OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference in cupsdCheckJobs() when a...
CVE-2026-107888
OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference in cupsdCheckJobs() when a job marked job-held-on-cr
2026-10-09 归档
今日共收录 747 条安全情报，包含 0 个 CVE，359 篇安全通告，以及 100 篇研究论文。
← 返回归档列表Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to...
CVE-2026-96207
Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a
Deserialization of untrusted data in Microsoft Dataverse allows an unauthorized attacker to...
CVE-2026-88131
Deserialization of untrusted data in Microsoft Dataverse allows an unauthorized attacker to execute code over a network.
Authorization bypass through user-controlled key in Microsoft Bookings allows an unauthorized...
CVE-2026-94510
Authorization bypass through user-controlled key in Microsoft Bookings allows an unauthorized attacker to elevate privil
Missing authentication for critical function in Azure App Service allows an unauthorized attacker...
CVE-2026-77900
Missing authentication for critical function in Azure App Service allows an unauthorized attacker to execute code over a
Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over...
CVE-2026-69435
Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network.
IBM Guardium Data Protection 12.2, and 12.2.2 could allow a remote attacker to execute arbitrary...
CVE-2026-84249
IBM Guardium Data Protection 12.2, and 12.2.2 could allow a remote attacker to execute arbitrary management operations d
Jivejdon from commit e0306088 through commit ee67a65e lacks rate limiting on the unauthenticated ...
CVE-2026-107830
Jivejdon from commit e0306088 through commit ee67a65e lacks rate limiting on the unauthenticated /account/smsVRAction en
Jivejdon through 5.0 contains a stored cross-site scripting vulnerability that allows...
CVE-2026-107800
Jivejdon through 5.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute...
CVE-2026-75875
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to path tr
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute...
CVE-2026-80381
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute unauthorized SQL statements d
Jivejdon from commit 5489372d through commit ee67a65e contains a reflected cross-site scripting...
CVE-2026-107796
Jivejdon from commit 5489372d through commit ee67a65e contains a reflected cross-site scripting vulnerability in applica
Jivejdon through 5.0 contains a stored cross-site scripting vulnerability that allows...
CVE-2026-107799
Jivejdon through 5.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject
Satel Netco Design versions prior to v2.1.7 contains a stored cross site scripting vulnerability....
CVE-2026-105269
Satel Netco Design versions prior to v2.1.7 contains a stored cross site scripting vulnerability. An authenticated user
fast-jwt: Incomplete patch of CVE-2026-34950: Non-whitespace key-prefix re-enables RSA→HS256 algorithm confusion
CVE-2026-107722
### Summary The fix for CVE-2026-34950 (CVSS 9.1, released in v6.2.0) is **incomplete**. It adds `key.trim()` to the PE
PraisonAI: Platform member PATCH routes allow owner resource rewrites and project lead reassignment delete bypass
CVE-2026-61442
# Platform member PATCH routes allow owner resource rewrites and project lead reassignment delete bypass ## Summary `p
PraisonAI: AICoder Arbitrary File Write and Command Execution via LLM Tool Calls
CVE-2026-61445
### Summary The `AICoder` UI component exposes `write_to_file` and `execute_command` tools to the LLM with no path valid
PraisonAI: Platform members can rewrite shared labels and owner issue labels without owner/admin authorization
CVE-2026-61440
# Platform members can rewrite shared labels and owner issue labels without owner/admin authorization ## Summary `prai
IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0...
CVE-2026-78388
IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 is vulnerable to cro
music-metadata: EBML parser trusts element lengths, allowing memory exhaustion or process abort
CVE-2026-107389
## Summary The Matroska/WebM EBML parser decodes attacker-controlled variable-length integer (VINT) element lengths wit