Dell ThinOS 10, versions prior to SecurityAddon_2605.10.2766_T10, contains an Improper...
CVE-2026-82157
Dell ThinOS 10, versions prior to SecurityAddon_2605.10.2766_T10, contains an Improper Certificate Validation vulnerabil
#advisory
共收录 23334 条相关情报。
← 返回所有主题ServiceNow has remediated an authorization bypass security issue that was identified in the...
CVE-2026-86859
ServiceNow has remediated an authorization bypass security issue that was identified in the ServiceNow AI Platform. This
ServiceNow has remediated a missing authorization vulnerability that was identified in the...
CVE-2026-86860
ServiceNow has remediated a missing authorization vulnerability that was identified in the ServiceNow AI Platform. This
ServiceNow has remediated an improper access control security issue that was identified in the...
CVE-2026-86858
ServiceNow has remediated an improper access control security issue that was identified in the ServiceNow AI Platform. T
Dell Rugged Control Center (RCC), versions prior to 5.2.206, contain an Improper Authorization...
CVE-2026-56792
Dell Rugged Control Center (RCC), versions prior to 5.2.206, contain an Improper Authorization vulnerability. A low priv
ServiceNow has remediated a SQL injection vulnerability that was identified in the ServiceNow AI...
CVE-2026-13016
ServiceNow has remediated a SQL injection vulnerability that was identified in the ServiceNow AI Platform. This vulnerab
An uncontrolled search path element in InsightVM assessment content in Rapid7 Insight Agent on...
CVE-2026-89325
An uncontrolled search path element in InsightVM assessment content in Rapid7 Insight Agent on Windows allows a local, l
ServiceNow has remediated an authorization bypass security issue that was identified in the...
CVE-2026-86857
ServiceNow has remediated an authorization bypass security issue that was identified in the ServiceNow AI Platform. This
An Authenticated Remote Code Execution via Arbitrary File Write in the Intermec Fingerprint...
CVE-2026-13248
An Authenticated Remote Code Execution via Arbitrary File Write in the Intermec Fingerprint Command Interface vulnerabil
mcp-fetch checks a fetch target against its SSRF guard without removing the brackets that...
CVE-2026-80347
mcp-fetch checks a fetch target against its SSRF guard without removing the brackets that surround an IPv6 literal. isSa
GROWI applies its page-viewer permission check to attachment requests only when the request...
CVE-2026-80191
GROWI applies its page-viewer permission check to attachment requests only when the request carries an authenticated use
Contao: Server-Side Request Forgery (SSRF) via Unvalidated RSS Feed URL in Feed Reader Module
CVE-2026-57232
### Summary The Feed Reader front-end module passes RSS feed URLs from its configuration directly to `$this->feedIo->re
social-auth-core has a Session Fixation issue
CVE-2026-57179
### Impact The partial-pipeline resume mechanism accepted `partial_token` as a bearer credential without binding it to
social-auth-core: VK App backend accepts unsigned callback data when auth_key is missing
CVE-2026-57178
### Impact The `vk-app` backend accepted VK application callback data without verifying the callback signature when the
social-auth-core has Login CSRF via Missing State Parameter in LoginRadius Backend
CVE-2026-57177
### Impact The LoginRadius backend did not validate OAuth state during the authentication flow. Applications using thi
social-auth-core Vulnerable to Account Takeover via Identity Binding Flaw in Vend Backend
CVE-2026-57176
### Impact The Vend OAuth2 backend used only the numeric Vend `user_id` as the social-auth UID. When multiple Vend sho
social-auth-core has an Improper Authentication issue
CVE-2026-57175
### Impact The SAML backend accepted SAML responses on the Assertion Consumer Service endpoint without verifying that t
Ash: Private action arguments can be set by user input via string-keyed params and atomic changesets
CVE-2026-55736
### Summary Ash fails to consistently strip private action arguments (those declared with `public?: false`) when a chan
Trestle is vulnerable to arbitrary file write via path traversal in author generate commands (Incomplete fix of CVE-2026-46345)
CVE-2026-57171
**At a glance** - **Actor:** attacker who controls the -o/--output argument to trestle author {catalog,profile,ssp}-gen
Trestle SSTI in Jinja2 include tags allows arbitrary code execution (Incomplete fix of CVE-2026-46439)
CVE-2026-57170
Reporter: Cavan Loughran, Celvex Group Inc. Summary ------- The fix for CVE-2026-46439 (3.12.2 / 4.0.3) removed the rec