Improper neutralization of input during web page generation ('cross-site scripting')...
CVE-2026-103047
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foun
#advisory
共收录 23212 条相关情报。
← 返回所有主题LightLLM through 1.2.0 contains a remote code execution vulnerability in the router profiler...
CVE-2026-103040
LightLLM through 1.2.0 contains a remote code execution vulnerability in the router profiler service when started with -
A vulnerability was detected in Ziroom ZHOME A0101 1.0.1.0. This affects the function set_syslog...
CVE-2026-102792
A vulnerability was detected in Ziroom ZHOME A0101 1.0.1.0. This affects the function set_syslog of the file /api/ZRnetw
U-Boot before 2026.10-rc3 contains an out-of-bounds write vulnerability in read_slotted_partition...
CVE-2026-71974
U-Boot before 2026.10-rc3 contains an out-of-bounds write vulnerability in read_slotted_partition() that fails to valida
The "supplier_no" parameter used in the business allocation search feature is vulnerable to time...
CVE-2026-72510
The "supplier_no" parameter used in the business allocation search feature is vulnerable to time-based blind SQL injecti
The "reportType" parameter in the product summary report feature within the balancing reports...
CVE-2026-72507
The "reportType" parameter in the product summary report feature within the balancing reports section is susceptible to
LightLLM through 1.2.0 multimodal deployments expose an unauthenticated RPyC cache service with...
CVE-2026-103041
LightLLM through 1.2.0 multimodal deployments expose an unauthenticated RPyC cache service with pickle deserialization e
Improper neutralization of input during web page generation ('cross-site scripting')...
CVE-2026-103046
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Wikimedia Foundati
U-Boot before 2026.10-rc5 contains a buffer overflow in nfs_readlink_reply() function in net/nfs...
CVE-2026-74221
U-Boot before 2026.10-rc5 contains a buffer overflow in nfs_readlink_reply() function in net/nfs-common.c when processin
The device's update mechanism includes conditions that allow unauthorized software packages to be...
CVE-2026-91191
The device's update mechanism includes conditions that allow unauthorized software packages to be accepted as authentic.
anchorme through 3.0.8 contains a regular expression denial of service vulnerability in the IPv6...
CVE-2026-103043
anchorme through 3.0.8 contains a regular expression denial of service vulnerability in the IPv6 host extraction regex d
LightLLM through 1.2.0 contains a memory exhaustion vulnerability in the NCCL control channel...
CVE-2026-103042
LightLLM through 1.2.0 contains a memory exhaustion vulnerability in the NCCL control channel when started with --pd_tra
U-Boot before 2026.10-rc5 contains a use-after-free vulnerability in the httpc_recv_cb() function...
CVE-2026-74222
U-Boot before 2026.10-rc5 contains a use-after-free vulnerability in the httpc_recv_cb() function within the lwIP wget i
U-Boot before 2026.10-rc5 contains out-of-bounds memory access in dhcp6_parse_options() that...
CVE-2026-74225
U-Boot before 2026.10-rc5 contains out-of-bounds memory access in dhcp6_parse_options() that fails to validate SERVERID
Improper neutralization of input during web page generation ('cross-site scripting')...
CVE-2026-103045
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foun
U-Boot before 2026.10-rc5 contains a buffer overflow in nfs_read_reply() function in net/nfs...
CVE-2026-74220
U-Boot before 2026.10-rc5 contains a buffer overflow in nfs_read_reply() function in net/nfs-common.c that allows attack
XML injection (aka blind XPath injection) vulnerability in The Wikimedia Foundation Mediawiki -...
CVE-2026-103044
XML injection (aka blind XPath injection) vulnerability in The Wikimedia Foundation Mediawiki - EasyTimeline extension a
The device's update mechanism retrieves metadata for software updates over an unencrypted HTTP...
CVE-2026-84409
The device's update mechanism retrieves metadata for software updates over an unencrypted HTTP connection and stores por
The file export endpoint allows any unauthenticated attacker to export arbitrary database tables...
CVE-2026-71379
The file export endpoint allows any unauthenticated attacker to export arbitrary database tables by sending a crafted PO
An attacker can construct a request that, if issued by another application user, will cause...
CVE-2026-71189
An attacker can construct a request that, if issued by another application user, will cause JavaScript code supplied by