Microsoft Security Advisory CVE-2026-92707 - ASP.NET Core Denial of Service Vulnerability
## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Micr
#advisory
共收录 23043 条相关情报。
← 返回所有主题Microsoft Security Advisory CVE-2026-70162 - .NET Denial of Service Vulnerability
CVE-2026-70162
## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Syst
dataclasses-avroschema enum symbols can inject statements through generated member names
CVE-2026-108385
dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates
dataclasses-avroschema allows code injection through fixed-type aliases supplied as a bare string
CVE-2026-108384
dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates
dataclasses-avroschema enum field defaults can inject statements into generated modules
CVE-2026-108383
dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates
Potential command execution on the host running JFrog CLI.
CVE-2026-92892
Potential arbitrary code execution, under specific configurations.
dataclasses-avroschema allows code injection through generated enum-symbol string literals
CVE-2026-108382
dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates
dataclasses-avroschema pydantic-class metadata allows code injection in generated annotations
CVE-2026-108381
dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates
dataclasses-avroschema field documentation allows code injection in generated Pydantic descriptions
CVE-2026-108380
dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates
dataclasses-avroschema fixed namespaces allow code injection in generated annotations
CVE-2026-108379
dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates
dataclasses-avroschema record documentation can terminate generated class docstrings
CVE-2026-108378
dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates
dataclasses-avroschema allows code injection through generated Meta.schema_name
CVE-2026-108377
dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates
dataclasses-avroschema allows code injection through record names in generated default factories
CVE-2026-108376
dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates
dataclasses-avroschema allows code injection through generated field-default literals
CVE-2026-108375
dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates
libsndfile WAV Parsing wavlike.c wavlike_subchunk_parse uninitialized variable
CVE-2026-109828
A vulnerability was found in libsndfile up to 1.2.2. This issue affects the function wavlike_subchunk_parse of the file
ThriveX-Server through 4.0 Missing Authorization via Article Retrieval Endpoints
CVE-2026-110131
ThriveX-Server through 4.0 contains a missing authorization vulnerability in the GET /api/article and /api/article/{id}
fuintCatering through commit 122c9e6 IDOR via /clientApi/refund/detail
CVE-2026-110129
fuintCatering through commit 122c9e6 contains an insecure direct object reference vulnerability in the ClientRefundContr
fuint through commit 4c4bc8a Missing Authentication via /clientApi/order/detail
CVE-2026-110128
fuint through commit 4c4bc8a contains a missing authentication vulnerability that allows unauthenticated attackers to re
waynboot-mall through 2.0.0 IDOR via Mobile Cart Endpoints
CVE-2026-110127
waynboot-mall through 2.0.0 contains an insecure direct object reference vulnerability in the mobile CartController that
waynboot-mall through 2.0.0 IDOR via Mobile Address Endpoints
CVE-2026-110126
waynboot-mall through 2.0.0 contains an insecure direct object reference vulnerability in AddressController that allows