Netcore NR268 firmware version 1.7.121109 contains a security check bypass vulnerability in the...
CVE-2026-76853
Netcore NR268 firmware version 1.7.121109 contains a security check bypass vulnerability in the parame_put_file.cgi rest
#advisory
共收录 23580 条相关情报。
← 返回所有主题Netcore NR255-V firmware version 1.5.130703 contains a cross-site request forgery vulnerability...
CVE-2026-76856
Netcore NR255-V firmware version 1.5.130703 contains a cross-site request forgery vulnerability affecting the wan_config
Netcore NR268 firmware version 1.7.121109 has an improper integrity verification flaw in...
CVE-2026-76852
Netcore NR268 firmware version 1.7.121109 has an improper integrity verification flaw in mtd_write allowing forged firmw
On affected platforms running Arista EOS with VRRPv2 IP Authentication Header (IP-AH)...
CVE-2026-73444
On affected platforms running Arista EOS with VRRPv2 IP Authentication Header (IP-AH) authentication configured, an unau
Rsbuild before 2.0.9 contains a command injection vulnerability that allows attackers to execute...
CVE-2026-10144
Rsbuild before 2.0.9 contains a command injection vulnerability that allows attackers to execute arbitrary OS commands b
On affected platforms running Arista EOS with Dynamic Host Configuration Protocol (DHCP) relay...
CVE-2026-73437
On affected platforms running Arista EOS with Dynamic Host Configuration Protocol (DHCP) relay configured, an unauthenti
The mySCADA myPRO Manager command API does not properly enforce authentication for privileged...
CVE-2026-73807
The mySCADA myPRO Manager command API does not properly enforce authentication for privileged functions. An unauthentica
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-10149
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-10145
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-10150
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
a2ui-project a2ui Angular Renderer server-to-client.ts z.any injection
CVE-2026-92213
A vulnerability was detected in a2ui-project a2ui up to 0.10.6. This impacts the function z.any of the file renderers/we
ag-ui-protocol ag-ui Multimodal Content utils.py urllib.request.urlopen server-side request forgery
CVE-2026-92184
A security flaw has been discovered in ag-ui-protocol ag-ui 0.3.0. Affected is the function urllib.request.urlopen of th
Cotonti 1.0.0 Comments plugin passes the ci GET parameter to unserialize() without...
CVE-2026-91939
Cotonti 1.0.0 Comments plugin passes the ci GET parameter to unserialize() without allowed_classes restriction, allowing
Use after free in Workers in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to...
CVE-2026-91749
Use after free in Workers in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbit
Confused deputy in PriceTracking in Google Chrome on on iOS prior to 153.0.8010.47 allowed a...
CVE-2026-91742
Confused deputy in PriceTracking in Google Chrome on on iOS prior to 153.0.8010.47 allowed a remote attacker leveraging
Incomplete cleanup in GetUserMedia in Google Chrome prior to 153.0.8010.47 allowed a remote...
CVE-2026-91730
Incomplete cleanup in GetUserMedia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised
Use after free in DOM in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to...
CVE-2026-91736
Use after free in DOM in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside
Insertion of sensitive information into log file in the slow query logging feature in Devolutions...
CVE-2026-92237
Insertion of sensitive information into log file in the slow query logging feature in Devolutions PowerShell Universal 2
Missing authorization in Transactions Platform in Google Chrome prior to 153.0.8010.47 allowed a...
CVE-2026-91739
Missing authorization in Transactions Platform in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had
Improper input validation in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote...
CVE-2026-91738
Improper input validation in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially exec