A flaw has been found in coollabsio Coolify up to 4.1.2. The affected element is an unknown...
CVE-2026-100744
A flaw has been found in coollabsio Coolify up to 4.1.2. The affected element is an unknown function of the file app/Htt
#advisory
共收录 23334 条相关情报。
← 返回所有主题In MONAI 1.6.0, PersistentDataset (monai/data/dataset.py) explicitly rejects the combination...
CVE-2026-100841
In MONAI 1.6.0, PersistentDataset (monai/data/dataset.py) explicitly rejects the combination track_meta=True with weight
http4k's Digest authentication module (org.http4k:http4k-security-digest) before versions 6.48.0...
CVE-2026-100834
http4k's Digest authentication module (org.http4k:http4k-security-digest) before versions 6.48.0.0, 5.42.0.0 and 4.51.0.
Contrast is a confidential-computing runtime for Kubernetes. In versions before 1.18.0, the guest...
CVE-2026-100839
Contrast is a confidential-computing runtime for Kubernetes. In versions before 1.18.0, the guest kernel's ACPI/AML hand
MONAI versions before 1.6.0 contain a remote code execution vulnerability in the algo_from_pickle...
CVE-2026-100843
MONAI versions before 1.6.0 contain a remote code execution vulnerability in the algo_from_pickle() function due to unsa
MONAI through 1.6.0 contains an eval injection vulnerability in _get_fake_spatial_shape() in...
CVE-2026-100842
MONAI through 1.6.0 contains an eval injection vulnerability in _get_fake_spatial_shape() in monai/bundle/scripts.py. Th
A vulnerability has been found in Edimax BR-6428nC 1.16. The impacted element is an unknown...
CVE-2026-100745
A vulnerability has been found in Edimax BR-6428nC 1.16. The impacted element is an unknown function of the file /goform
Contrast is a confidential-computing runtime for Kubernetes. In versions before 1.19.1, the Kata...
CVE-2026-100838
Contrast is a confidential-computing runtime for Kubernetes. In versions before 1.19.1, the Kata agent policies generate
MONAI through 1.6.0 contains a remote code execution vulnerability in the bundle configuration...
CVE-2026-100840
MONAI through 1.6.0 contains a remote code execution vulnerability in the bundle configuration engine that resolves _tar
MONAI before 1.6.0 contains an unsafe deserialization vulnerability in the NumpyReader class that...
CVE-2026-100845
MONAI before 1.6.0 contains an unsafe deserialization vulnerability in the NumpyReader class that unconditionally uses n
Contrast (Edgeless Systems) before 1.8.1 logs the workload secret to stderr, and thus to...
CVE-2025-71425
Contrast (Edgeless Systems) before 1.8.1 logs the workload secret to stderr, and thus to Kubernetes logs, when the Contr
Edgelesssys Contrast is a confidential-computing runtime for Kubernetes. In versions 1.9.0 before...
CVE-2025-71423
Edgelesssys Contrast is a confidential-computing runtime for Kubernetes. In versions 1.9.0 before 1.12.2, the initialize
Contrast, Edgeless Systems' runtime for confidential containers on Kubernetes, is affected in...
CVE-2025-71424
Contrast, Edgeless Systems' runtime for confidential containers on Kubernetes, is affected in versions up to and includi
vm2 before 3.12.2 contains an authorization bypass in the NodeVM external-module resolver. When...
CVE-2026-100721
vm2 before 3.12.2 contains an authorization bypass in the NodeVM external-module resolver. When an embedder configures `
Contrast is a confidential-computing runtime for Kubernetes. In versions before 1.4.1, a...
CVE-2025-71426
Contrast is a confidential-computing runtime for Kubernetes. In versions before 1.4.1, a recovering Coordinator does not
http4k (Maven artifact org.http4k:http4k-core) before 6.48.0.0, 5.42.0.0, and 4.51.0.0 ships a...
CVE-2026-100725
http4k (Maven artifact org.http4k:http4k-core) before 6.48.0.0, 5.42.0.0, and 4.51.0.0 ships a BasicCookieStorage (clien
http4k (Maven package org.http4k:http4k-core) before 6.49.0.0, 5.42.0.0 and 4.51.0.0 uses...
CVE-2026-100724
http4k (Maven package org.http4k:http4k-core) before 6.49.0.0, 5.42.0.0 and 4.51.0.0 uses substring (Contains) matching
vm2 before 3.12.2 does not apply host-side Promise rejection handling in the sandbox-to-host...
CVE-2026-100722
vm2 before 3.12.2 does not apply host-side Promise rejection handling in the sandbox-to-host construct trap. In BaseHand
vm2 before 3.12.2 does not apply its Buffer backing-store ownership invariant (byteOffset === 0...
CVE-2026-100723
vm2 before 3.12.2 does not apply its Buffer backing-store ownership invariant (byteOffset === 0 and buffer.byteLength ==
A vulnerability was detected in D-Link DIR-895L A1_102b07. Impacted is the function...
CVE-2026-100740
A vulnerability was detected in D-Link DIR-895L A1_102b07. Impacted is the function tunnel_set_params of the file tunnel