DOMPurify before 3.4.17 contains a cross-site scripting vulnerability that allows attackers to...
CVE-2026-116802
DOMPurify before 3.4.17 contains a cross-site scripting vulnerability that allows attackers to bypass the SMIL attribute
2026-10-27 归档
今日共收录 787 条安全情报，包含 0 个 CVE，405 篇安全通告，以及 97 篇研究论文。
← 返回归档列表An NTLM coercion vulnerability exists on Windows nodes when the subPath supplied in a pod's...
CVE-2026-76654
An NTLM coercion vulnerability exists on Windows nodes when the subPath supplied in a pod's volumeMounts is set to a sym
A vulnerability has been found in SourceCodester Online Food Ordering System 1.0. The affected...
CVE-2026-116604
A vulnerability has been found in SourceCodester Online Food Ordering System 1.0. The affected element is an unknown fun
DOMPurify before 3.4.17 contains a cross-site scripting vulnerability that allows attackers to...
CVE-2026-116803
DOMPurify before 3.4.17 contains a cross-site scripting vulnerability that allows attackers to keep event handlers armed
A vulnerability was found in Argilla up to 2.8.0. This affects an unknown function of the file...
CVE-2026-116556
A vulnerability was found in Argilla up to 2.8.0. This affects an unknown function of the file argilla-frontend/componen
A confused deputy attack exists in the StatefulSet controller that allows a user with namespace...
CVE-2026-2270
A confused deputy attack exists in the StatefulSet controller that allows a user with namespace-scoped write permissions
A flaw has been found in SourceCodester Online Food Ordering System 1.0. Impacted is an unknown...
CVE-2026-116603
A flaw has been found in SourceCodester Online Food Ordering System 1.0. Impacted is an unknown function of the file adm
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-66044
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
QloApps 1.6.0 through 1.7.0 contains a missing authorization vulnerability in the qlohotelreview...
CVE-2026-116746
QloApps 1.6.0 through 1.7.0 contains a missing authorization vulnerability in the qlohotelreview module's AddReview AJAX
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-65686
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Transmission 4.0.0 before 4.1.3 contains a permissive CORS vulnerability in handle_request() in...
CVE-2026-116748
Transmission 4.0.0 before 4.1.3 contains a permissive CORS vulnerability in handle_request() in rpc-server.cc that expos
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-66045
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
ntop nDPI through 6.0 contains an out-of-bounds read vulnerability in dissect_softether_host_fqdn...
CVE-2026-116744
ntop nDPI through 6.0 contains an out-of-bounds read vulnerability in dissect_softether_host_fqdn() in softether.c that
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-77924
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
QloApps through 1.7.0 contains an information disclosure vulnerability in...
CVE-2026-116745
QloApps through 1.7.0 contains an information disclosure vulnerability in OrderConfirmationController::init() that allow
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-66042
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
flatcc through 0.6.4 contains an integer overflow vulnerability in the check_header function of...
CVE-2026-116734
flatcc through 0.6.4 contains an integer overflow vulnerability in the check_header function of the FlatBuffers verifier
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-66043
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Kener 3.0.0 before 4.1.10 contains an authentication bypass vulnerability that allows...
CVE-2026-116747
Kener 3.0.0 before 4.1.10 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-65685
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.