Pingvin Share X from 0.19.0 before 1.22.0 contains an improper authentication vulnerability that...
CVE-2026-108157
Pingvin Share X from 0.19.0 before 1.22.0 contains an improper authentication vulnerability that allows remote unauthent
2026-10-10 归档
今日共收录 1383 条安全情报，包含 534 个 CVE，469 篇安全通告，以及 100 篇研究论文。
← 返回归档列表plugNmeet Server through 2.5.2 contains a path traversal vulnerability in the whiteboard...
CVE-2026-108158
plugNmeet Server through 2.5.2 contains a path traversal vulnerability in the whiteboard conversion endpoint that allows
ILIAS before 9.24, 10.12, and 11.5 contains an unrestricted file upload vulnerability in QTI...
CVE-2026-108113
ILIAS before 9.24, 10.12, and 11.5 contains an unrestricted file upload vulnerability in QTI question import image handl
A flaw was found in busybox. The tar applet's deferred link-creation handling for symlink and...
CVE-2026-108119
A flaw was found in busybox. The tar applet's deferred link-creation handling for symlink and hardlink entries with unsa
ruoyi-ai 3.0.0 through 3.1.0 contains a missing authorization vulnerability that allows...
CVE-2026-108112
ruoyi-ai 3.0.0 through 3.1.0 contains a missing authorization vulnerability that allows authenticated users to delete ot
A flaw was found in GIMP. The XCF loader processes image-simulation-intent and image-simulation...
CVE-2026-108093
A flaw was found in GIMP. The XCF loader processes image-simulation-intent and image-simulation-bpc parasites without en
An out-of-bounds read vulnerability exists in EIPStackGroup OpENer v2.3 and master up to commit...
CVE-2026-75348
An out-of-bounds read vulnerability exists in EIPStackGroup OpENer v2.3 and master up to commit 76b95cf in the EtherNet/
An out-of-bounds read vulnerability exists in EIPStackGroup OpENer v2.3 and master through commit...
CVE-2026-75346
An out-of-bounds read vulnerability exists in EIPStackGroup OpENer v2.3 and master through commit 76b95cf in the server-
Moderator Toolbox (reddit-moderator-toolbox) before 4.0.14 contains a stored cross-site scripting...
CVE-2016-20098
Moderator Toolbox (reddit-moderator-toolbox) before 4.0.14 contains a stored cross-site scripting vulnerability in the r
EIPStackGroup OpENer v2.3.0/master up to commit 76b95cf contains an out-of-bounds read...
CVE-2026-75349
EIPStackGroup OpENer v2.3.0/master up to commit 76b95cf contains an out-of-bounds read vulnerability in Connection Manag
OpENer v2.3.0 / commit 76b95cf contains an out-of-bounds read in the unconnected explicit...
CVE-2026-75345
OpENer v2.3.0 / commit 76b95cf contains an out-of-bounds read in the unconnected explicit messaging path. This allows a
SmarterMail before build 9777 contains a privilege escalation vulnerability where JWT access and...
CVE-2026-104084
SmarterMail before build 9777 contains a privilege escalation vulnerability where JWT access and refresh tokens embed a
MOVO through 0.2.3 contains an authorization bypass vulnerability in the chat-api document...
CVE-2026-108110
MOVO through 0.2.3 contains an authorization bypass vulnerability in the chat-api document endpoints that allows authent
SmarterMail before build 9777 contains a remote code execution vulnerability that allows an...
CVE-2026-104082
SmarterMail before build 9777 contains a remote code execution vulnerability that allows an attacker holding a SysAdmin-
Nginx UI: Authentication bypass: password login does not enforce a passkey-only second factor (2FA bypass)
CVE-2026-107808
## Summary nginx-ui supports two second-factor methods — TOTP (OTP) and WebAuthn passkeys — and reports an account as 2
Nginx UI: Backup restore follows crafted symlinks into the live Nginx configuration path before restore flags are applied
CVE-2026-107810
### Summary An authenticated user who can create and restore a backup can craft a valid backup archive that causes the r
pyLoad: Unauthenticated access to /web/<path:filename> bypasses authentication on sensitive templates and leaks internal error details via exception attribute typo
CVE-2026-75597
### Summary The `/web/` route in `src/pyload/webui/app/blueprints/app_blueprint.py` renders Jinja2 templates without an
Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL
CVE-2026-55797
### Impact Argo CD runs a shell command in the repo-server when it clones or fetches an SSH Git repository that has a p
pyLoad: Lack of Input Size Validation Leads to Denial of Service (DoS) and Process Termination
CVE-2026-48484
## Description: The API `rpc` function in `api_blueprint.py` handles `multipart/form-data` uploads by reading the whole
京ICP证080047号[京ICP备08010314号-6]
京ICP证080047号[京ICP备08010314号-6]