MariaDB: one byte OOB write in DOS tables of the CONNECT engine
CVE-2026-107815
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3
#advisory
共收录 23210 条相关情报。
← 返回所有主题AstronRPA through 1.1.6 Unsigned Update Installation via Plain-HTTP Feed
CVE-2026-108160
AstronRPA through 1.1.6 contains a download of code without integrity check vulnerability that allows network attackers
AstronRPA through 1.1.6 RCE via Smart-Component Chat XSS and IPC Bridge
CVE-2026-108159
AstronRPA through 1.1.6 contains a cross-site scripting vulnerability in the desktop client's smart-component chat that
plugNmeet Server through 2.5.2 Path Traversal via /api/whiteboard/convert
CVE-2026-108158
plugNmeet Server through 2.5.2 contains a path traversal vulnerability in the whiteboard conversion endpoint that allows
Pingvin Share X 0.19.0 before 1.22.0 Account Takeover via OAuth Email Linking
CVE-2026-108157
Pingvin Share X from 0.19.0 before 1.22.0 contains an improper authentication vulnerability that allows remote unauthent
LobsterAI 2026.5.27 through 2026.9.23 Arbitrary Directory Deletion via Skill _meta.json
CVE-2026-108156
LobsterAI 2026.5.27 through 2026.9.23 contains an external control of file path vulnerability in the skills:delete IPC h
MariaDB: Insecure $HOME in MariaDB rpm packages
CVE-2026-107814
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3
Nginx UI: Incomplete fix of CVE-2026-84315 - the api/cluster router was not - wrapped in RequireSecureSession, so those sensitive mutations run without OTP step-up
CVE-2026-107813
Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, the api/cluster router exposes node a
Nginx UI: Self-upgrade runs an unsigned binary verified only by a same-origin digest → RCE via a compromised mirror or MITM
CVE-2026-107812
Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, the self-upgrade mechanism validates
Insertion of sensitive information into log file in AWS Tools for PowerShell
CVE-2026-107783
Insertion of sensitive information into log file in AWS Tools for PowerShell before 5.0.306 might allow local users to r
0xJacky/nginx-ui /api/nodes Leaks Cluster Node Tokens and Allows Cross-Node Impersonation as initUser
CVE-2026-107811
Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, ordinary authenticated users can acce
Nginx UI: Backup restore follows crafted symlinks into the live Nginx configuration path before restore flags are applied
CVE-2026-107810
Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, internal/backup/restore.go extracts i
Nginx-UI AuthRequired token cookie fallback enables CSRF against management APIs
CVE-2026-107809
Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, AuthRequired accepts a browser-manage
Nginx UI: Authentication bypass: password login does not enforce a passkey-only second factor (2FA bypass)
CVE-2026-107808
Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, POST /api/login checks EnabledOTP but
ILIAS before 9.24, 10.12, and 11.5 Unrestricted File Upload via QTI Import
CVE-2026-108113
ILIAS before 9.24, 10.12, and 11.5 contains an unrestricted file upload vulnerability in QTI question import image handl
ruoyi-ai 3.0.0 through 3.1.0 Missing Authorization via Workflow Delete Endpoint
CVE-2026-108112
ruoyi-ai 3.0.0 through 3.1.0 contains a missing authorization vulnerability that allows authenticated users to delete ot
ruoyi-ai 3.0.0 through 3.1.0 Missing Authorization via /workflow/search
CVE-2026-108111
ruoyi-ai 3.0.0 through 3.1.0 contains a missing authorization vulnerability in the GET /workflow/search endpoint that ex
MOVO through 0.2.3 Authorization Bypass via Document Endpoints
CVE-2026-108110
MOVO through 0.2.3 contains an authorization bypass vulnerability in the chat-api document endpoints that allows authent
Nginx UI: Node Secret Credential Exposure via URL Query Parameter
CVE-2026-107807
Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, Nginx UI accepts the Node.Secret mast
Nginx UI: Authenticated Remote Code Execution via Backup Restore App Config Overwrite
CVE-2026-107806
Nginx UI is a web user interface for the Nginx web server. From 2.3.8 until 2.5.0, an authenticated administrator with a