OpenPanel before 3.0.0 contains an information disclosure vulnerability that allows read-level...
CVE-2026-116819
OpenPanel before 3.0.0 contains an information disclosure vulnerability that allows read-level project members to obtain
2026-10-27 归档
今日共收录 787 条安全情报，包含 0 个 CVE，405 篇安全通告，以及 97 篇研究论文。
← 返回归档列表OpenPanel before 3.0.0 contains an unauthenticated ClickHouse sql injection vulnerability that...
CVE-2026-116818
OpenPanel before 3.0.0 contains an unauthenticated ClickHouse sql injection vulnerability that allows remote attackers t
OpenPanel before 3.0.0 contains a sandbox escape vulnerability in the js-runtime validator that...
CVE-2026-116811
OpenPanel before 3.0.0 contains a sandbox escape vulnerability in the js-runtime validator that allows a project member
OpenPanel before 3.0.0 contains an improper escaping vulnerability in sankey.service.ts that...
CVE-2026-116815
OpenPanel before 3.0.0 contains an improper escaping vulnerability in sankey.service.ts that allows authenticated projec
OpenPanel before 3.0.0 contains an sql injection vulnerability that allows authenticated users to...
CVE-2026-116808
OpenPanel before 3.0.0 contains an sql injection vulnerability that allows authenticated users to read cross-tenant data
OpenPanel before 3.0.0 contains a sql injection vulnerability in profileColumnAccess in cohort...
CVE-2026-116812
OpenPanel before 3.0.0 contains a sql injection vulnerability in profileColumnAccess in cohort.service.ts that allows pr
OpenPanel before 3.0.0 contains a missing authentication vulnerability that allows...
CVE-2026-116817
OpenPanel before 3.0.0 contains a missing authentication vulnerability that allows unauthenticated attackers to access t
OpenPanel before 3.0.0 contains a missing authorization vulnerability in the onboarding.project...
CVE-2026-116806
OpenPanel before 3.0.0 contains a missing authorization vulnerability in the onboarding.project tRPC mutation that allow
OpenPanel before 3.0.0 contains a missing authorization vulnerability that allows unauthenticated...
CVE-2026-116810
OpenPanel before 3.0.0 contains a missing authorization vulnerability that allows unauthenticated attackers to read any
DOMPurify from 3.4.4 before 3.4.17 contains a SAFE_FOR_TEMPLATES bypass that lets attackers...
CVE-2026-116804
DOMPurify from 3.4.4 before 3.4.17 contains a SAFE_FOR_TEMPLATES bypass that lets attackers preserve template expression
OpenPanel before 3.0.0 contains a missing authorization vulnerability in the event.bots tRPC...
CVE-2026-116809
OpenPanel before 3.0.0 contains a missing authorization vulnerability in the event.bots tRPC procedure that allows unaut
OpenPanel before 3.0.0 contains an information disclosure vulnerability that allows read-level...
CVE-2026-116805
OpenPanel before 3.0.0 contains an information disclosure vulnerability that allows read-level project members to obtain
OpenPanel before 3.0.0 contains an sql injection vulnerability in ConversionService.getConversion...
CVE-2026-116813
OpenPanel before 3.0.0 contains an sql injection vulnerability in ConversionService.getConversion that allows project-re
OpenPanel before 3.0.0 contains an sql injection vulnerability that allows authenticated users to...
CVE-2026-116807
OpenPanel before 3.0.0 contains an sql injection vulnerability that allows authenticated users to bypass tenant scoping
OpenPanel before 3.0.0 contains an information exposure vulnerability that writes database...
CVE-2026-116814
OpenPanel before 3.0.0 contains an information exposure vulnerability that writes database connection URLs and email tem
A vulnerability has been found in Argilla up to 2.8.0. The impacted element is an unknown...
CVE-2026-116555
A vulnerability has been found in Argilla up to 2.8.0. The impacted element is an unknown function of the file argilla-f
WWBN AVideo before 29.5.0 contains a local file inclusion vulnerability that allows...
CVE-2026-116800
WWBN AVideo before 29.5.0 contains a local file inclusion vulnerability that allows unauthenticated attackers to include
In apache-airflow-providers-ssh before 7.0.1, SSHRemoteJobOperator quoted the values of its...
CVE-2026-111422
In apache-airflow-providers-ssh before 7.0.1, SSHRemoteJobOperator quoted the values of its templated `environment` para
A vulnerability was detected in SourceCodester Online Food Ordering System 1.0. This issue...
CVE-2026-116602
A vulnerability was detected in SourceCodester Online Food Ordering System 1.0. This issue affects the function unlink o
Parse Server before 8.6.105 and 9.0.0 before 9.10.5-alpha.6 does not validate the owning object...
CVE-2026-116801
Parse Server before 8.6.105 and 9.0.0 before 9.10.5-alpha.6 does not validate the owning object reference in $relatedTo