SmarterMail before build 9777 contains a remote code execution vulnerability that allows an...
CVE-2026-104082
SmarterMail before build 9777 contains a remote code execution vulnerability that allows an attacker holding a SysAdmin-
#advisory
共收录 23210 条相关情报。
← 返回所有主题pacioli: A submit consent marker licensed cancellation of caller-named pre-existing documents
CVE-2026-107841
pacioli provides least-privilege governance and a governed agent broker for ERPNext. From version 0.9.6 until version 0.
Improper authorization in query resolvers for SQL-backed models in AWS Amplify API Category
CVE-2026-108096
Improper authorization in the query resolvers generated by @aws-amplify/graphql-index-transformer in AWS Amplify API Cat
yopass Prometheus metrics middleware allows remote memory exhaustion through unbounded method labels
CVE-2026-107840
yopass is a service for securely sharing secrets, passwords, and files. Prior to version 14.7.0, the Prometheus metrics
ageLANServer: Unbounded JSON Array Allocation in AoE3 Cloud `getFileURL` Endpoint Leads to Remote Denial of Service
CVE-2026-107839
ageLANServer provides a cross-platform web server and launcher for offline multiplayer in several Age of Empires and Age
RIOT: nanocoap_fileserver ignores response initialization failure, leading to reachable assertion
CVE-2026-107838
RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded syste
RIOT: Out-of-Bounds Read in RIOT OS 6LoWPAN SFF Fragment Handling
CVE-2026-107837
RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded syste
RIOT: nanoCoAP Block2 client slice handling underflows on inconsistent server-controlled block size
CVE-2026-107836
RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded syste
OWASP Coraza WAF: Cookie Parser Confusion
CVE-2026-107835
OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. Prior to 3.8.1, internal/cookies.P
x64dbg-MCP Server exposes debugger operations to unauthenticated network clients
CVE-2026-107824
x64dbg-MCP Server is a native Model Context Protocol (MCP) plugin for x64dbg that exposes the debugger's full functional
x64dbg-MCP Server vulnerable to pre-authentication denial of service through Content-Length integer overflow
CVE-2026-107820
x64dbg-MCP Server is a native Model Context Protocol (MCP) plugin for x64dbg that exposes the debugger's full functional
OWASP Coraza WAF: Resource exhaustion via deferred file handle accumulation in multipart body processor
CVE-2026-107834
OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.0.0 until 3.8.0, the multip
OWASP Coraza WAF: Unbounded recursion in JSON response body processor causes CPU exhaustion
CVE-2026-107833
OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.0.0 until 3.8.0, ProcessRes
OWASP Coraza WAF: JSON body processor: argument-limit truncation reopens an unbounded-depth gjson.Valid stack overflow (process crash)
CVE-2026-107826
OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.0.0 until 3.8.1, readJSON i
OWASP Coraza WAF: ProcessURI silently drops QUERY_STRING and ARGS_GET on URI parse failure — defense-in-depth bypass for non-net/http integrations
CVE-2026-107825
OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.0.0 until 3.8.0, ProcessURI
MariaDB: privilege escalation via incorrect view frm parsing
CVE-2026-107823
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3
MariaDB: database privilege escalation via user / role name collision in the acl cache
CVE-2026-107822
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3
MariaDB: insufficient validation of binary frm data when opening a table
CVE-2026-107821
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3
MariaDB Connector/C: libmariadb allowed cleartext password leakage on TLS hostname verification failure
CVE-2026-107819
MariaDB Connector/C is a C and C++ client library for connecting applications to MariaDB and MySQL databases. From 3.4.1
MariaDB: environment injection via wsrep bootstrap in the mariadb.service file
CVE-2026-107818
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3