A vulnerability was detected in Webkul Bagisto up to 2.4.6. This impacts an unknown function of...
CVE-2026-101139
A vulnerability was detected in Webkul Bagisto up to 2.4.6. This impacts an unknown function of the file /admin/sales/in
#advisory
共收录 23212 条相关情报。
← 返回所有主题A vulnerability was determined in code-projects Matrimonial System 1.0. The affected element is...
CVE-2026-101105
A vulnerability was determined in code-projects Matrimonial System 1.0. The affected element is the function processprof
Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Real Estate Manager (Free) <...
CVE-2026-100753
Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Real Estate Manager (Free) element to execute in th
Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Real Estate Manager (Free) < 6...
CVE-2026-100752
Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Real Estate Manager (Free) < 6.7.9 - site/realestatem
fast-uri vulnerable to authority injection via an unvalidated port in serialize
CVE-2026-84292
### Impact `fast-uri` serializes the `port` component of a URI without validating it. When recomposing the authority, `
fast-uri vulnerable to host confusion via an unclosed bracket in the URI authority
CVE-2026-84394
### Impact `fast-uri` accepts a host that contains an unbalanced or misplaced authority bracket (`[` or `]`) without re
jackson-databind: Comparable missing from DefaultBaseTypeLimitingValidator's unsafe base types (incomplete PolymorphicTypeValidator denylist)
CVE-2026-83557
### Summary `DefaultBaseTypeLimitingValidator` — the `PolymorphicTypeValidator` used automatically whenever `@JsonTypeIn
ip-address: Address6.isLinkLocal() recognizes fe80::/64 rather than fe80::/10, allowing SSRF and trust-boundary bypass to on-link hosts
CVE-2026-101913
### Summary `Address6.isLinkLocal()` recognizes `fe80::/64` rather than `fe80::/10`. Link-local unicast is the whole `/
ip-address: no classifier recognizes the NAT64 local-use range 64:ff9b:1::/48, allowing SSRF and trust-boundary bypass
CVE-2026-101910
### Summary No classifier on `Address6` recognizes the NAT64 local-use range `64:ff9b:1::/48` (RFC 8215). `isPrivate()`
Angular SSR: XSS via Unescaped Processing Instruction (<?...?>) Nodes in Fallback Raw-Content Elements
CVE-2026-88058
### Summary An XSS vulnerability exists in `@angular/platform-server` during server-side rendering (SSR) HTML serializat
jackson-databind: Duration XMLGregorianCalendar Unbounded Number Parse DoS
CVE-2026-68497
### Summary `jackson-databind` 3.2.1 deserializes a JSON **string** bound to a `javax.xml.datatype.Duration` or `javax.x
jackson-databind: Path Deserialization Missing Scheme Allowlist for FileSystemProvider Resolution
CVE-2026-19032
### Summary A `java.nio.file.Path` field bound from untrusted JSON reaches `JDKFromStringDeserializer.NioPathHelper.des
jackson-databind: Incomplete fix for CVE-2026-54514: eager DNS resolution (SSRF) still present in InetAddress deserialization
CVE-2026-77310
### Summary CVE-2026-54514 (GHSA-hgj6-7826-r7m5) fixed an eager-DNS-resolution / SSRF issue in jackson-databind's deseri
@grpc/grpc-js: The exact path match matcher incorrectly only applies a prefix match for case-insensitive matches
CVE-2026-101914
### Impact When using RBAC to apply authentication rules, the exact path (method name) matcher applies a prefix match in
A flaw was found in the StreamsHub Console for Apache Kafka. Tenant-supplied Kafka client...
CVE-2026-96740
A flaw was found in the StreamsHub Console for Apache Kafka. Tenant-supplied Kafka client properties from the Console cu
A vulnerability was found in deepseek-ai deepseek-harness up to 0.1.0-rc.7. Impacted is the...
CVE-2026-101102
A vulnerability was found in deepseek-ai deepseek-harness up to 0.1.0-rc.7. Impacted is the function run_code of the com
A vulnerability has been found in ag-ui-protocol ag-ui up to 2026-09-07. This issue affects the...
CVE-2026-101101
A vulnerability has been found in ag-ui-protocol ag-ui up to 2026-09-07. This issue affects the function JSON.parse of t
A flaw has been found in ag-ui-protocol ag-ui up to 2026-09-07. This vulnerability affects the...
CVE-2026-101100
A flaw has been found in ag-ui-protocol ag-ui up to 2026-09-07. This vulnerability affects the function FilterToolCallsM
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-58464
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
A weakness has been identified in PMWeb 7.x/8.x/2025.x. This issue affects some unknown...
CVE-2026-101082
A weakness has been identified in PMWeb 7.x/8.x/2025.x. This issue affects some unknown processing of the file downloade