In affected versions, Octopus Server incorrectly evaluates multiple scoped permission assignments...
CVE-2026-102488
In affected versions, Octopus Server incorrectly evaluates multiple scoped permission assignments, allowing a highly pri
#advisory
共收录 23210 条相关情报。
← 返回所有主题NXP MQX Classic before 5.0 contains an out-of-bounds write vulnerability in the RTCS UDP recvfrom...
CVE-2017-20283
NXP MQX Classic before 5.0 contains an out-of-bounds write vulnerability in the RTCS UDP recvfrom() implementation. Impr
A command injection vulnerability in the REST API management interface of Brocade Fabric OS...
CVE-2026-87680
A command injection vulnerability in the REST API management interface of Brocade Fabric OS versions before 10.0.1 allow
Multiple OS Command Injection vulnerabilities exist in the management interface and session...
CVE-2026-87682
Multiple OS Command Injection vulnerabilities exist in the management interface and session processing routines of Broca
An Access Control Bypass vulnerability exists in the Role-Based Access Control (RBAC) validation...
CVE-2026-87681
An Access Control Bypass vulnerability exists in the Role-Based Access Control (RBAC) validation engine of Brocade Fabri
Multiple stack-based buffer overflow vulnerabilities exist in the REST API management component...
CVE-2026-87683
Multiple stack-based buffer overflow vulnerabilities exist in the REST API management component of Brocade Fabric OS ver
The Uncanny Automator – AI + Automation for WordPress | AI Agent, AI Page Builder, Free AI Usage...
CVE-2026-82627
The Uncanny Automator – AI + Automation for WordPress | AI Agent, AI Page Builder, Free AI Usage Included plugin for Wor
The WSO2 Identity Server fails to enforce a default expiry time for SMS One-Time Passwords (OTPs)...
CVE-2024-8122
The WSO2 Identity Server fails to enforce a default expiry time for SMS One-Time Passwords (OTPs) used in multi-factor a
When Brocade Fabric OS versions before 10.0.1 processes trunk configuration operations, the...
CVE-2026-87679
When Brocade Fabric OS versions before 10.0.1 processes trunk configuration operations, the application parses user-supp
Vault's PKI secrets engine ACME server did not restrict certificate identities that ACME...
CVE-2026-105818
Vault's PKI secrets engine ACME server did not restrict certificate identities that ACME challenges do not validate when
The Aurora Heatmap plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url...
CVE-2026-94154
The Aurora Heatmap plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter in all vers
Vault and Vault Enterprise did not consistently verify that stored plugin catalog entries...
CVE-2026-105816
Vault and Vault Enterprise did not consistently verify that stored plugin catalog entries reference binaries within the
Vault and Vault Enterprise did not consistently evaluate ACL policies against the canonical form...
CVE-2026-89322
Vault and Vault Enterprise did not consistently evaluate ACL policies against the canonical form of resource and policy
The LatePoint - Appointment Booking & Reservation plugin for WordPress is vulnerable to Insecure...
CVE-2026-17538
The LatePoint - Appointment Booking & Reservation plugin for WordPress is vulnerable to Insecure Direct Object Reference
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-97664
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Vault's ACL policy cache allowed namespace traversal when policy names contained path traversal...
CVE-2026-105820
Vault's ACL policy cache allowed namespace traversal when policy names contained path traversal constructs. This may all
In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, and Splunk Secure...
CVE-2026-76280
In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, and Splunk Secure Gateway versions below 3.10.1
In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user who does not hold...
CVE-2026-76275
In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user who does not hold the "admin" or "power"
In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user that holds a role...
CVE-2026-76279
In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user that holds a role with the run_collect c
In Splunk MCP Server versions below 1.2.1, Splunk MCP Server could send the Splunk platform...
CVE-2026-76286
In Splunk MCP Server versions below 1.2.1, Splunk MCP Server could send the Splunk platform authentication token of a us