ZoneMinder versions 1.37.0 before 1.38.0 contain a path traversal vulnerability in the files view...
CVE-2024-58386
ZoneMinder versions 1.37.0 before 1.38.0 contain a path traversal vulnerability in the files view that allows authentica
#advisory
共收录 23212 条相关情报。
← 返回所有主题A vulnerability has been found in FastStone Image Viewer up to 8.3. The impacted element is an...
CVE-2026-101203
A vulnerability has been found in FastStone Image Viewer up to 8.3. The impacted element is an unknown function of the c
A flaw has been found in FastStone Image Viewer up to 8.3. The affected element is an unknown...
CVE-2026-101202
A flaw has been found in FastStone Image Viewer up to 8.3. The affected element is an unknown function of the component
A vulnerability was determined in FastStone Image Viewer up to 8.3. This impacts an unknown...
CVE-2026-101205
A vulnerability was determined in FastStone Image Viewer up to 8.3. This impacts an unknown function of the component PC
SiYuan before v3.8.4 fails to enforce publish-access checks in the getCurrentAttrViewImages...
CVE-2026-101092
SiYuan before v3.8.4 fails to enforce publish-access checks in the getCurrentAttrViewImages endpoint, allowing publish r
SiYuan versions before v3.8.4 fail to properly validate SQL statements in block query embed...
CVE-2026-101091
SiYuan versions before v3.8.4 fail to properly validate SQL statements in block query embed blocks executed against siyu
A vulnerability was found in FastStone Image Viewer up to 8.3. This affects an unknown function...
CVE-2026-101204
A vulnerability was found in FastStone Image Viewer up to 8.3. This affects an unknown function of the file FSViewer.exe
CVE-2026-79537
CVE-2026-79537
metatool-ai MetaMCP through 2.4.22 contains an insecure direct object reference (IDOR) in the MCP transport session disp
Nodemailer: Process-global DNS cache reuses TLS `servername` across transports, enabling cross-tenant SMTP credential disclosure
### Summary Nodemailer's process-global DNS cache is keyed only by `host`, but each cache entry also stores the caller-
undici vulnerable to Denial of Service via unhandled error in WebSocket permessage-deflate decompression
CVE-2026-85024
## Impact undici's WebSocket client (including Node.js's bundled `globalThis.WebSocket`) crashes the entire Node.js pro
multer vulnerable to Denial of Service via orphaned disk writes on aborted uploads
CVE-2026-88932
### Impact Multer's `diskStorage` can leave complete, orphaned files on disk when a multipart upload is aborted in the
morgan vulnerable to Log Injection via unescaped double quote in quoted log fields
CVE-2026-87859
### Impact Morgan writes attacker-controlled request data to the access log. Its escaping (added in 1.11.0 and 1.12.0)
In proxygen from v2024.10.28.00 until v2026.09.28.00, the HTTPTransaction:...
CVE-2026-91095
In proxygen from v2024.10.28.00 until v2026.09.28.00, the HTTPTransaction::onWebTransportUniStream and HTTPTransaction::
In proxygen from v2024.10.28.00 until v2026.09.28.00, WebTransportImpl::terminateSessionStreams ...
CVE-2026-91096
In proxygen from v2024.10.28.00 until v2026.09.28.00, WebTransportImpl::terminateSessionStreams (WebTransportImpl::destr
In proxygen from v2026.04.06.00 until v2026.09.28.00, QuicWtSession::closeSession accesses its...
CVE-2026-84895
In proxygen from v2026.04.06.00 until v2026.09.28.00, QuicWtSession::closeSession accesses its member fields after calli
Angular SSR: Denial of Service (DoS) via Infinite Loop on Malformed DOCTYPE
CVE-2026-101895
A Denial of Service (DoS) vulnerability exists in `@angular/platform-server`'s DOM emulation parser (`domino`). When pro
Wind River VxWorks 7 24.03 through 26.03, a memory leak occurs under specific, non-default...
CVE-2026-102005
Wind River VxWorks 7 24.03 through 26.03, a memory leak occurs under specific, non-default configuration states when pro
In Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the process...
CVE-2026-102006
In Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the process management subsystem fa
A weakness has been identified in Ziroom ZHOME A0101 1.0.1.0. This vulnerability affects the...
CVE-2026-101187
A weakness has been identified in Ziroom ZHOME A0101 1.0.1.0. This vulnerability affects the function pop_usb_device of
LiteLLM contains a weak authentication vulnerability that allows an attacker holding a valid JWT...
CVE-2026-93355
LiteLLM contains a weak authentication vulnerability that allows an attacker holding a valid JWT from the configured ide