Nezha Dashboard from 1.8.0 before 2.3.13 contains an improper locking vulnerability where a non...
CVE-2026-105113
Nezha Dashboard from 1.8.0 before 2.3.13 contains an improper locking vulnerability where a non-deferred mutex unlock le
#advisory
共收录 23210 条相关情报。
← 返回所有主题CWE-306: Missing Authentication for Critical Function in the ait.core.server telemetry and...
CVE-2026-105105
CWE-306: Missing Authentication for Critical Function in the ait.core.server telemetry and command broker (ait-server) i
A vulnerability has been found in Linux Mint Xreader up to 4.6.9. Impacted is the function...
CVE-2026-104983
A vulnerability has been found in Linux Mint Xreader up to 4.6.9. Impacted is the function g_file_get_child of the file
OpenAM before 16.1.3 SSRF via OpenID Connect Client jwks_uri
CVE-2026-105122
OpenAM before 16.1.3 contains a server-side request forgery vulnerability that allows attackers able to register or modi
OpenAM before 16.1.3 Improper Authorization in Delegated Session-Destroy Realm Scoping
CVE-2026-105121
OpenAM before 16.1.3 contains an improper authorization vulnerability that allows delegated administrators to destroy se
OpenAM before 16.1.3 Cross-Realm Session Disclosure via Sessions REST Endpoint
CVE-2026-105120
OpenAM before 16.1.3 contains an authorization bypass vulnerability in the sessions REST endpoint query operation that a
OpenAM before 16.1.3 PKCE Enforcement Bypass via OAuth 2.0 Hybrid Flows
CVE-2026-105119
OpenAM before 16.1.3 applies its OAuth2 Provider PKCE enforcement only to authorization requests whose response_type is
OpenAM before 16.1.3 Open Redirect via Unverified id_token_hint in endSession
CVE-2026-105118
OpenAM before 16.1.3 contains an open redirect vulnerability that allows unauthenticated attackers to redirect users by
OpenAM before 16.1.3 Email Content Injection via Users REST Self-Service Actions
CVE-2026-105117
OpenAM before 16.1.3 contains an email content injection vulnerability that allows unauthenticated attackers to control
OpenAM before 16.1.3 Latent XSS in SAML Load-Balancer Cookie Bounce Page
CVE-2026-105116
OpenAM before 16.1.3 contains a latent cross-site scripting defect that places the SAML message, relay state and target
OpenAM before 16.1.3 Unauthenticated Arbitrary Class Instantiation via JAX-RPC Interface
CVE-2026-105115
OpenAM before 16.1.3 contains an unauthenticated arbitrary class instantiation vulnerability in the legacy JAX-RPC SOAP
OpenAM before 16.1.3 Reflected XSS via OAuth2 Authorization Error Page
CVE-2026-105114
OpenAM before 16.1.3 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to in
Nezha 1.8.0 before 2.3.13 Denial of Service via Notification Mutex Deadlock
CVE-2026-105113
Nezha Dashboard from 1.8.0 before 2.3.13 contains an improper locking vulnerability where a non-deferred mutex unlock le
Nezha 1.8.0 before 2.3.13 Deadlock DoS via notification-group endpoints
CVE-2026-105112
Nezha from 1.8.0 before 2.3.13 contains a lock-order inversion in UpdateGroup and DeleteGroup that allows authenticated
Unauthenticated ZeroMQ command/telemetry bus in AIT-Core allows remote spacecraft command injection and telemetry exfiltration
CVE-2026-105105
CWE-306: Missing Authentication for Critical Function in the ait.core.server telemetry and command broker (ait-server) i
Linux Mint Xreader PDF Attachment Saving ev-window.c g_file_get_child path traversal
CVE-2026-104983
A vulnerability has been found in Linux Mint Xreader up to 4.6.9. Impacted is the function g_file_get_child of the file
The The Beaver Builder Page Builder – Drag and Drop Website Builder plugin for WordPress is...
CVE-2026-92084
The The Beaver Builder Page Builder – Drag and Drop Website Builder plugin for WordPress is vulnerable to arbitrary shor
In Bouncy Castle for Java before 1.86, the Messaging Layer Security (MLS, RFC 9420)...
CVE-2026-71885
In Bouncy Castle for Java before 1.86, the Messaging Layer Security (MLS, RFC 9420) implementation did not bind an X.509
In Bouncy Castle for Java before 1.86, BLS12_381BasicScheme.keyValidate, and so...
CVE-2026-71891
In Bouncy Castle for Java before 1.86, BLS12_381BasicScheme.keyValidate, and so BLSPublicKeyParameters and every BasicSc
In Bouncy Castle for Java before 1.86, the high-level OpenPGP API accepted a data signature made...
CVE-2026-71887
In Bouncy Castle for Java before 1.86, the high-level OpenPGP API accepted a data signature made by a signing subkey who