AVideo through 29.0 Unauthenticated Disclosure via epg.json.php
CVE-2026-86728
AVideo through 29.0 contains an authentication bypass vulnerability in plugin/PlayLists/epg.json.php that exposes live-s
#advisory
共收录 23717 条相关情报。
← 返回所有主题AVideo through 29.0 Information Disclosure via stats.json.php
CVE-2026-86727
AVideo through 29.0 contains an information disclosure vulnerability in plugin/Live/stats.json.php that allows unauthent
AVideo through 29.0 Information Disclosure via restreamsActive.json.php
CVE-2026-86726
AVideo through 29.0 contains an information disclosure vulnerability in restreamsActive.json.php that allows authenticat
aircheng-org iWebShop-5 update.php index authorization
CVE-2026-86665
A vulnerability was identified in aircheng-org iWebShop-5 up to 5.15. This issue affects the function Update::index of t
A Server-Side Request Forgery (SSRF) vulnerability exists in the ONLYOFFICE ownCloud Integration plugin (version 9.12)
CVE-2026-84282
A Server-Side Request Forgery (SSRF) vulnerability exists in the ONLYOFFICE ownCloud Integration plugin version 9.12. Th
star7th showdoc API Page Save Endpoint editormd.js cross site scripting
CVE-2026-86644
A vulnerability was determined in star7th showdoc up to 3.9.1. This vulnerability affects unknown code of the file web_s
fastify-cli vulnerable to remote code execution via ignored explicit Inspector bind address
CVE-2026-75021
fastify-cli starts the Node.js Inspector when a debug flag is used, but it ignores the explicit bind address the user su
CVE-2026-12611
CVE-2026-12611
A client may issue HTTP/2 requests to a Jetty server that result in blocking writes that are never unblocked, eventually
CVE-2026-19203
CVE-2026-19203
A client may issue specially crafted HTTP/1.1 chunked requests to a Jetty server that cause Jetty and an intermediary pr
PX4 Autopilot through 1.17.0 Stack Buffer Over-read via netman
CVE-2026-86714
PX4 Autopilot through 1.17.0 contains a stack buffer over-read vulnerability in the netman system command that fails to
PX4 Autopilot through 1.17.0 Use-After-Free in load_mon
CVE-2026-86713
PX4 Autopilot through 1.17.0 contains a use-after-free vulnerability in the load_mon module's stop path where exit_and_c
SiYuan before 3.8.2 Remote Code Execution via Clipboard
CVE-2026-86712
SiYuan before 3.8.2 trusts the attacker-writable text/siyuan clipboard MIME type and skips sanitization in the paste han
electerm before 5.3.15 Arbitrary Command Execution via Unvalidated runGlobalAsync IPC Bridge
CVE-2026-86711
electerm before 5.3.15 exposes 40+ main-process functions through an unvalidated Electron IPC handler with no function-n
CVE-2026-86590
CVE-2026-86590
In Eclipse Che versions 7.79.0 through 7.121.0, the dashboard backend's POST /dashboard/api/data/resolver endpoint passe
Sensitive information written to logs by Snowflake drivers
CVE-2026-86597
Insertion of sensitive information into log files in the Snowflake Python, Go, JDBC, Node.js, PHP PDO, and ODBC drivers
关于腾讯混元大模型部分接口下线及服务调整通知
关于腾讯混元大模型部分接口下线及服务调整通知
关于腾讯混元生视频部分接口下线及服务调整通知
关于腾讯混元生视频部分接口下线及服务调整通知
【TDSQL-C MySQL 版】关于 Serverless 新开区的公告
【TDSQL-C MySQL 版】关于 Serverless 新开区的公告
A security vulnerability has been detected in vgmstream up to r2117. Impacted is the function...
CVE-2026-86515
A security vulnerability has been detected in vgmstream up to r2117. Impacted is the function add_entry of the file src/
A security flaw has been discovered in java-json-tools jackson-coreutils 2.0. This vulnerability...
CVE-2026-86513
A security flaw has been discovered in java-json-tools jackson-coreutils 2.0. This vulnerability affects the function Tr