Kubernetes kubectl cp path traversal on Windows allows arbitrary file writes
CVE-2026-19444
A path traversal vulnerability was discovered in the Kubernetes kubectl client's kubectl cp command on Windows. When cop
#advisory
共收录 23212 条相关情报。
← 返回所有主题aligungr UERANSIM nr-gnb encode.cpp DecodePlainMmMessage uncaught exception
CVE-2026-101035
A flaw has been found in aligungr UERANSIM up to 3.3.0. This affects the function DecodePlainMmMessage in the library sr
Denial of service via unsigned underflow in libXpm's write path
CVE-2026-94287
A denial of service via unsigned underflow in libXpm's write path in libXpm before 3.5.19 could be used by local attacke
Apache Roller: Stored XSS in comment moderation via comment author URL
CVE-2026-86507
Improper neutralization of input in Apache Roller 6.1.5 allows an anonymous remote attacker to store a crafted comment-a
Trusted Domain Project OpenDMARC DMARC Record opendmarc_util.c opendmarc_util_cleanup off-by-one
CVE-2026-101014
A vulnerability was detected in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this vulnerability is the func
Apache Roller: WSSE digest authentication headers can be replayed
CVE-2026-82379
Authentication Bypass by Capture-replay in Apache Roller 6.1.5 allows an attacker who captures a valid WSSE digest authe
Apache Roller: CSRF protection bypass via self-generated salt validation
CVE-2026-82380
Cross-Site Request Forgery (CSRF) in Apache Roller 6.1.5 allows a remote attacker to cause a logged-in user to perform s
Apache Roller: Stored cross-site scripting in the authoring UI
CVE-2026-82381
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Apache Roller 6.1.5 allows a use
Apache Roller: Reflected cross-site scripting in the frontpage directory parameter
CVE-2026-82382
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Apache Roller 6.1.5 allows a rem
Apache Roller: Anonymous setup action allows frontpage configuration tampering
CVE-2026-82383
Missing Authentication for Critical Function in Apache Roller 6.1.5 allows an unauthenticated remote attacker to persist
Apache Roller: Unauthenticated deserialization in the XML-RPC endpoint
CVE-2026-82384
Deserialization of Untrusted Data in Apache Roller 6.1.5 allows an unauthenticated remote attacker to cause deserializat
Apache Roller: Server-side request forgery via entry trackback and enclosure URLs
CVE-2026-82375
Server-Side Request Forgery (SSRF) in Apache Roller 6.1.5 allows an authenticated user with entry-editing rights on a we
Apache Roller: XML external entity processing in trackback response parser
CVE-2026-82376
Improper Restriction of XML External Entity Reference in Apache Roller 6.1.5 allows a user with entry-editing rights on
Apache Roller: Missing weblog authorization in XML-RPC Blogger/MetaWeblog handlers
CVE-2026-82377
Missing Authorization in Apache Roller 6.1.5 allows an authenticated user to read, modify, or delete weblog content belo
Apache Roller: OAuth authorization endpoint trusts request-supplied identity
CVE-2026-82378
Incorrect Authorization in the OAuth 1.0a authorization endpoint of Apache Roller 6.1.5 allows an unauthenticated remote
Apache Roller: Weblog template include escapes the Velocity sandbox and reads classpath files
CVE-2026-82385
Exposure of Sensitive Information to an Unauthorized Actor in Apache Roller 6.1.5 allows a weblog administrator to read
Apache Roller: XML external entity processing in OPML bookmark import
CVE-2026-82386
Improper Restriction of XML External Entity Reference in Apache Roller 6.1.5 allows a weblog administrator to read files
Apache Roller: Cross-weblog resource tampering via unscoped authoring lookups
CVE-2026-82348
Authorization Bypass Through User-Controlled Key in Apache Roller 6.1.5 allows an authenticated user with authoring righ
Apache Roller: Stored cross-site scripting via uploaded media content type
CVE-2026-82387
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Apache Roller 6.1.5 allows a use
Apache Roller: Stored cross-site scripting through incoming Trackback links
CVE-2026-82546
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Apache Roller 6.1.5 allows an un