A flaw was found in the Admin REST API of Keycloak, an open-source identity and access management...
CVE-2026-94000
A flaw was found in the Admin REST API of Keycloak, an open-source identity and access management solution. The issue oc
#advisory
共收录 23334 条相关情报。
← 返回所有主题Pod::Text versions before 6.1.1 for Perl allow CPU and memory exhaustion formatting a POD document whose =over nesting drives the margin to the output width
CVE-2026-82560
Pod::Text versions before 6.1.1 for Perl allow CPU and memory exhaustion formatting a POD document whose =over nesting d
OpenPanel js-runtime through commit bad75bdd contains a sandbox escape vulnerability in the...
CVE-2026-93985
OpenPanel js-runtime through commit bad75bdd contains a sandbox escape vulnerability in the JavaScript webhook template
OpenPanel through commit bad75bdd writes Model Context Protocol authentication tokens from URL...
CVE-2026-93982
OpenPanel through commit bad75bdd writes Model Context Protocol authentication tokens from URL query parameters to plain
rclone versions 1.56.0 through 1.75.0 contain a path traversal vulnerability in the `rclone serve...
CVE-2026-93987
rclone versions 1.56.0 through 1.75.0 contain a path traversal vulnerability in the `rclone serve docker` volume plugin.
OpenPanel through commit bad75bdd fails to escape property keys in ClickHouse SQL queries,...
CVE-2026-93983
OpenPanel through commit bad75bdd fails to escape property keys in ClickHouse SQL queries, allowing authenticated users
rclone before 1.75.1 fails to confine names from server and third-party listing responses to the...
CVE-2026-93986
rclone before 1.75.1 fails to confine names from server and third-party listing responses to the listed directory, allow
OpenPanel tracking API through commit bad75bddc74d12d36cfb843f4531d3b830a8d994 fails to verify...
CVE-2026-93984
OpenPanel tracking API through commit bad75bddc74d12d36cfb843f4531d3b830a8d994 fails to verify client secret cryptograph
hono before 4.13.7 fails to HTML-escape plain strings rendered by hono/jsx as a child or fallback...
CVE-2026-93981
hono before 4.13.7 fails to HTML-escape plain strings rendered by hono/jsx as a child or fallback of Suspense, as a stri
rclone serve docker Path Traversal via Volume Name
CVE-2026-93987
rclone versions 1.56.0 through 1.75.0 contain a path traversal vulnerability in the `rclone serve docker` volume plugin.
rclone before 1.75.1 Path Traversal via Directory Listing Names
CVE-2026-93986
rclone before 1.75.1 fails to confine names from server and third-party listing responses to the listed directory, allow
hono/jsx before 4.13.7 Cross-Site Scripting via Unescaped Strings
CVE-2026-93981
hono before 4.13.7 fails to HTML-escape plain strings rendered by hono/jsx as a child or fallback of Suspense, as a stri
DBI versions before 1.653 for Perl load arbitrary modules via unvalidated dbm_type and dbm_mldbm attributes in DBD::DBM
CVE-2026-78030
DBI versions before 1.653 for Perl load arbitrary modules via unvalidated dbm_type and dbm_mldbm attributes in DBD::DBM.
The Datalogics Ecommerce Delivery – Datalogics plugin for WordPress is vulnerable to...
CVE-2026-9613
The Datalogics Ecommerce Delivery – Datalogics plugin for WordPress is vulnerable to authorization bypass in all version
The WP Ghost (Hide My WP Ghost) – Security & Firewall plugin for WordPress is vulnerable to Open...
CVE-2026-7527
The WP Ghost (Hide My WP Ghost) – Security & Firewall plugin for WordPress is vulnerable to Open Redirect in all version
The Payment Gateway of Stripe for WooCommerce plugin for WordPress is vulnerable to Improper...
CVE-2026-9832
The Payment Gateway of Stripe for WooCommerce plugin for WordPress is vulnerable to Improper Verification of Cryptograph
The TikTok plugin for WordPress is vulnerable to authorization bypass in all versions up to, and...
CVE-2026-18346
The TikTok plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.4.1. This
A weakness has been identified in Totolink A3002MU Hh-B20211125.1046. Affected by this issue is...
CVE-2026-93742
A weakness has been identified in Totolink A3002MU Hh-B20211125.1046. Affected by this issue is the function formWsc of
The Easy Appointments plugin for WordPress is vulnerable to Sensitive Information Exposure in all...
CVE-2026-9232
The Easy Appointments plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and in
The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the...
CVE-2026-5410
The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the spinner field in versions