A vulnerability was determined in Freedesktop Poppler 26.07.0. This affects the function...
CVE-2026-93314
A vulnerability was determined in Freedesktop Poppler 26.07.0. This affects the function FoFiTrueType::mapCodeToGID of t
#advisory
共收录 23421 条相关情报。
← 返回所有主题Circles' remote-instance signature verification fetches the attacker-supplied keyId URL before...
CVE-2026-77164
Circles' remote-instance signature verification fetches the attacker-supplied keyId URL before trust in the remote insta
A flaw has been found in Freedesktop Poppler 26.07.0. Impacted is the function JBIG2Stream:...
CVE-2026-93312
A flaw has been found in Freedesktop Poppler 26.07.0. Impacted is the function JBIG2Stream::rewind of the file poppler/J
After guessing a 62^15 complex unique identifier, a malicious logged in user was able to retrieve...
CVE-2026-68493
After guessing a 62^15 complex unique identifier, a malicious logged in user was able to retrieve a list of memberships
A vulnerability was identified in O-RAN-SC SMO OAM 2025-06-10. This affects an unknown part of...
CVE-2026-93310
A vulnerability was identified in O-RAN-SC SMO OAM 2025-06-10. This affects an unknown part of the component VES Collect
A vulnerability was detected in Freedesktop Poppler 26.07.0. This issue affects the function...
CVE-2026-93311
A vulnerability was detected in Freedesktop Poppler 26.07.0. This issue affects the function SampledFunction::SampledFun
NASA CryptoLib 1.5.0 contains an authentication downgrade vulnerability in the Telecommand (TC)...
CVE-2026-79954
NASA CryptoLib 1.5.0 contains an authentication downgrade vulnerability in the Telecommand (TC) receive path. The receiv
Aureus ERP through 1.6.0 stores the Payment Term note field unsanitized and renders it as raw...
CVE-2026-93454
Aureus ERP through 1.6.0 stores the Payment Term note field unsanitized and renders it as raw HTML in the Accounting plu
snappy-java through 1.1.10.8 contains a buffer overflow vulnerability in typed Snappy.uncompress...
CVE-2026-93451
snappy-java through 1.1.10.8 contains a buffer overflow vulnerability in typed Snappy.uncompress*Array methods that allo
snappy-java through 1.1.10.8 contains a buffer overflow vulnerability in Snappy.compress...
CVE-2026-93452
snappy-java through 1.1.10.8 contains a buffer overflow vulnerability in Snappy.compress(ByteBuffer, ByteBuffer) that wr
go-openapi/swag jsonutils before 0.27.1 contains a stack overflow vulnerability in ordered JSON...
CVE-2026-93450
go-openapi/swag jsonutils before 0.27.1 contains a stack overflow vulnerability in ordered JSON parsing and serializatio
SOGo before 5.12.11 constructs password-reset links using the client-supplied Origin header as...
CVE-2026-93453
SOGo before 5.12.11 constructs password-reset links using the client-supplied Origin header as the authority, allowing u
A vulnerability was determined in O-RAN-SC SMO OAM 2025-06-10. Affected by this issue is some...
CVE-2026-93309
A vulnerability was determined in O-RAN-SC SMO OAM 2025-06-10. Affected by this issue is some unknown functionality of t
Incorrect permission assignment for critical resource in M365 Copilot allows an authorized...
CVE-2026-85887
Incorrect permission assignment for critical resource in M365 Copilot allows an authorized attacker to disclose informat
A vulnerability was found in O-RAN-SC SMO OAM 2025-06-10. Affected by this vulnerability is an...
CVE-2026-93308
A vulnerability was found in O-RAN-SC SMO OAM 2025-06-10. Affected by this vulnerability is an unknown functionality of
Authentication bypass by spoofing in Microsoft Fabric allows an unauthorized attacker to elevate...
CVE-2026-69843
Authentication bypass by spoofing in Microsoft Fabric allows an unauthorized attacker to elevate privileges over a netwo
Insufficient verification of data authenticity in Azure Billing allows an unauthorized attacker...
CVE-2026-62874
Insufficient verification of data authenticity in Azure Billing allows an unauthorized attacker to elevate privileges ov
Improper neutralization of special elements in output used by a downstream component ('injection'...
CVE-2026-87701
Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Cosmos DB al
Improper authorization in Azure Database for PostgreSQL allows an authorized attacker to elevate...
CVE-2026-85878
Improper authorization in Azure Database for PostgreSQL allows an authorized attacker to elevate privileges over a netwo
vLLM through 0.29.0 fails to properly clean up decode-side metadata for rejected inference...
CVE-2026-93436
vLLM through 0.29.0 fails to properly clean up decode-side metadata for rejected inference requests in prefill/decode di