Discord libdave before 1.2.0 did not reject an MLS Welcome message when the resulting group...
CVE-2026-104480
Discord libdave before 1.2.0 did not reject an MLS Welcome message when the resulting group roster contained an unrecogn
#advisory
共收录 23210 条相关情报。
← 返回所有主题An API key is hardcoded and retrievable from the application package. Since Android applications...
CVE-2026-103097
An API key is hardcoded and retrievable from the application package. Since Android applications can be reverse engineer
A security vulnerability has been detected in modelcontextprotocol mcp-server-fetch and mcp...
CVE-2026-104120
A security vulnerability has been detected in modelcontextprotocol mcp-server-fetch and mcp-server-everything up to 2026
A vulnerability was determined in itsourcecode Pet Shop Management System 1.0. The affected...
CVE-2026-104052
A vulnerability was determined in itsourcecode Pet Shop Management System 1.0. The affected element is an unknown functi
Transmission of a sensitive key in the URL over an unencrypted HTTP connection. The request is...
CVE-2026-103098
Transmission of a sensitive key in the URL over an unencrypted HTTP connection. The request is sent over HTTP rather th
A vulnerability was detected in SourceCodester Online Reviewer Management System 1.0. Affected by...
CVE-2026-104123
A vulnerability was detected in SourceCodester Online Reviewer Management System 1.0. Affected by this vulnerability is
Improper access control in ManagedProvisioning prior to SMR Sep-2026 Release 1 allows local...
CVE-2026-21140
Improper access control in ManagedProvisioning prior to SMR Sep-2026 Release 1 allows local attackers to install arbitra
A vulnerability was identified in itsourcecode Pet Shop Management System 1.0. The impacted...
CVE-2026-104053
A vulnerability was identified in itsourcecode Pet Shop Management System 1.0. The impacted element is an unknown functi
A security flaw has been discovered in calcom cal.diy up to 6.2.0. This affects the function...
CVE-2026-104054
A security flaw has been discovered in calcom cal.diy up to 6.2.0. This affects the function doesUserIdHaveAccessToBooki
API key is hardcoded and retrievable from the application package. Since Android applications can...
CVE-2026-103096
API key is hardcoded and retrievable from the application package. Since Android applications can be reverse engineered,
CVE-2026-104480
CVE-2026-104480
Discord libdave before 1.2.0 did not reject an MLS Welcome message when the resulting group roster contained an unrecogn
calcom cal.diy PBAC Permission BookingAccessService.ts doesUserIdHaveAccessToBooking authorization
CVE-2026-104054
A security flaw has been discovered in calcom cal.diy up to 6.2.0. This affects the function doesUserIdHaveAccessToBooki
Mooncake transfer engine before 0.3.13 contains an untrusted pointer dereference in ServerSession...
CVE-2026-103764
Mooncake transfer engine before 0.3.13 contains an untrusted pointer dereference in ServerSession::readHeader that allow
A flaw was found in 389-ds-base. The server does not discard plaintext bytes already buffered...
CVE-2026-86345
A flaw was found in 389-ds-base. The server does not discard plaintext bytes already buffered from a client connection w
Mooncake through 0.3.13.post1 contains a missing authentication vulnerability in the HTTP...
CVE-2026-103765
Mooncake through 0.3.13.post1 contains a missing authentication vulnerability in the HTTP metadata server /metadata hand
Office-PowerPoint-MCP-Server through 2.0.7 contains a path traversal vulnerability that allows...
CVE-2025-71427
Office-PowerPoint-MCP-Server through 2.0.7 contains a path traversal vulnerability that allows MCP callers to write and
Mooncake transfer engine through 0.3.13.post1 contains a denial of service vulnerability that...
CVE-2026-103760
Mooncake transfer engine through 0.3.13.post1 contains a denial of service vulnerability that allows unauthenticated rem
Mooncake transfer engine through 0.3.13.post1 contains a memory exhaustion vulnerability in...
CVE-2026-103761
Mooncake transfer engine through 0.3.13.post1 contains a memory exhaustion vulnerability in TransferMetadata::receivePee
ClipBucket v5 through 5.5.3-#197 contains an sql injection vulnerability that allows...
CVE-2026-103766
ClipBucket v5 through 5.5.3-#197 contains an sql injection vulnerability that allows authenticated users with ad_manager
infiniflow ragflow 0.24.0 is vulnerable to Incorrect Access Control via run_mindmap. A reachable...
CVE-2026-51894
infiniflow ragflow 0.24.0 is vulnerable to Incorrect Access Control via run_mindmap. A reachable path accepts a caller-s