Traefik: BasicAuth singleflight coalescing reintroduces an unauthenticated username-enumeration timing oracle
CVE-2026-88010
Traefik is an open source HTTP reverse proxy and load balancer. From 3.6.11 until 3.7.13, checkPassword in pkg/middlewar
#advisory
共收录 23334 条相关情报。
← 返回所有主题Frigate: Viewer-Role User Can Access go2rtc Internal API to obtain sensitive information
CVE-2026-75608
Frigate is an open source network video recorder. Prior to 0.18.0, the prefix-matched location /api/go2rtc/api in docker
Frigate: WebSocket Missing Authorization — Viewer Can Execute Admin-Only Operations
CVE-2026-75607
Frigate is an open source network video recorder. Prior to 0.17.2, the WebSocket handler in frigate/comms/ws.py forwards
Cloudreve: Privilege Scope Bypass: State-Mutating Admin Operations Accessible via Read-Only OAuth Scope
CVE-2026-77637
Cloudreve is a self-hosted file management and sharing system. Prior to 4.18.0, tool.GET("wopi") and tool.POST("mail") i
Cloudreve: Storage-quota TOCTOU race allows quota bypass and storage-based denial of service
CVE-2026-77633
Cloudreve is a self-hosted file management and sharing system. Prior to 4.18.0, PrepareUpload in pkg/filemanager/fs/dbfs
Cloudreve: SSRF guard bypass: checkIP does not decode IPv6-transition wrappers (NAT64, IPv4-compatible, 6to4) reaching internal and cloud-metadata addresses
CVE-2026-79913
Cloudreve is a self-hosted file management and sharing system. Prior to 4.18.0, the ValidateExternalURL server-side requ
Aureus ERP before 1.5.0 Unscoped Message Access via ChatterPanel
CVE-2026-95655
Aureus ERP before 1.5.0 fails to scope message lookups to the current record in ChatterPanel, allowing authenticated use
Databasement before 1.7.14 Authorization Bypass via Stale Invitation Token
CVE-2026-95654
Databasement before 1.7.14 validates invitation tokens only when the acceptance page loads, caching the authorization de
Concrete CMS Community Store before 2.7.8 Predictable Digital Download Token
CVE-2026-95653
Concrete CMS Community Store before 2.7.8 derives digital product download tokens from order creation timestamps instead
AnyIO: TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing
CVE-2026-63374
AnyIO is a high level asynchronous concurrency and networking framework that works on top of either Trio or asyncio. Pri
Dark Reader: Ability to request icon-like bitmap data from certain local web servers
CVE-2026-92706
Dark Reader is an accessibility browser extension that makes web pages colors dark. Prior to 4.9.126, a website can caus
Twenty: Field-level read bypass
CVE-2026-85055
Twenty is an open-source CRM (customer relationship management) platform. Prior to 2.22.0, field-level read permission i
Vector: Arbitrary file write in the file sink via templated path (path traversal).
CVE-2026-77621
Vector is a high-performance observability data pipeline. From 0.10.0 until 0.57.0, the file sink renders its templated
Vector: Unauthenticated denial of service in the `logstash` source via nested compressed frames (stack exhaustion and decompression amplification).
CVE-2026-77620
Vector is a high-performance observability data pipeline. From 0.15.0 until 0.57.0, the logstash source feeds each decom
Vector: Unauthenticated denial of service in the `logstash` source via unbounded memory allocation.
CVE-2026-77619
Vector is a high-performance observability data pipeline. From 0.15.0 until 0.57.0, the logstash source reads a 32-bit c
radare2: Out-of-bounds Read at the end of string in the LUA 5.3 bytecode
CVE-2026-81883
radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Lua 5.3 bytecod
radare2: Infinite relocation-chain loop causes denial of service in radare2 NE parser
CVE-2026-81885
radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's NE relocation f
radare2: Missing string termination causes heap out-of-bounds read in radare2 bplist parser
CVE-2026-81882
radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's binary property
radare2: Uncontrolled memory allocation in radare2 dmp64 parser
CVE-2026-81886
radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Windows 64-bit
radare2: Heap out-of-bounds read in radare2 Mach-O LC_DATA_IN_CODE parser
CVE-2026-81884
radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Mach-O LC_DATA_