Charging station authentication identifiers are publicly accessible via web-based mapping platforms.
CVE-2026-93474
Charging station authentication identifiers are publicly accessible via web-based mapping platforms.
2026-10-03 归档
今日共收录 1361 条安全情报，包含 499 个 CVE，489 篇安全通告，以及 100 篇研究论文。
← 返回归档列表Zilliz Attu before 3.0.0 has a Playground feature that does not require authentication for...
CVE-2026-105049
Zilliz Attu before 3.0.0 has a Playground feature that does not require authentication for proxying arbitrary HTTP and H
Kentico Xperience 13 before 13.0.216 lacks object-level authorization checks for administration...
CVE-2026-105046
Kentico Xperience 13 before 13.0.216 lacks object-level authorization checks for administration API endpoints.
Armatura One's backup and restore routine records the full database connection command, including...
CVE-2026-94593
Armatura One's backup and restore routine records the full database connection command, including the superuser password
PeaZip before 11.3.0, in a non-default configuration, is vulnerable to OS command injection via a...
CVE-2026-105050
PeaZip before 11.3.0, in a non-default configuration, is vulnerable to OS command injection via a filename in an archive
probe-image-size: Quadratic-time Denial of Service in the SVG Parser
CVE-2026-104861
## Overview `probe-image-size` scans the SVG header with a searching regular expression, `/]*>/`. On input that contain
@fastify/busboy vulnerable to Denial of Service via prototype-named multipart part header
CVE-2026-19481
### Impact Versions of `@fastify/busboy` from 1.0.0 and prior to 3.2.1 are vulnerable to a Denial of Service. The multi
@fastify/busboy vulnerable to Denial of Service via oversized multipart boundary
CVE-2026-19484
### Impact Versions of `@fastify/busboy` from 3.1.0 and prior to 3.2.1 are vulnerable to a Denial of Service. The vendo
Wasmtime: Preemption and traps during bulk operations enable breaking internal VM state
CVE-2026-104855
### Impact Wasmtime's implementation of bulk-data-transfer WebAssembly instructions, such as `memory.copy`, contains a
aws-smithy-json: Uncontrolled recursion in the aws-smithy-json unknown-key skip path allows unauthenticated remote denial of service in smithy-rs generated servers
CVE-2026-18140
### Summary Smithy-RS is a Rust code generation and runtime framework that generates HTTP clients and servers from Smith
figlet is vulnerable to denial of service via unbounded loop when whitespaceBreak is used with a small width
CVE-2026-96780
### Impact A denial-of-service (infinite loop) can occur in `text()` / `textSync()` when **both**: - `whitespaceBreak: t
geopy: Regular Expression Denial of Service (ReDoS) in geopy.Point
CVE-2026-77387
### Impact `geopy.Point` and `Point.from_string()` may take excessive CPU time when parsing long, malformed coordinate
A specially crafted HTTP POST request to the web administration interface allows an...
CVE-2026-75937
A specially crafted HTTP POST request to the web administration interface allows an unauthenticated attacker to execute
UTMStack before 11.2.16 contains a JPQL injection vulnerability that allows authenticated...
CVE-2026-82045
UTMStack before 11.2.16 contains a JPQL injection vulnerability that allows authenticated attackers to read arbitrary en
UTMStack before 11.2.16 contains an account enumeration vulnerability that allows unauthenticated...
CVE-2026-82043
UTMStack before 11.2.16 contains an account enumeration vulnerability that allows unauthenticated attackers to determine
A flaw was found in Dogtag PKI (pki-core). The CMCAuthForEST authentication plugin fails open...
CVE-2026-104988
A flaw was found in Dogtag PKI (pki-core). The CMCAuthForEST authentication plugin fails open when an EST fullcmc enroll
Cross-Site Request Forgery (CSRF) vulnerability in Webriti Wallstreet wallstreet allows Cross...
CVE-2026-39718
Cross-Site Request Forgery (CSRF) vulnerability in Webriti Wallstreet wallstreet allows Cross Site Request Forgery.This
Trivy before 0.71.0 allows directory traversal in Terraform filesystem functions when they try to...
CVE-2026-104994
Trivy before 0.71.0 allows directory traversal in Terraform filesystem functions when they try to access pathnames above
Phproject before 1.8.7 contains a missing object-level authorization vulnerability in the REST...
CVE-2026-104991
Phproject before 1.8.7 contains a missing object-level authorization vulnerability in the REST API issue endpoints (sing
An information exposure vulnerability in Canonical MAAS prior to versions 3.4.10, 3.5.14, 3.6.5,...
CVE-2026-12392
An information exposure vulnerability in Canonical MAAS prior to versions 3.4.10, 3.5.14, 3.6.5, 3.7.3, and 3.8.0 allows