Cleartext transmission in the primary control endpoints of Teledyne FLIR Aware2 versions through...
CVE-2026-14984
Cleartext transmission in the primary control endpoints of Teledyne FLIR Aware2 versions through 6.9.0.2 allows remote u
2026-10-02 归档
今日共收录 1399 条安全情报，包含 504 个 CVE，518 篇安全通告，以及 100 篇研究论文。
← 返回归档列表Missing authentication in the web interface in Teledyne FLIR Aware2 versions through 6.9.0.2...
CVE-2026-14983
Missing authentication in the web interface in Teledyne FLIR Aware2 versions through 6.9.0.2 allows remote unauthenticat
IVFFlat index build in pgvector before 0.8.7 allows a database user to write data out-of-bounds,...
CVE-2026-103484
IVFFlat index build in pgvector before 0.8.7 allows a database user to write data out-of-bounds, which can lead to arbit
RT-Labs AB C-Open CANopen contains a write protection bypass in the SDO (Service Data Object)...
CVE-2026-82358
RT-Labs AB C-Open CANopen contains a write protection bypass in the SDO (Service Data Object) server implementation 'src
A component of one of the Motorola system applications was exported without permission, allowing...
CVE-2026-93832
A component of one of the Motorola system applications was exported without permission, allowing for the revocation of r
Kasa EC70 v4 and EC71 v4 do not logically disable the production debug interface at the firmware...
CVE-2026-102370
Kasa EC70 v4 and EC71 v4 do not logically disable the production debug interface at the firmware or chip level and do no
The Joyland AI app contains hard-coded credentials for the GeTui push notification service,...
CVE-2026-102666
The Joyland AI app contains hard-coded credentials for the GeTui push notification service, allowing an attacker to acce
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-63721
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
A command injection vulnerability exists in the TDDPv2 service (/usr/bin/tddp) on Archer AX90 V1....
CVE-2026-84682
A command injection vulnerability exists in the TDDPv2 service (/usr/bin/tddp) on Archer AX90 V1. An unauthenticated adj
A stack-based buffer overflow vulnerability exists in the TDDPv2 service (/usr/bin/tddp) on Deco...
CVE-2026-8618
A stack-based buffer overflow vulnerability exists in the TDDPv2 service (/usr/bin/tddp) on Deco M9 Plus due to insuffic
Joyland AI app allows an attacker with shared network access to inject JavaScript into content...
CVE-2026-102667
Joyland AI app allows an attacker with shared network access to inject JavaScript into content loaded in WebView. Withou
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-63724
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
The Joyland AI app accepts any TLS certificates from any server without validation.
CVE-2026-102668
The Joyland AI app accepts any TLS certificates from any server without validation.
Wormhole.app as deployed before 2026-08-22 misconfigures the coturn TURN server and does not...
CVE-2026-100251
Wormhole.app as deployed before 2026-08-22 misconfigures the coturn TURN server and does not properly restrict TCP relay
Joyland AI app does not verify hostnames, allowing a malicious host to connect or intercept chat...
CVE-2026-102669
Joyland AI app does not verify hostnames, allowing a malicious host to connect or intercept chat messages.
- Improper Privilege Management vulnerability in Johnson Controls Easy IO FG allows (Brute Force)...
CVE-2026-27872
- Improper Privilege Management vulnerability in Johnson Controls Easy IO FG allows (Brute Force). This issue affects E
Confluent Kafka Python client's HashiCorp Vault KMS integration could allow a remote attacker to...
CVE-2026-15911
Confluent Kafka Python client's HashiCorp Vault KMS integration could allow a remote attacker to obtain sensitive inform
Podgrab contains an unauthenticated denial-of-service vulnerability caused by unsynchronized...
CVE-2026-104057
Podgrab contains an unauthenticated denial-of-service vulnerability caused by unsynchronized concurrent access to shared
Authlib version 1.7.2 and below contains a vulnerability where discovery JSON metadata is cached...
CVE-2026-104056
Authlib version 1.7.2 and below contains a vulnerability where discovery JSON metadata is cached without validation or i
Lektor 3.3.14 and 3.4.0b15 contains a cross-site request forgery vulnerability in the admin API...
CVE-2026-104059
Lektor 3.3.14 and 3.4.0b15 contains a cross-site request forgery vulnerability in the admin API blueprint that allows un