@grpc/grpc-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon. Prior to 1.13.1 and 1.14.1, the exact path (method name) matcher used by RBAC ...

CVE-2026-101914

@grpc/grpc-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon. Prior to 1.13.1 and 1

历史摘要 · 未重新核验 · NVD

A vulnerability was found in Eleveo Quality Management 9.7.0. Affected by this issue is some unknown functionality of the file /qm/cz.zoom.scorecard.webui.Scorecard/cz.zoom.scor...

CVE-2026-101143

A vulnerability was found in Eleveo Quality Management 9.7.0. Affected by this issue is some unknown functionality of th

历史摘要 · 未重新核验 · NVD

A flaw has been found in Eleveo Call Recording Software 9.7.0. Affected is an unknown function of the file /callrec/audio.jsp of the component Play Audio Page. Executing a manip...

CVE-2026-101141

A flaw has been found in Eleveo Call Recording Software 9.7.0. Affected is an unknown function of the file /callrec/audi

历史摘要 · 未重新核验 · NVD

A path traversal vulnerability in Flatpak's handling of the export/bin directory during app deployment allows a malicious Flatpak app to cause deletion of attacker-chosen files ...

CVE-2026-97023

A path traversal vulnerability in Flatpak's handling of the export/bin directory during app deployment allows a maliciou

历史摘要 · 未重新核验 · NVD

Insufficient validation of untrusted input in Codecs in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to potentially perform out of bounds memory access via a c...

CVE-2026-13018

Insufficient validation of untrusted input in Codecs in Google Chrome prior to 147.0.7727.55 allowed a remote attacker t

历史摘要 · 未重新核验 · NVD

A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates storage but fails to update its in...

CVE-2026-102010

A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, t

历史摘要 · 未重新核验 · NVD

A vulnerability was detected in Webkul Bagisto up to 2.4.6/2.5.0-beta4. This impacts an unknown function of the file /admin/sales/invoices/mass-update/state of the component Inv...

CVE-2026-101139

A vulnerability was detected in Webkul Bagisto up to 2.4.6/2.5.0-beta4. This impacts an unknown function of the file /ad

历史摘要 · 未重新核验 · NVD

Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Book Library (Free) < 6.4.6 - The public book-detail page template, site/views/view_book/tmpl/default.php, ec...

CVE-2026-101111

Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Book Library (Free) < 6.4.6 - The public book-detail

历史摘要 · 未重新核验 · NVD

Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Book Library (Free) < 6.4.6 - site/booklibrary.php’s books() function reads the field and direction request pa...

CVE-2026-101110

Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Book Library (Free) quote() instead of rejecting it.

历史摘要 · 未重新核验 · NVD

Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Vehicle Manager (Free) < 6.5.8 - The public vehicle-detail page (task=view) echoes the title request paramete...

CVE-2026-101109

Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Vehicle Manager (Free) tag, to be injected into the

历史摘要 · 未重新核验 · NVD

Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Vehicle Manager (Free) < 6.5.8 - site/vehiclemanager.php reads the order_field and order_direction sort parame...

CVE-2026-101108

Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Vehicle Manager (Free) < 6.5.8 - site/vehiclemanager.

历史摘要 · 未重新核验 · NVD

Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Real Estate Manager (Free) < 6.7.9 - The public property-detail page’s “leave a review” form repopulates its...

CVE-2026-100753

Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Real Estate Manager (Free) element to execute in th

历史摘要 · 未重新核验 · NVD

Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Real Estate Manager (Free) < 6.7.9 - site/realestatemanager.php builds the ORDER BY clause of three separate f...

CVE-2026-100752

Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Real Estate Manager (Free) < 6.7.9 - site/realestatem

历史摘要 · 未重新核验 · NVD

A flaw was found in the StreamsHub Console for Apache Kafka. Tenant-supplied Kafka client properties from the Console custom resource are copied into the console-api AdminClient...

CVE-2026-96740

A flaw was found in the StreamsHub Console for Apache Kafka. Tenant-supplied Kafka client properties from the Console cu

历史摘要 · 未重新核验 · NVD

FreePBX is an open source IP PBX. Prior to version 17.0.9, authenticated users who are authorized to access the GraphQL api module interface of FreePBX are able to execute arbit...

CVE-2026-75600

FreePBX is an open source IP PBX. Prior to version 17.0.9, authenticated users who are authorized to access the GraphQL

历史摘要 · 未重新核验 · NVD

FreePBX is an open source IP PBX. Prior to versions 16.0.40 and 17.0.7, a critical remote code execution (RCE) vulnerability exists in the superfecta module due to unsafe inclus...

CVE-2026-54710

FreePBX is an open source IP PBX. Prior to versions 16.0.40 and 17.0.7, a critical remote code execution (RCE) vulnerabi

历史摘要 · 未重新核验 · NVD

FreePBX is an open source IP PBX. Prior to versions 16.0.72 and 17.0.7, a critical vulnerability exists in the FreePBX backup Module that allows authenticated attackers to execu...

CVE-2026-54708

FreePBX is an open source IP PBX. Prior to versions 16.0.72 and 17.0.7, a critical vulnerability exists in the FreePBX b

历史摘要 · 未重新核验 · NVD

决赛直播｜第四届阿里CTF安全挑战赛

该条目来自先知社区（阿里云开发者社区安全板块），标题为《决赛直播｜第四届阿里CTF安全挑战赛》，发布时间标注为 2026-09-30，标签为 research、community、xianzhi，原文正文摘要为空，未提供任何 CVE、攻击组

历史摘要 · 未重新核验 · 先知社区

抢先加入AI时代顶尖安全团队！阿里云2027届实习生招聘来了！

该条目来自先知社区（xz.aliyun.com），标题为《抢先加入AI时代顶尖安全团队！阿里云2027届实习生招聘来了！》，发布时间标注为 2026-09-30，正文摘要为空，仅有标题与标签（research、community、xianz

历史摘要 · 未重新核验 · 先知社区

Control CenterManage your security and delivery services

Control CenterManage your security and delivery services

历史摘要 · 未重新核验 · Akamai Security Research