An improper privilege management vulnerability (CWE-269) exists in the command shell of Wind...
CVE-2026-104018
An improper privilege management vulnerability (CWE-269) exists in the command shell of Wind River VxWorks 7 all version
#advisory
共收录 23210 条相关情报。
← 返回所有主题A flaw was found in rubygem-katello. The RegistryProxiesController in Katello contains an...
CVE-2026-56098
A flaw was found in rubygem-katello. The RegistryProxiesController in Katello contains an authorization bypass vulnerabi
A flaw was found in Foreman. The foreman-tail utility is vulnerable to OS command injection due...
CVE-2026-12542
A flaw was found in Foreman. The foreman-tail utility is vulnerable to OS command injection due to the unsafe use of the
Tapo C120 v1 and C200 V5 do not adequately protect login challenge data or sanitize attacker...
CVE-2026-102369
Tapo C120 v1 and C200 V5 do not adequately protect login challenge data or sanitize attacker-controlled input processed
Zod schema-validation library through 4.6.5 contains an uncontrolled resource consumption...
CVE-2023-54404
Zod schema-validation library through 4.6.5 contains an uncontrolled resource consumption vulnerability that allows atta
Lektor 3.3.14 CSRF via Admin API Endpoints
CVE-2026-104059
Lektor 3.3.14 and 3.4.0b15 contains a cross-site request forgery vulnerability in the admin API blueprint that allows un
DHIS2: Unsafe Java Deserialization - Remote Code Execution (RCE)
CVE-2026-55083
DHIS2 is a flexible information system for data capture, management, validation, analytics and visualization. From versi
KaTeX: Existing prototype pollution can bypass trust restrictions
CVE-2026-103923
KaTeX is a fast, easy-to-use JavaScript library for TeX math rendering on the web. From 0.11.0 until 0.18.2, KaTeX uses
jackson-dataformats-binary: Smile parser does not enforce StreamReadConstraints.maxNameLength, enabling memory-exhaustion denial of service
CVE-2026-68495 · CVE-2026-68496
The Smile parser in FasterXML jackson-dataformats-binary never invokes StreamReadConstraints.validateNameLength() when d
jackson-dataformats-binary: CBOR parser does not enforce StreamReadConstraints.maxNameLength, enabling memory-exhaustion denial of service
CVE-2026-68496 · CVE-2026-68495
The CBOR parser in FasterXML jackson-dataformats-binary never invokes StreamReadConstraints.validateNameLength() when de
Capacitor Android and iOS: remote content can be loaded at the app origin via the internal HTTP proxy path
CVE-2026-103922
Capacitor is a cross-platform native runtime for web applications. From 6.0.0 until 6.2.2, 7.6.9, 8.3.5, 8.4.3, and 8.5.
Zod 4.6.5 Uncontrolled Resource Consumption via Array Validation
CVE-2023-54404
Zod schema-validation library through 4.6.5 contains an uncontrolled resource consumption vulnerability that allows atta
djehuty: Unauthenticated SPARQL injection in the search API (`order`, `operator`, `key`)
CVE-2026-73976
djehuty is a research data repository system developed by 4TU.ResearchData. Prior to version 26.3.2, An unauthenticated
djehuty: Authenticated SPARQL injection in session editing allows writing arbitrary RDF triples
CVE-2026-73975
djehuty is a research data repository system developed by 4TU.ResearchData. Prior to version 26.3.2, an authenticated de
geopy: Regular Expression Denial of Service (ReDoS) in geopy.Point
CVE-2026-77387
geopy is a geocoding library for Python. Prior to 2.5.0, geopy.Point and Point.from_string() can spend excessive CPU tim
GraphQL Tools: TLS Certificate Validation Disabled in Legacy GraphQL WebSocket Executor
CVE-2026-103921
GraphQL Tools provides utilities for building, stitching, and mocking GraphQL schemas. Prior to 1.1.35, the executor-leg
SiYuan: The reference filter for getRefIDs checks visibility but not the password tier, disclosing that password-protected documents reference a given block
CVE-2026-73606
### Summary `/api/block/getRefIDs` filters its results for reader roles through a helper that checks only the visibilit
SiYuan: getAttributeViewSearchTarget returns database row content to anonymous readers with no publish-access check, reopening the class closed one day earlier at the adjacent r...
### Scope note This endpoint does not exist in v3.7.3 or on master. It was introduced on the development branch by comm
SiYuan: getBookmarkLabels returns every bookmark label in the workspace to anonymous readers, with no publish-access filtering
CVE-2026-73609
### Summary `/api/attr/getBookmarkLabels` is registered with `CheckAuth` only and applies no filtering of any kind. It
CVE-2026-101322
CVE-2026-101322
In Eclipse BaSyx AAS Web UI versions v2-241220 through releases before v2-260924, the shared request handler attached th