xmldom: DocType `name` Injection Bypasses requireWellFormed
CVE-2026-83608
## Summary The `@xmldom/xmldom` serializer emits `DocumentType.name` verbatim into the `` declaration with no well-form
#advisory
共收录 23717 条相关情报。
← 返回所有主题InstantCMS vulnerable to SSRF via upload redirect bypass allows internal network service scanning
CVE-2026-48707
InstantCMS is a free and open source content management system. Versions prior to 2.18.2 have a Server-Side Request Forg
InstantCMS has Remote Code Execution in package installer
CVE-2026-54611
InstantCMS is a free and open source content management system. Versions prior to 2.18.2 have a Remote Code Execution (R
n8n: Per-Resource OAuth Consent Bypass via Unbound Refresh Token Resource Substitution
CVE-2026-86073
n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.1, the OAuth token endpoint bound an author
DeepSeek Harness < 0.1.2-alpha.1 Authentication Bypass via Host Header Spoofing
CVE-2026-82533
DeepSeek Harness before 0.1.2-alpha.1 contains an authentication bypass vulnerability in its local HTTP control-plane AP
Apache Airflow FAB provider: FAB Azure AD OAuth: id_token issuer/audience not validated — cross-tenant authentication bypass
CVE-2026-75156
Apache Airflow FAB provider versions 3.7.3 through 3.8.0 do not validate the issuer or audience of Azure AD `id_token`s
aircheng-org iWebShop-5 pic.php uploadFile cross site scripting
CVE-2026-86668
A security vulnerability has been detected in aircheng-org iWebShop-5 up to 5.15. The impacted element is the function u
aircheng-org iWebShop-5 member.php member_list sql injection
CVE-2026-86667
A weakness has been identified in aircheng-org iWebShop-5 up to 5.15. The affected element is the function member_list o
aircheng-org iWebShop-5 pic.php uploadFile unrestricted upload
CVE-2026-86666
A security flaw has been discovered in aircheng-org iWebShop-5 up to 5.15. Impacted is the function upload_json/uploadFi
Workload identity attestation generated before login host validation in Snowflake drivers
CVE-2026-86600
In affected Snowflake drivers, WORKLOAD_IDENTITY authentication requests a cloud workload-identity token and attaches it
Snipe-IT before 8.7.0 CSS Injection via Custom CSS
CVE-2026-86738
Snipe-IT versions before 8.7.0 contain a CSS injection vulnerability in the Custom CSS field due to incomplete sanitizat
snipe-it before 8.7.0 Missing Authorization via barcode endpoint
CVE-2026-86737
snipe-it versions before 8.7.0 fail to enforce asset view authorization in the GET /hardware/{asset}/barcode endpoint. A
snipe-it before 8.7.0 Checkout Request Counter Integrity Failure
CVE-2026-86736
snipe-it before 8.7.0 contains an incorrect calculation vulnerability in checkout request handling that allows authentic
snipe-it before 8.7.0 SSRF via IPv6 transition address bypass
CVE-2026-86735
snipe-it versions before 8.7.0 contain a server-side request forgery vulnerability in the ExternalUrl validation rule th
Snipe-IT before 8.7.1 Denial of Service via Unbounded Note Field
CVE-2026-86734
Snipe-IT before 8.7.1 fails to validate the length of the note field in the POST /account/accept/{acceptance} endpoint,
Snipe-IT before 8.7.0 Remote Code Execution via Backup Restore
CVE-2026-86733
Snipe-IT before 8.7.0 streams the SQL entry from an uploaded backup archive directly into the MySQL/MariaDB command-line
Craft CMS before 5.10.12 Remote Code Execution via element-index
CVE-2026-86732
Craft CMS versions before 5.10.12 contain a remote code execution vulnerability in the element-index endpoint that allow
Craft CMS 5.0.0-RC1 before 5.10.12 Permission Escalation via UsersController
CVE-2026-86731
Craft CMS versions 5.0.0-RC1 through 5.10.11 are missing an admin-target guard in UsersController::actionActivateUser (t
Craft CMS 5.0.0-RC1 before 5.10.12 Behavior Injection RCE
CVE-2026-86730
Craft CMS versions before 5.10.12 fail to properly cleanse string-typed field-layout elements, allowing authenticated co
WWBN AVideo Unrestricted Authentication Attempts via get_api_preauthorize
CVE-2026-86729
WWBN AVideo through commit e01e41ecc (no patched version available) exposes get_api_preauthorize in plugin/API/API.php a