A security vulnerability has been detected in SH3. This affects an unknown function of the...
CVE-2026-116054
A security vulnerability has been detected in SH3. This affects an unknown function of the component Módulo de Gestão/Mó
2026-10-26 归档
今日共收录 660 条安全情报，包含 0 个 CVE，351 篇安全通告，以及 56 篇研究论文。
← 返回归档列表YesWiki before 4.7.0 contains an unauthenticated server-side request forgery vulnerability that...
CVE-2026-116205
YesWiki before 4.7.0 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers
YesWiki before 4.7.0 contains a cross-site request forgery vulnerability in the despam action ...
CVE-2026-116204
YesWiki before 4.7.0 contains a cross-site request forgery vulnerability in the despam action (tools/security/actions/de
YesWiki 4.5.0 before 4.7.0 contains an SQL injection vulnerability in PageManager::save(), where...
CVE-2026-116211
YesWiki 4.5.0 before 4.7.0 contains an SQL injection vulnerability in PageManager::save(), where the date_maj_fiche fiel
YesWiki before 4.7.0 contains a stored cross-site scripting vulnerability in the filtertags...
CVE-2026-116203
YesWiki before 4.7.0 contains a stored cross-site scripting vulnerability in the filtertags action, which echoes attacke
Snipe-IT before 8.5.0 contains a SAML assertion replay vulnerability that allows attackers to...
CVE-2026-116201
Snipe-IT before 8.5.0 contains a SAML assertion replay vulnerability that allows attackers to reuse captured assertions
YesWiki before 4.7.0 contains a stored cross-site scripting vulnerability that allows low...
CVE-2026-116202
YesWiki before 4.7.0 contains a stored cross-site scripting vulnerability that allows low-privilege authenticated users
Snipe-IT before 8.6.3 ignores the ldap_start_tls() return value in Ldap::connectToLdap(),...
CVE-2026-116200
Snipe-IT before 8.6.3 ignores the ldap_start_tls() return value in Ldap::connectToLdap(), allowing on-path attackers to
Rclone from 1.64.0 before 1.75.2 contains an authentication bypass vulnerability in serve webdav...
CVE-2026-116193
Rclone from 1.64.0 before 1.75.2 contains an authentication bypass vulnerability in serve webdav that lets unauthenticat
rclone from v1.56.0 before v1.75.2 contains an information disclosure vulnerability in the WebDAV...
CVE-2026-116190
rclone from v1.56.0 before v1.75.2 contains an information disclosure vulnerability in the WebDAV backend that forwards
Snipe-IT before 8.7.0 contains a missing encryption vulnerability in Api\AssetsController::store...
CVE-2026-116198
Snipe-IT before 8.7.0 contains a missing encryption vulnerability in Api\AssetsController::store that writes plaintext i
rclone from 1.55.0 before 1.75.2 contains a signature verification bypass in stable selfupdate...
CVE-2026-116189
rclone from 1.55.0 before 1.75.2 contains a signature verification bypass in stable selfupdate that trusts checksums fro
rclone from 1.37 before 1.74.2 contains a server-side request forgery vulnerability that allows...
CVE-2026-116192
rclone from 1.37 before 1.74.2 contains a server-side request forgery vulnerability that allows unauthenticated attacker
Rclone before v1.75.2 contains a credential exposure vulnerability in the b2 backend that leaks...
CVE-2026-116196
Rclone before v1.75.2 contains a credential exposure vulnerability in the b2 backend that leaks the live account Authori
Rclone before 1.75.2 contains a path traversal vulnerability in serve webdav that allows...
CVE-2026-116191
Rclone before 1.75.2 contains a path traversal vulnerability in serve webdav that allows unauthenticated attackers to wr
Rclone before 1.75.2 contains a path traversal vulnerability in the local backend's translateLink...
CVE-2026-116195
Rclone before 1.75.2 contains a path traversal vulnerability in the local backend's translateLink function, which trims
vLLM from 0.8.5 before 0.31.0 has a denial of service flaw. LogprobsTensors.empty_cpu() in vllm...
CVE-2026-116180
vLLM from 0.8.5 before 0.31.0 has a denial of service flaw. LogprobsTensors.empty_cpu() in vllm/v1/outputs.py allocates
phpMyFAQ before 4.1.10 contains a server-side request forgery vulnerability in the PDF export...
CVE-2026-116182
phpMyFAQ before 4.1.10 contains a server-side request forgery vulnerability in the PDF export feature that fetches exter
phpMyFAQ before 4.1.10 contains an object-level authorization bypass vulnerability that allows...
CVE-2026-116183
phpMyFAQ before 4.1.10 contains an object-level authorization bypass vulnerability that allows unauthenticated attackers
vLLM from 0.20.1 before 0.29.0 contains an improper input validation vulnerability that allows...
CVE-2026-116181
vLLM from 0.20.1 before 0.29.0 contains an improper input validation vulnerability that allows remote attackers to crash