privileged, au
A stack-based buffer overflow vulnerability in WatchGuard Fireware OS's DHCP fingerprinting...
CVE-2026-81433
A stack-based buffer overflow vulnerability in WatchGuard Fireware OS's DHCP fingerprinting daemon (fingerd) allows an u
An integer underflow vulnerability in the WatchGuard Fireware OS IKEv2 daemon (iked) allows a...
CVE-2026-86132
An integer underflow vulnerability in the WatchGuard Fireware OS IKEv2 daemon (iked) allows a remote, unauthenticated at
An integer underflow vulnerability in the WatchGuard Fireware OS IKE daemon (iked) allows a...
CVE-2026-86133
An integer underflow vulnerability in the WatchGuard Fireware OS IKE daemon (iked) allows a remote attacker who has comp
A stack-based buffer overflow vulnerability in the spamBlocker (spamd) service of WatchGuard...
CVE-2026-18145
A stack-based buffer overflow vulnerability in the spamBlocker (spamd) service of WatchGuard Fireware OS allows an authe
An improper authorization vulnerability in Fireware OS's Access Portal reverse proxy allows an...
CVE-2026-86105
An improper authorization vulnerability in Fireware OS's Access Portal reverse proxy allows an authenticated, low-privil
An uncontrolled resource consumption vulnerability in the Fireware OS login process (wgagent)...
CVE-2026-86104
An uncontrolled resource consumption vulnerability in the Fireware OS login process (wgagent) allows a remote, unauthent
A missing authorization vulnerability in the wgagent management daemon's session initialization...
CVE-2026-86136
A missing authorization vulnerability in the wgagent management daemon's session initialization function allows an authe
Improper neutralization of input during web page generation ('cross-site scripting')...
CVE-2026-103049
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foun
Improper neutralization of input during web page generation ('cross-site scripting')...
CVE-2026-103051
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foun
URL redirection to untrusted site ('open redirect') vulnerability in The Wikimedia Foundation...
CVE-2026-103048
URL redirection to untrusted site ('open redirect') vulnerability in The Wikimedia Foundation Mediawiki - Collection ext
Improper neutralization of input during web page generation ('cross-site scripting')...
CVE-2026-103050
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foun