oretnom23 php-travel-agency-system Admin Record Pages customer_detail.php sql injection
CVE-2026-117514
A vulnerability was identified in oretnom23 php-travel-agency-system. This issue affects some unknown processing of the
2026-10-28 归档
今日共收录 2009 条安全情报，包含 1141 个 CVE，471 篇安全通告，以及 100 篇研究论文。
← 返回归档列表TinyMCE Cross-Site Scripting (XSS) vulnerability using media plugin `data-mce-object` serialization
CVE-2026-116675
TinyMCE is an open source rich text editor. From 7.9.3 until 7.9.4 and from 8.5.1 until 8.9.3, the media plugin creates
oretnom23 php-travel-agency-system Admin Search Pages customer_search.php sql injection
CVE-2026-117513
A vulnerability was determined in oretnom23 php-travel-agency-system. This vulnerability affects unknown code of the fil
systeminformation: Prototype pollution in `networkStats()` via the interface name
CVE-2026-116674
systeminformation is a System and OS information library for node.js. Prior to 5.33.13, networkStats(ifaces) in lib/netw
systeminformation: Path traversal in Linux networkStats() allows symlink-based file disclosure outside /sys/class/net
CVE-2026-116673
systeminformation is a System and OS information library for node.js. Prior to 5.33.14, the Linux networkStats(iface) im
libXi XGetDeviceControl DEVICE_ENABLE Heap Buffer Overflow
CVE-2026-109090
A malicious X server could cause a heap overflow by injecting a large DEVICE_ENABLE reply when processed by libXi before
Authlib RFC 7592 examples omit registration-access-token client binding
CVE-2026-116672
Authlib is a Python library which builds OAuth and OpenID Connect servers. From 0.15 until 1.9.1, the documented ClientC
oretnom23 php-travel-agency-system employee_insert.php unrestricted upload
CVE-2026-117512
A vulnerability was found in oretnom23 php-travel-agency-system. This affects an unknown part of the file admin/employee
libXtst RECORD EnableContext Reply Endless Loop
CVE-2026-109088
A malicious X server could send malformed RECORD EnableContext reolies that can cause a X client using the parse_reply_
knative.dev/pkg admission webhooks allow unbounded request-body memory exhaustion
CVE-2026-54462
Knative pkg provides common packages shared across Knative repositories. Prior to 0.0.0-20260531000007-52dbd5ece63f, the
libXi XGetDeviceControl Control Type Mismatch Heap Buffer Overflow
CVE-2026-109089
A buffer overflow when handling DEVICE_RESOLUTION in libXi before 1.8.4 could overflow a heap, triggered by a malicious
desmondmorris node-tesseract Command Builder tesseract.js process os command injection
CVE-2026-117511
A vulnerability has been found in desmondmorris node-tesseract up to 0.2.7. Affected by this issue is the function proce
Host filesystem path disclosure via DNS rebinding
CVE-2026-109823
An attacker can read the name of filesystem paths of your application present via Tidewave configuration via /tidewave/c
Dexmal Dexbotic gr00tsonic Checkpoint Loader gr00tsonic_arch.py load_pretrained_gr00t path traversal
CVE-2026-117510
A flaw has been found in Dexmal Dexbotic up to 0.2.0. Affected by this vulnerability is the function load_pretrained_gr0
a2aproject a2a-java TaskManager.saveTaskEvent race condition
CVE-2026-117507
A security vulnerability has been detected in a2aproject a2a-java up to 1.2.0.Final. This impacts the function TaskManag
a2aproject a2a-java Push Notification Config Store JpaDatabasePushNotificationConfigStore.java InMemoryPushNotificationConfigStore.setInfo resource consumption
CVE-2026-117506
A weakness has been identified in a2aproject a2a-java up to 1.2.0.Final. This affects the function InMemoryPushNotificat
Grav from 1.7.53.3 before 1.7.53.6 Clockwork Profiler Authorization Bypass via Loopback Fallback
CVE-2026-117604
Grav from 1.7.53.3 before 1.7.53.6 contains an authorization bypass in Debugger::isDebuggerRequestAuthorized() that allo
a2aproject a2a-java ChildQueue queue.offer resource consumption
CVE-2026-117505
A security flaw has been discovered in a2aproject a2a-java up to 1.2.0.Final. The impacted element is the function queue
The UniPAY Payment Gateway For WooCommerce WordPress plugin through 2.3 does not properly verify the authenticity of payment notifications, as their signature is checked against...
CVE-2026-103331
The UniPAY Payment Gateway For WooCommerce WordPress plugin through 2.3 does not properly verify the authenticity of pay
Insufficiently Protected Credentials in tunnel gateway and provisioning interfaces in EagleCloud Aquila versions through 2.6.7.2 on on-premises platforms allows unauthenticated ...
CVE-2026-104384
Insufficiently Protected Credentials in tunnel gateway and provisioning interfaces in EagleCloud Aquila versions through