LibreSSL ocspcheck through 4.4.0 contains a cleartext transmission vulnerability because url2host...
CVE-2026-118373
LibreSSL ocspcheck through 4.4.0 contains a cleartext transmission vulnerability because url2host() discards the OCSP UR
#advisory
共收录 23093 条相关情报。
← 返回所有主题LibreSSL ocspcheck through 4.4.0 contains a memory exhaustion vulnerability that allows malicious...
CVE-2026-118374
LibreSSL ocspcheck through 4.4.0 contains a memory exhaustion vulnerability that allows malicious OCSP responders to exh
libexpat through 2.9.0 contains a NULL pointer dereference vulnerability in...
CVE-2026-117610
libexpat through 2.9.0 contains a NULL pointer dereference vulnerability in externalEntityInitProcessor2() in lib/xmlpar
nopCommerce before 5.00.0 contains a missing authorization vulnerability in the admin...
CVE-2026-117605
nopCommerce before 5.00.0 contains a missing authorization vulnerability in the admin ProductController RelatedProductAd
GROWI contains a missing authorization check vulnerability in its collaborative editing feature....
CVE-2026-115624
GROWI contains a missing authorization check vulnerability in its collaborative editing feature. By exploiting this vuln
Xerte Online Toolkits through 3.15.5 contains a remote code execution vulnerability that allows...
CVE-2026-117607
Xerte Online Toolkits through 3.15.5 contains a remote code execution vulnerability that allows authenticated users with
LibreSSL through 4.4.0 contains a CRLF injection vulnerability in the libcrypto OCSP_sendreq_new(...
CVE-2026-118371
LibreSSL through 4.4.0 contains a CRLF injection vulnerability in the libcrypto OCSP_sendreq_new() and OCSP_parse_url()
rtl_433 through 25.12 contains a stack-based buffer overflow vulnerability in proflame2_mc() that...
CVE-2026-117609
rtl_433 through 25.12 contains a stack-based buffer overflow vulnerability in proflame2_mc() that allows nearby attacker
A flaw has been found in a2ui-project a2ui up to 0.10.6. Affected by this vulnerability is the...
CVE-2026-118273
A flaw has been found in a2ui-project a2ui up to 0.10.6. Affected by this vulnerability is the function DataModel.set of
Assimp through 6.0.5 contains an integer overflow vulnerability in MD2Importer::ValidateHeader()...
CVE-2026-117608
Assimp through 6.0.5 contains an integer overflow vulnerability in MD2Importer::ValidateHeader() that allows attackers t
A vulnerability has been found in a2ui-project a2ui up to 0.10.6. Affected by this issue is some...
CVE-2026-118274
A vulnerability has been found in a2ui-project a2ui up to 0.10.6. Affected by this issue is some unknown functionality o
libexpat through 2.9.0 contains a signed integer overflow vulnerability in storeAtts() in lib...
CVE-2026-118370
libexpat through 2.9.0 contains a signed integer overflow vulnerability in storeAtts() in lib/xmlparse.c that allows att
NexoPOS through 6.3.0 contains a missing authorization vulnerability that allows authenticated...
CVE-2026-117606
NexoPOS through 6.3.0 contains a missing authorization vulnerability that allows authenticated cashiers to manipulate ot
The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction &...
CVE-2026-107625
The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugi
The AI Marketing Expert — AI Email Marketing, AI Content Generator, SEO Analyzer, AI Workflow...
CVE-2026-109999
The AI Marketing Expert — AI Email Marketing, AI Content Generator, SEO Analyzer, AI Workflow Automation, Social Media &
The All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos...
CVE-2026-109974
The All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos plugin for WordPress is
The All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos...
CVE-2026-109209
The All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos plugin for WordPress is
The affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display plugin for WordPress is...
CVE-2026-111314
The affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display plugin for WordPress is vulnerable to Stored Cr
The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable...
CVE-2026-107745
The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to limited media file d
CrushFTP before 7.3.0 contains a cross-site request forgery vulnerability that allows attackers...
CVE-2015-20129
CrushFTP before 7.3.0 contains a cross-site request forgery vulnerability that allows attackers to perform administrativ