A vulnerability was detected in crossplane crossplane-runtime up to 2.2.2/2.3.2. This...
CVE-2026-105163
A vulnerability was detected in crossplane crossplane-runtime up to 2.2.2/2.3.2. This vulnerability affects the function
2026-10-05 归档
今日共收录 815 条安全情报，包含 115 个 CVE，364 篇安全通告，以及 81 篇研究论文。
← 返回归档列表A vulnerability has been found in devopspolis secrets-replicator up to 0.4.0. Impacted is the...
CVE-2026-105165
A vulnerability has been found in devopspolis secrets-replicator up to 0.4.0. Impacted is the function process_single_se
A vulnerability was found in kishor-23 food-waste-management-system...
CVE-2026-105166
A vulnerability was found in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492
go-micro before 6.0.0 contains an improper certificate validation vulnerability that allows...
CVE-2026-105216
go-micro before 6.0.0 contains an improper certificate validation vulnerability that allows network attackers to imperso
Mammoth.js 1.3.0 before 1.12.3 contains a regular expression denial of service vulnerability in...
CVE-2026-105219
Mammoth.js 1.3.0 before 1.12.3 contains a regular expression denial of service vulnerability in the style map tokeniser
gopay before 1.5.119 disables TLS certificate verification in defaultClient() in pkg/xhttp/client...
CVE-2026-105218
gopay before 1.5.119 disables TLS certificate verification in defaultClient() in pkg/xhttp/client.go, allowing man-in-th
A flaw has been found in invariant-systems-ai aiir up to 1.7.0. The affected element is an...
CVE-2026-105161
A flaw has been found in invariant-systems-ai aiir up to 1.7.0. The affected element is an unknown function of the compo
Cockpit CMS 2.12.0 before 2.14.1 disables TLS certificate verification in the cron.php web worker...
CVE-2026-105217
Cockpit CMS 2.12.0 before 2.14.1 disables TLS certificate verification in the cron.php web worker restart request, allow
Insertion of Sensitive Information Into Sent Data vulnerability in farvisun Mindio Magic MCP...
CVE-2026-104402
Insertion of Sensitive Information Into Sent Data vulnerability in farvisun Mindio Magic MCP mindio-magic-mcp allows Ret
WWBN AVideo 12.4 through 29.2.0 contains a stored cross-site scripting vulnerability that allows...
CVE-2026-105086
WWBN AVideo 12.4 through 29.2.0 contains a stored cross-site scripting vulnerability that allows authenticated uploaders
ZITADEL 4.x before 4.17.1 does not check an organization's inactive state during Login V2...
CVE-2026-105213
ZITADEL 4.x before 4.17.1 does not check an organization's inactive state during Login V2 authentication, verifying only
ZITADEL 4.x before 4.17.3 and 3.x through 3.4.15 protects IdP intent tokens with unauthenticated,...
CVE-2026-105208
ZITADEL 4.x before 4.17.3 and 3.x through 3.4.15 protects IdP intent tokens with unauthenticated, malleable encryption,
ZITADEL 3.0.0 through 3.4.15 and 4.x before 4.17.3 contains an incorrect authorization flaw in...
CVE-2026-105206
ZITADEL 3.0.0 through 3.4.15 and 4.x before 4.17.3 contains an incorrect authorization flaw in the User Service API, whi
ZITADEL before 4.17.1 contains an authentication bypass vulnerability in Login V2 that allows...
CVE-2026-105211
ZITADEL before 4.17.1 contains an authentication bypass vulnerability in Login V2 that allows unauthenticated attackers
ZITADEL 3.x before 3.4.15 and 4.x before 4.17.1 contains a missing authentication flaw in the...
CVE-2026-105210
ZITADEL 3.x before 3.4.15 and 4.x before 4.17.1 contains a missing authentication flaw in the hosted Login V1 UI, whose
ZITADEL 3.x before 3.4.14 and 4.x before 4.16.2 contains an authentication bypass in the hosted...
CVE-2026-105212
ZITADEL 3.x before 3.4.14 and 4.x before 4.16.2 contains an authentication bypass in the hosted Login V1 and Login V2 UI
A weakness has been identified in YzmCMS up to 7.6. Impacted is the function Password of the file...
CVE-2026-105156
A weakness has been identified in YzmCMS up to 7.6. Impacted is the function Password of the file /common/function/syste
SiYuan before 3.8.5 contains an information disclosure vulnerability that allows publish-mode...
CVE-2026-105205
SiYuan before 3.8.5 contains an information disclosure vulnerability that allows publish-mode readers to learn backlink
A security vulnerability has been detected in RainyGao DocSys up to 2.02.85. The affected element...
CVE-2026-105157
A security vulnerability has been detected in RainyGao DocSys up to 2.02.85. The affected element is the function DocCon
A vulnerability was detected in RainyGao DocSys up to 2.02.85. The impacted element is the...
CVE-2026-105158
A vulnerability was detected in RainyGao DocSys up to 2.02.85. The impacted element is the function BaseController.creat