A path traversal vulnerability in the Fireware OS WebUI management agent allows an authenticated...
CVE-2026-13224
A path traversal vulnerability in the Fireware OS WebUI management agent allows an authenticated administrator to read o
2026-09-30 归档
今日共收录 1598 条安全情报，包含 728 个 CVE，467 篇安全通告，以及 100 篇研究论文。
← 返回归档列表A deserialization of untrusted data vulnerability in WatchGuard Fireware OS's SAML single sign-on...
CVE-2026-13046
A deserialization of untrusted data vulnerability in WatchGuard Fireware OS's SAML single sign-on session handling (saml
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-15278
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Improper neutralization of input during web page generation ('cross-site scripting')...
CVE-2026-103047
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foun
Improper neutralization of input during web page generation ('cross-site scripting')...
CVE-2026-103046
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Wikimedia Foundati
U-Boot before 2026.10-rc5 contains a buffer overflow in nfs_readlink_reply() function in net/nfs...
CVE-2026-74221
U-Boot before 2026.10-rc5 contains a buffer overflow in nfs_readlink_reply() function in net/nfs-common.c when processin
The device's update mechanism includes conditions that allow unauthorized software packages to be...
CVE-2026-91191
The device's update mechanism includes conditions that allow unauthorized software packages to be accepted as authentic.
anchorme through 3.0.8 contains a regular expression denial of service vulnerability in the IPv6...
CVE-2026-103043
anchorme through 3.0.8 contains a regular expression denial of service vulnerability in the IPv6 host extraction regex d
LightLLM through 1.2.0 contains a memory exhaustion vulnerability in the NCCL control channel...
CVE-2026-103042
LightLLM through 1.2.0 contains a memory exhaustion vulnerability in the NCCL control channel when started with --pd_tra
U-Boot before 2026.10-rc5 contains a use-after-free vulnerability in the httpc_recv_cb() function...
CVE-2026-74222
U-Boot before 2026.10-rc5 contains a use-after-free vulnerability in the httpc_recv_cb() function within the lwIP wget i
U-Boot before 2026.10-rc5 contains out-of-bounds memory access in dhcp6_parse_options() that...
CVE-2026-74225
U-Boot before 2026.10-rc5 contains out-of-bounds memory access in dhcp6_parse_options() that fails to validate SERVERID
Improper neutralization of input during web page generation ('cross-site scripting')...
CVE-2026-103045
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foun
U-Boot before 2026.10-rc5 contains a buffer overflow in nfs_read_reply() function in net/nfs...
CVE-2026-74220
U-Boot before 2026.10-rc5 contains a buffer overflow in nfs_read_reply() function in net/nfs-common.c that allows attack
XML injection (aka blind XPath injection) vulnerability in The Wikimedia Foundation Mediawiki -...
CVE-2026-103044
XML injection (aka blind XPath injection) vulnerability in The Wikimedia Foundation Mediawiki - EasyTimeline extension a
The device's update mechanism retrieves metadata for software updates over an unencrypted HTTP...
CVE-2026-84409
The device's update mechanism retrieves metadata for software updates over an unencrypted HTTP connection and stores por
The application accepts user-supplied session identifiers and does not regenerate the session ID...
CVE-2026-71302
The application accepts user-supplied session identifiers and does not regenerate the session ID after authentication. T
The application uses unsafe functions that allow execution of inline scripts and string...
CVE-2026-69662
The application uses unsafe functions that allow execution of inline scripts and string evaluation functions.
A vulnerability was identified in Freedesktop Poppler up to 26.08.0. Affected is the function...
CVE-2026-102621
A vulnerability was identified in Freedesktop Poppler up to 26.08.0. Affected is the function SplashClip::clipToPath of
U-Boot before 2026.10-rc3 with CONFIG_IP_DEFRAG enabled contains an out-of-bounds write...
CVE-2026-71971
U-Boot before 2026.10-rc3 with CONFIG_IP_DEFRAG enabled contains an out-of-bounds write vulnerability in the __net_defra
U-Boot through 2026.10-rc5 contains an out-of-bounds write vulnerability in the...
CVE-2026-71972
U-Boot through 2026.10-rc5 contains an out-of-bounds write vulnerability in the video_display_rle8_bitmap function in dr