IBM Aspera Enterprise WebApps 1.0.0 through 1.0.5 could allow a local attacker to escape...
CVE-2026-75777
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.5 could allow a local attacker to escape container protections due to un
#advisory
共收录 23661 条相关情报。
← 返回所有主题IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to read...
CVE-2026-79725
IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to read arbitrary files due to imprope
IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute...
CVE-2026-78575
IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary commands due to i
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.27 could allow...
CVE-2026-75624
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.27 could allow a remote authenticated
An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit...
CVE-2026-71643
An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows an att
An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit...
CVE-2026-71640
An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows unsafe
An issue in Robotics-STAR-Lab (SYSU STAR Group) RACER Tested affected version: commit...
CVE-2026-71645
An issue in Robotics-STAR-Lab (SYSU STAR Group) RACER Tested affected version: commit abcdef1234567890 allows an attacke
An issue in EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42...
CVE-2026-71647
An issue in EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows an attacker to caus
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-57844
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit...
CVE-2026-71642
An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows an att
FairSketch Rise CRM Version 3.9.6 is vulnerable to Cross Site Scripting (XSS). An authenticated...
CVE-2026-36392
FairSketch Rise CRM Version 3.9.6 is vulnerable to Cross Site Scripting (XSS). An authenticated administrator can inject
IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0...
CVE-2026-19646
IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 could allow a remote
IBM webMethods Integration Server 11.1 IBM webMethods Integration is vulnerable to an XML...
CVE-2026-2310
IBM webMethods Integration Server 11.1 IBM webMethods Integration is vulnerable to an XML external entity injection (XXE
Path Traversal in avatar attachments in Docmost v0.21.0 allows an unauthenticated malicious actor...
CVE-2025-57231
Path Traversal in avatar attachments in Docmost v0.21.0 allows an unauthenticated malicious actor to disclose local file
Open WebUI: Users denied by the OAuth role policy can still sign in via token exchange
CVE-2026-88006
## Summary Open WebUI's OAuth token exchange endpoint issues a session for a provider access token without running the O
Traefik: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') and Incorrect Authorization
CVE-2026-88008
## Summary There is a high-severity request-smuggling vulnerability in Traefik's handling of the HTTP/1.1 `Upgrade` mec
Traefik entrypoint header-name sanitization bypassed via request trailers
CVE-2026-88004
## Summary Traefik's entrypoint defenses against spoofed trusted header names — `aliasHeadersStrategy` / `underscoreHea
Traefik HTTP/3 Backend NTLM Connection Reuse
CVE-2026-88007
## Summary Traefik's HTTP/3 request path did not initialize the connection-scoped backend transport holder that isolate
Traefik: Rootless HTTP/1 request-target routes as "/" but is forwarded verbatim, bypassing path-scoped routing, middleware guards and access logging
CVE-2026-88009
## Summary Traefik accepts an HTTP/1.x request whose request-target is in rootless / opaque form (for example `GET http
rclone archive/zip: Zip Slip via unsanitized zip entry names lets a malicious archive escape its own namespace
CVE-2026-88014
### Summary `backend/archive` mounts a zip file as a browsable, syncable rclone `Fs` (e.g. `rclone lsf :zip:downloaded.z