The "screenID" parameter in the electronic transaction queue viewer feature within the manual...
CVE-2026-68068
The "screenID" parameter in the electronic transaction queue viewer feature within the manual transactions section is su
#advisory
共收录 23212 条相关情报。
← 返回所有主题The "pattern" parameter used in search function in the home page of the TMS application is...
CVE-2026-68954
The "pattern" parameter used in search function in the home page of the TMS application is vulnerable to time-based blin
The TMS file upload endpoint fails to enforce server-side file type restrictions, allowing an...
CVE-2026-70356
The TMS file upload endpoint fails to enforce server-side file type restrictions, allowing an attacker to upload and exe
The "search" parameter in the view audit logs feature within the utilities section is susceptible...
CVE-2026-63713
The "search" parameter in the view audit logs feature within the utilities section is susceptible to a time-based blind
The application accepts user-supplied session identifiers and does not regenerate the session ID...
CVE-2026-71302
The application accepts user-supplied session identifiers and does not regenerate the session ID after authentication. T
The application uses unsafe functions that allow execution of inline scripts and string...
CVE-2026-69662
The application uses unsafe functions that allow execution of inline scripts and string evaluation functions.
A vulnerability was identified in Freedesktop Poppler up to 26.08.0. Affected is the function...
CVE-2026-102621
A vulnerability was identified in Freedesktop Poppler up to 26.08.0. Affected is the function SplashClip::clipToPath of
U-Boot before 2026.10-rc3 with CONFIG_IP_DEFRAG enabled contains an out-of-bounds write...
CVE-2026-71971
U-Boot before 2026.10-rc3 with CONFIG_IP_DEFRAG enabled contains an out-of-bounds write vulnerability in the __net_defra
U-Boot through 2026.10-rc5 contains an out-of-bounds write vulnerability in the...
CVE-2026-71972
U-Boot through 2026.10-rc5 contains an out-of-bounds write vulnerability in the video_display_rle8_bitmap function in dr
A security vulnerability has been detected in Naichen ThinkCMF up to 8.0.7. Affected by this...
CVE-2026-102771
A security vulnerability has been detected in Naichen ThinkCMF up to 8.0.7. Affected by this issue is the function MailC
U-Boot before 2026.10-rc4 contains an integer overflow vulnerability in sqfs_read_directory_table...
CVE-2026-71973
U-Boot before 2026.10-rc4 contains an integer overflow vulnerability in sqfs_read_directory_table() function when alloca
Nest: Remote process termination via a deeply nested microservice message pattern
CVE-2026-102281
| Field | Value | | --- | --- | | Ecosystem | npm | | Package | `@nestjs/microservices` | | Affected versions | `>= 12.0
fast-uri vulnerable to inconsistent host case normalization via percent-encoded octets
CVE-2026-86472
### Impact `fast-uri` folds the host to lowercase before it percent-decodes the host, so a percent-encoded uppercase un
fast-uri vulnerable to mailto header injection via percent-encoded field-name desynchronization
CVE-2026-86818
### Impact `fast-uri`'s `mailto` scheme parser compares each query field name to the reserved names (`to`, `subject`, `
@xhmikosr/decompress: Path traversal via symlink chain
CVE-2026-101894
### Impact When extracting an untrusted archive with the default `decompress(input, output)` API, a crafted archive con
ip-address: isInSubnet() and isHostInSubnet() compare addresses of different families as if they shared an address space, allowing an allowlist check to admit an address outside...
CVE-2026-101912
### Summary `isInSubnet()` and `isHostInSubnet()` accept an address of either family and compare masked binary strings
ip-address: Address6 builds a parse diagnostic proportional to the input with no length bound, allowing a single long string to stall or crash the process
CVE-2026-101911
### Summary `new Address6()` and `Address6.isValid()` place no bound on the length of the string they parse. When the s
moment vulnerable to Path Traversal via crafted non-string locale name
CVE-2026-17495
### Impact moment before 2.31.0 is vulnerable to path traversal in `moment.locale()`. When an application passes a non-
brace-expansion: Quadratic-time expansion of the `{a},b}` rewrite causes CPU denial of service
CVE-2026-102277
### Summary Expanding `{a},b}`-shaped input takes time quadratic in the number of literal `}` characters, blocking the
brace-expansion: DoS via uncontrolled recursion on nested brace groups causing stack exhaustion
CVE-2026-102278
### Summary `expand_()` recurses once per level of brace *nesting*. Deeply nested input exhausts the native stack and c