In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user that holds a role...
CVE-2026-76277
In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user that holds a role with the edit_user cap
#advisory
共收录 23210 条相关情报。
← 返回所有主题Protection Mechanism Failure. Splunk addressed multiple internally identified vulnerabilities in...
CVE-2026-76283
Protection Mechanism Failure. Splunk addressed multiple internally identified vulnerabilities in Splunk Enterprise versi
Improper Neutralization. Splunk addressed multiple internally identified vulnerabilities in...
CVE-2026-76284
Improper Neutralization. Splunk addressed multiple internally identified vulnerabilities in Splunk Enterprise versions 1
Improper Access Control. Splunk addressed multiple internally identified vulnerabilities in...
CVE-2026-76281
Improper Access Control. Splunk addressed multiple internally identified vulnerabilities in Splunk Enterprise versions 1
PraisonAI: Prompt Injection Defense Bypassed for HIGH-Level Threats
CVE-2026-61439
### Summary Injection Defense is a purpose-built prompt injection defense layer. It scans LLM inputs through six detecti
Ghost: Remote Code Execution via Bookmark Card Images
CVE-2026-105642
### Impact An image processing library bundled with Ghost contained a vulnerability in its SVG handling. Any staff user
Ghost: Stored XSS via Embed Card Previews
CVE-2026-105643
### Impact Embed cards in the Ghost editor could be used to bypass the fix for GHSA-8vhf-xxpj-4qrg. Any staff user, inc
Ghost : Stored XSS via SVG Files in Content Imports
CVE-2026-105644
### Impact SVG images included in content imports were stored without sanitization. An attacker who convinced an Admini
Ghost: Regular Expression Denial of Service in External Media Inliner
CVE-2026-105645
### Impact A crafted request to the external media inliner could cause excessive CPU usage, making the Ghost server unr
Ghost: Regular Expression Denial of Service in Content Import
CVE-2026-105646
### Impact A crafted content import file could cause excessive CPU usage, making the Ghost server unresponsive. Exploit
RabbitMQ: JSONReader in the default JSON-RPC mapper never terminates on truncated input, causing DoS
CVE-2026-106121
## Summary `com.rabbitmq.tools.json.JSONReader.read()` never returns when its input ends inside a quoted string or a `/
Docling: Configured HTTP headers sent to every remote image host named by a document
CVE-2026-105742
### Summary `HTMLBackendOptions.headers` is documented for passing authentication headers (API keys, bearer tokens) whe
Docling has SSRF guard bypass in remote resource fetching (DNS rebinding / multi-record resolution; no IP validation in HTML render mode)
CVE-2026-105743
### Summary When remote fetching is enabled (`enable_remote_fetch=True`, together with `fetch_images=True` or HTML `ren
Docling has arbitrary file read/write (and command execution when shell-escape is enabled) when rendering untrusted TikZ with the opt-in Tectonic engine
CVE-2026-105744
### Summary When the LaTeX backend is configured to render TikZ pictures with the Tectonic engine (`LatexBackendOptions
Docling: Crafted DoclingDocument JSON embeds local image files into converted output
CVE-2026-105748
### Summary docling accepts serialized `DoclingDocument` JSON as an input format (`InputFormat.JSON_DOCLING`, enabled b
Docling: Unbounded table rowspan/colspan in HTML, JATS, ODS and BoxNote backends causes CPU/memory exhaustion
CVE-2026-105749
### Summary The HTML, JATS, ODS (OpenDocument spreadsheet) and BoxNote backends accept table `rowspan` / `colspan` valu
Docling imports plugin entry points before the allow_external_plugins check
CVE-2026-105745
### Summary `allow_external_plugins=False` (the default, and the CLI default) is meant to restrict docling to its own m
Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration
CVE-2026-105697
### Summary Before **Langflow 1.10.3**, the MCP stdio transport launched whatever `command` / `args` a user put in an M
Langflow : Cross-user flow access and vertex execution via deprecated /api/v1/build/{flow_id}/vertices endpoints
CVE-2026-105698
### Summary Before **Langflow 1.10.1**, two deprecated but still-routed endpoints in the chat API did not check that th
yawkat LZ4 Java: Native library extraction to a shared temporary directory is vulnerable to file replacement by another local user
CVE-2026-106451
### Summary When no system-installed `liblz4-java` is found, `net.jpountz.util.Native.load()` extracts the bundled nati