ImageMagick before 7.1.2-31 Use After Free via ImagesToBlob
CVE-2026-93586
ImageMagick before 7.1.2-31 and before 6.9.13-56 contains a use-after-free vulnerability in the ImagesToBlob method, cau
#advisory
共收录 23421 条相关情报。
← 返回所有主题A flaw was found in RESTEasy's IIOImageProvider, which decodes attacker-supplied image request bodies without enforcing any limit on the declared image dimensions or pixel count...
CVE-2026-89059
A flaw was found in RESTEasy's IIOImageProvider, which decodes attacker-supplied image request bodies without enforcing
A flaw was found in RESTEasy's CorsFilter, which, when configured to allow all origins ("*"), reflects the request's Origin header back in the Access-Control-Allow-Origin respon...
CVE-2026-89058
A flaw was found in RESTEasy's CorsFilter, which, when configured to allow all origins ("*"), reflects the request's Ori
Apache Airflow: Asset queued-events DELETE endpoints gated on Dag READ instead of Dag EDIT (asset-triggered scheduling suppression)
CVE-2026-75157
Apache Airflow's asset queued-events DELETE endpoints checked the caller's Dag-axis permission with `READ` instead of `E
【云数据库 SQL Server】关于2026年9月17日预设策略升级的公告
【云数据库 SQL Server】关于2026年9月17日预设策略升级的公告
The OAKlouds developed by HGiga has a Insecure Deserialization vulnerability. Unauthenticated...
CVE-2026-93467
The OAKlouds developed by HGiga has a Insecure Deserialization vulnerability. Unauthenticated remote attackers can execu
A security vulnerability has been detected in marcopiovanello yt-dlp-web-ui up to v4. This issue...
CVE-2026-93371
A security vulnerability has been detected in marcopiovanello yt-dlp-web-ui up to v4. This issue affects the function Ne
The RT Mega Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'css...
CVE-2026-14855
The RT Mega Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'css[left]' parameter in all
The Biggop Library is vulnerable to Cross-Site Scripting via the ‘display_id’ parameter from the...
CVE-2026-92991
The Biggop Library is vulnerable to Cross-Site Scripting via the ‘display_id’ parameter from the Sigmative API in variou
The RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg plugin for WordPress is vulnerable...
CVE-2026-15650
The RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg plugin for WordPress is vulnerable to Stored Cross-Site S
The OAKlouds developed by HGiga has an Arbitrary File Read vulnerability. Unauthenticated remote...
CVE-2026-93468
The OAKlouds developed by HGiga has an Arbitrary File Read vulnerability. Unauthenticated remote attackers can exploit R
The Photos app's filter-based "smart albums" build their file listing using the search...
CVE-2026-82985
The Photos app's filter-based "smart albums" build their file listing using the search configuration (photosSourceFolder
A vulnerability was found in Freedesktop Poppler 26.07.0. The impacted element is the function...
CVE-2026-93313
A vulnerability was found in Freedesktop Poppler 26.07.0. The impacted element is the function JBIG2Stream::readCodeTabl
The Approval app's approve/reject endpoint is meant to require the file's current etag as a...
CVE-2026-82982
The Approval app's approve/reject endpoint is meant to require the file's current etag as a freshness check, preventing
A vulnerability in the team folders (formerly group folders) app when used in combination with...
CVE-2026-77169
A vulnerability in the team folders (formerly group folders) app when used in combination with the workspace app allowed
django-page-cms through 2.0.13 fails to properly validate page permissions in admin helper views,...
CVE-2026-93455
django-page-cms through 2.0.13 fails to properly validate page permissions in admin helper views, allowing any staff acc
A vulnerability was identified in GPAC 26.08-DEV. This vulnerability affects the function...
CVE-2026-93331
A vulnerability was identified in GPAC 26.08-DEV. This vulnerability affects the function gf_rtp_parse_ttxt of the file
The Deck config API allows authenticated users to set board-scoped configuration keys for...
CVE-2026-77170
The Deck config API allows authenticated users to set board-scoped configuration keys for arbitrary board IDs without va
django-page-cms through 2.0.13 exempts five admin mutation views from CSRF protection in pages...
CVE-2026-93456
django-page-cms through 2.0.13 exempts five admin mutation views from CSRF protection in pages/admin/views.py, allowing
Any authenticated user can lock or unlock files they do not own by targeting absolute WebDAV...
CVE-2026-82980
Any authenticated user can lock or unlock files they do not own by targeting absolute WebDAV paths of other users. The D