JuggleIM im-server through 1.8.16 contains a weak password hashing vulnerability that stores...
CVE-2026-111330
JuggleIM im-server through 1.8.16 contains a weak password hashing vulnerability that stores admin console passwords as
#advisory
共收录 22969 条相关情报。
← 返回所有主题JobOps through 0.13.1 contains a server-side request forgery vulnerability in the POST /api...
CVE-2026-111313
JobOps through 0.13.1 contains a server-side request forgery vulnerability in the POST /api/manual-jobs/fetch handler th
ValueCell through 0.1.20 contains an unauthenticated server-side request forgery vulnerability...
CVE-2026-111320
ValueCell through 0.1.20 contains an unauthenticated server-side request forgery vulnerability that allows remote attack
snap7 through 1.4.3 contains an out-of-bounds write vulnerability in TSnap7MicroClient:...
CVE-2026-111280
snap7 through 1.4.3 contains an out-of-bounds write vulnerability in TSnap7MicroClient::opReadArea() that allows malicio
BMC Helix Network Management on-prem before 26.3.01 contains an authentication bypass...
CVE-2026-111283
BMC Helix Network Management on-prem before 26.3.01 contains an authentication bypass vulnerability that allows unauthen
Jooan JA-A12 IP cameras with firmware 009_20171107 and 05.02.31.105 contain a remote code...
CVE-2026-111281
Jooan JA-A12 IP cameras with firmware 009_20171107 and 05.02.31.105 contain a remote code execution vulnerability that a
Dragonfly through 2.0.2 contains an unbounded memory allocation vulnerability that allows...
CVE-2026-111279
Dragonfly through 2.0.2 contains an unbounded memory allocation vulnerability that allows unauthenticated clients to exh
Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute...
CVE-2026-110921
Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside
Driftregion iso14229 before 0.10.1 contains an integer wraparound in...
CVE-2026-111282
Driftregion iso14229 before 0.10.1 contains an integer wraparound in Handle_0x38_RequestFileTransfer that lets unauthent
NivoCart through 2.5.1 contains a CAPTCHA bypass vulnerability that allows unauthenticated...
CVE-2026-111278
NivoCart through 2.5.1 contains a CAPTCHA bypass vulnerability that allows unauthenticated attackers to defeat form prot
libmodplug through 0.8.9.1 contains a heap-based out-of-bounds write in CSoundFile::ReadDSM() in...
CVE-2026-111270
libmodplug through 0.8.9.1 contains a heap-based out-of-bounds write in CSoundFile::ReadDSM() in src/load_dsm.cpp becaus
unarr through 1.1.1 contains a heap-based out-of-bounds read in zip_parse_extra_fields() in zip...
CVE-2026-111274
unarr through 1.1.1 contains a heap-based out-of-bounds read in zip_parse_extra_fields() in zip/parse-zip.c due to an in
libical through 4.0.6 contains a heap-based out-of-bounds read in icalvalue_decode_ical_string()...
CVE-2026-111269
libical through 4.0.6 contains a heap-based out-of-bounds read in icalvalue_decode_ical_string() in src/libical/icalvalu
libmodplug through 0.8.9.1 contains a heap-based out-of-bounds read vulnerability in CSoundFile:...
CVE-2026-111271
libmodplug through 0.8.9.1 contains a heap-based out-of-bounds read vulnerability in CSoundFile::ReadAMS2() in src/load_
nifti_clib through 3.0.1 contains a stack-based out-of-bounds read and write vulnerability in...
CVE-2026-111275
nifti_clib through 3.0.1 contains a stack-based out-of-bounds read and write vulnerability in nifti_convert_n2hdr2nim()
NivoCart through 2.5.1 contains a missing authorization vulnerability in the download() action of...
CVE-2026-111277
NivoCart through 2.5.1 contains a missing authorization vulnerability in the download() action of account/order that all
OpenHealth through 0.2.0 contains a missing authentication and authorization vulnerability in the...
CVE-2026-111312
OpenHealth through 0.2.0 contains a missing authentication and authorization vulnerability in the /api/health-data/[id]
Use after free in Prerender in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to...
CVE-2026-110922
Use after free in Prerender in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code
Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute...
CVE-2026-110919
Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside
Memory corruption in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to...
CVE-2026-110920
Memory corruption in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code insi