Traefik before 2.11.58 and 3.7.14 Race Condition in NTLM/Kerberos Round Tripper
CVE-2026-114641
Traefik 2.11.x before 2.11.58 and 3.x before 3.7.14 contains a race condition in NTLM and Kerberos (Negotiate) backend a
2026-10-23 归档
今日共收录 1236 条安全情报，包含 262 个 CVE，575 篇安全通告，以及 100 篇研究论文。
← 返回归档列表Traefik v3.7.0 before v3.7.14 Client CA Mix-up via auth-tls-secret Name Collision
CVE-2026-114638
Traefik v3.7.0 before v3.7.14 contains an improper authentication vulnerability in the Kubernetes Ingress NGINX provider
WWBN AVideo before 29.4.0 Blind SSRF via getHeaderContentTypeFromURL Redirect
CVE-2026-114634
WWBN AVideo before 29.4.0 contains a blind server-side request forgery vulnerability in getHeaderContentTypeFromURL() be
WWBN AVideo before 29.4.0 Incorrect Authorization via confirmDeleteUser.json.php
CVE-2026-114633
WWBN AVideo before 29.4.0 contains an incorrect authorization vulnerability that allows delegated Users Admin accounts t
CVE-2026-114722
CVE-2026-114722
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a CSS scoping bypass in HTML messages. rcube_utils
CVE-2026-114721
CVE-2026-114721
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 allows the disabled_actions configuration setting to be bypassed.
CVE-2026-114720
CVE-2026-114720
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an IMAP command injection vulnerability. A remote
CVE-2026-114719
CVE-2026-114719
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a CSRF validation bypass in the mark-as-junk actio
CVE-2026-114718
CVE-2026-114718
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a cross-site scripting vulnerability in the passwo
Advanced Search - Moderately critical - Access bypass - SA-CONTRIB-2026-118
CVE-2026-84910
Missing Authorization vulnerability in Drupal Advanced Search allows Forceful Browsing. This issue affects Advanced Sear
AI (Artificial Intelligence) - Moderately critical - Cross site scripting - SA-CONTRIB-2026-119
CVE-2026-84911
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artific
AI (Artificial Intelligence) - Moderately critical - Access Bypass - SA-CONTRIB-2026-120
CVE-2026-84912
Missing Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Forceful Browsing. This issue affects
AI translate - Moderately critical - Access Bypass - SA-CONTRIB-2026-121
CVE-2026-84913
Missing Authorization vulnerability in Drupal AI Translate allows Forceful Browsing. This issue affects AI Translate ver
Calculate Working Days - Critical - Access bypass - SA-CONTRIB-2026-122
CVE-2026-84914
Missing Authorization vulnerability in Drupal Calculate Working Days allows Forceful Browsing. This issue affects Calcul
Component blocks - Moderately critical - Cross site scripting - SA-CONTRIB-2026-123
CVE-2026-84915
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Component b
Islandora - Moderately critical - Access bypass - SA-CONTRIB-2026-126
CVE-2026-84916
Missing Authorization vulnerability in Drupal Islandora allows Forceful Browsing. This issue affects Islandora version
Jsonapi Role Access - Critical - Access bypass - SA-CONTRIB-2026-127
CVE-2026-84917
Incorrect Authorization vulnerability in Drupal Jsonapi Role Access allows Forceful Browsing. This issue affects Jsonap
Mailer Plus Log - Moderately critical - Access bypass - SA-CONTRIB-2026-128
CVE-2026-16648
Insertion of Sensitive Information into Log File vulnerability in Drupal Mailer Plus Log allows Remote Services with Sto
Media Library Importer - Moderately critical - Access bypass - SA-CONTRIB-2026-129
CVE-2026-81163
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Drupal Media Library Imp
Monobank payment API - Moderately critical - Access bypass - SA-CONTRIB-2026-130
CVE-2026-84918
Improper Verification of Cryptographic Signature vulnerability in Drupal Monobank payment API allows Signature Spoof. Th