Phproject before 1.8.7 contains a missing object-level authorization vulnerability in the REST...
CVE-2026-104991
Phproject before 1.8.7 contains a missing object-level authorization vulnerability in the REST API issue endpoints (sing
#advisory
共收录 23210 条相关情报。
← 返回所有主题An information exposure vulnerability in Canonical MAAS prior to versions 3.4.10, 3.5.14, 3.6.5,...
CVE-2026-12392
An information exposure vulnerability in Canonical MAAS prior to versions 3.4.10, 3.5.14, 3.6.5, 3.7.3, and 3.8.0 allows
UTMStack before 11.2.16 contains a SQL injection vulnerability in UtmAssetGroupService...
CVE-2026-82039
UTMStack before 11.2.16 contains a SQL injection vulnerability in UtmAssetGroupService.searchQueryBuilder() that allows
Weak authorization in Microsoft Exchange Server allows an authenticated attacker to elevate...
CVE-2026-96940
Weak authorization in Microsoft Exchange Server allows an authenticated attacker to elevate privileges over a network.
The All in One SEO WordPress plugin before 5.0.2.1 does not correctly determine which shortcodes...
CVE-2026-19856
The All in One SEO WordPress plugin before 5.0.2.1 does not correctly determine which shortcodes are present in content
H3C CVM, the Cloud Virtualization Management component of the H3C CAS cloud platform, contains an...
CVE-2023-54405
H3C CVM, the Cloud Virtualization Management component of the H3C CAS cloud platform, contains an unauthenticated arbitr
Weaver e-Bridge contains an unauthenticated arbitrary file read vulnerability that allows remote...
CVE-2020-37278
Weaver e-Bridge contains an unauthenticated arbitrary file read vulnerability that allows remote attackers to access arb
CodeArt Google MP3 Audio Player plugin (google-mp3-audio-player) for WordPress through 1.0.11...
CVE-2014-125130
CodeArt Google MP3 Audio Player plugin (google-mp3-audio-player) for WordPress through 1.0.11 contains an unauthenticate
Monitoring-user password logged in cleartext by postgres_exporter in postgresql VM charm
CVE-2026-104055
The postgresql-operator charm runs a Prometheus postgres_exporter to collect database metrics using a dedicated "monitor
Trigger.dev: Server-side request forgery via unvalidated webhook alert-channel URL
### Summary A project member can create a webhook alert channel whose delivery URL points at an internal address, and tr
Trigger.dev: Run replay injects a task run into an attacker-chosen environment (cross-tenant write)
### Summary The dashboard replay action authorizes the source run (it must belong to the caller's org), but the target e
RPC secret disclosure via vendor data endpoint in Canonical MAAS
CVE-2026-12392
An information exposure vulnerability in Canonical MAAS prior to versions 3.4.10, 3.5.14, 3.6.5, 3.7.3, and 3.8.0 allows
Composer: GHSA-gjfg-22fp-rrxx fix bypass via symlinked package bin path
CVE-2026-59944
## Summary A malicious or compromised Composer package could, when installed as a dependency, cause Composer to change
Dulwich: Arbitrary File Write (RCE) on Windows via Unvalidated Drive Letters in Tree Paths
### Affected files * `dulwich/index.py` (Methods: `validate_path_element_ntfs`, `_tree_to_fs_path`) * `dulwich/porcelain
Server-side request forgery in the tool server and remote agent connection handling in Loom for AWS
CVE-2026-103958
Server-side request forgery in the tool server and remote agent connection handling in Loom for AWS before 1.7.0 might a
Server-side request forgery in the OAuth2 discovery handling in Loom for AWS
CVE-2026-103957
Server-side request forgery in the OAuth2 discovery handling in Loom for AWS before 1.7.0 might allow an authenticated r
Missing authentication for critical function in Loom for AWS
CVE-2026-103956
Missing authentication for critical function in the authentication dependency in Loom for AWS before 1.6.1 allowed remot
Dulwich: Infinite Loop Denial of Service (DoS) in Packfile Object Resolution
### Affected file * `dulwich/pack.py` (Method: `Pack.resolve_object`) ### Description / Summary A High-severity Denial
Dulwich: Symlink write-through in checkout(paths=[]) via raw os.open bypasses all symlink protections
## Summary Dulwich's `porcelain.checkout(paths=[...])` code path writes files using raw `os.open(file_path, O_WRONLY|O_
Dulwich: Symlink directory traversal in filter-branch index_filter via cross-commit state persistence
## Summary Dulwich's `filter_branch.py` `CommitFilter._apply_index_filter()` is vulnerable to symlink directory travers