Zebra before 6.4.0 Denial of Service via Same-Hash Forged Block Bodies
CVE-2026-109365
Zebra before 6.4.0 contains an uncontrolled resource consumption vulnerability that allows unauthenticated peers to forc
#advisory
共收录 23043 条相关情报。
← 返回所有主题Zebra 2.3.0 before 6.4.0 Peer Ban Bypass via Exact-IP Keying
CVE-2026-109364
Zebra 2.3.0 before 6.4.0 contains a protection mechanism failure that allows unauthenticated peers to evade bans because
Zebra 6.4.0 before 6.4.2 Denial of Service via Malformed v6 Transaction
CVE-2026-109363
ZcashFoundation Zebra 6.4.0 before 6.4.2 parses version 6 transactions carrying a pre-NU6.3 consensus branch ID, but the
Heym v0.0.5 before v0.0.113 Broken Access Control via Workflow Execution Tokens
CVE-2026-109362
Heym v0.0.5 before v0.0.113 contains a broken access control vulnerability that allows former collaborators to keep exec
MONAI 1.2.0 before 1.6.1 Insecure Deserialization RCE via nnUNetV2Runner postprocessing_file Path
CVE-2026-109361
MONAI 1.2.0 before 1.6.1 contains an insecure deserialization vulnerability in nnUNetV2Runner that unpickles the postpro
MONAI 0.4.0 before 1.6.1 RCE via SENet Pretrained Weights Over Plaintext HTTP
CVE-2026-109360
MONAI 0.4.0 before 1.6.1 contains a remote code execution vulnerability that allows on-path attackers to execute code by
Contrast 1.8.0 before 1.24.1 Mesh CA Key Cross-Manifest Exposure via Peer Recovery
CVE-2026-109359
Contrast 1.8.0 before 1.24.1 contains an improper verification vulnerability in Coordinator peer recovery that fails to
Edgeless Systems Contrast 1.8.0 before 1.24.1 World-Writable Containerd Config Privilege Escalation
CVE-2026-109358
Edgeless Systems Contrast 1.8.0 before 1.24.1 contains an incorrect permissions vulnerability where the node installer w
LibreNMS before 26.9.0 LDAP Filter Injection Authentication Bypass via Authorization Header
CVE-2026-109357
LibreNMS before 26.9.0 contains an LDAP filter injection in ldap-authorization and ad-authorization modes because userna
LibreNMS before 26.9.0 Missing Authorization in Port Purge via PortsController
CVE-2026-109356
LibreNMS before 26.9.0 contains a missing authorization vulnerability in PortsController::purge that allows global-read
LibreNMS before 26.9.0 Stored XSS via Tools Oxidized Node List
CVE-2026-109355
LibreNMS before 26.9.0 contains a stored cross-site scripting vulnerability in get_oxidized_nodes_list() that renders Ox
LibreNMS before 26.9.0 Path Traversal via NFSen channel Parameter
CVE-2026-109354
LibreNMS before 26.9.0 contains a path traversal vulnerability in nfsen_channel_common.inc.php that allows authenticated
LibreNMS before 26.9.0 SQL Injection via notification_id in notifications.inc.php
CVE-2026-109353
LibreNMS before 26.9.0 contains an SQL injection vulnerability that allows unprivileged users to inject SQL by supplying
LibreNMS before 26.9.0 Stored XSS via wireless sensor description
CVE-2026-109352
LibreNMS before 26.9.0 contains a stored cross-site scripting vulnerability in includes/html/pages/device/wireless.inc.p
Gitoxide gix-pack before 0.75.0 Denial of Service via Pack Header Object Count
CVE-2026-109351
Gitoxide gix-pack before 0.75.0 contains an uncontrolled memory allocation vulnerability that allows remote attackers to
Gitoxide gix-pack before 0.75.0 Denial of Service via OFS_DELTA Base Distance
CVE-2026-109350
Gitoxide gix-pack before 0.75.0 contains a denial of service vulnerability that allows malicious remotes to crash fetch
gix-pack before 0.75.0 Reachable Assertion DoS via Pack Version 3 Header
CVE-2026-109349
gitoxide gix-pack before 0.75.0 contains a reachable assertion in BytesToEntriesIter::new_from_header: the pack header d
Gitoxide gix-mailmap before 0.35.0 CPU Denial of Service via .mailmap Parsing
CVE-2026-109348
Gitoxide gix-mailmap before 0.35.0 contains a denial of service vulnerability that allows attackers to exhaust CPU throu
Adminer before 6.1.1 RCE via UTF-8 BOM SQLite ATTACH Bypass
CVE-2026-109347
Adminer before 6.1.1 contains a remote code execution vulnerability that allows authenticated SQLite users to bypass ATT
better-auth 1.3.8-beta.3 before 1.7.0-rc.3 Device Authorization Phishing via /device
CVE-2026-109346
better-auth from 1.3.8-beta.3 before 1.7.0-rc.3 contains a UI misrepresentation vulnerability in the deviceAuthorization