knowns versions before 0.30.0 fail to validate the settings.lsp.languages binary field in project...
CVE-2026-86540
knowns versions before 0.30.0 fail to validate the settings.lsp.languages binary field in project configuration files, a
#advisory
共收录 23717 条相关情报。
← 返回所有主题Lara Dashboard before 1.3.2 fails to authorize the MarketplaceModuleBrowser installModule...
CVE-2026-86438
Lara Dashboard before 1.3.2 fails to authorize the MarketplaceModuleBrowser installModule Livewire action, allowing non-
Lara Dashboard before 1.3.2 fails to authorize access to the post-builder image and video upload...
CVE-2026-86436
Lara Dashboard before 1.3.2 fails to authorize access to the post-builder image and video upload endpoints, allowing aut
Lara Dashboard before 1.3.2 authorizes the POST /admin/settings/core-upgrades/upload endpoint...
CVE-2026-86437
Lara Dashboard before 1.3.2 authorizes the POST /admin/settings/core-upgrades/upload endpoint with only the settings.edi
Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template...
CVE-2026-75650
Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability tha
Protocol::HTTP2 versions before 1.14 for Perl allow memory exhaustion via closed streams that...
CVE-2026-16028
Protocol::HTTP2 versions before 1.14 for Perl allow memory exhaustion via closed streams that stream_state never removes
Net::IP::LPM versions before 1.12 for Perl accept malformed prefix lengths. Non-numeric and non...
CVE-2026-86287
Net::IP::LPM versions before 1.12 for Perl accept malformed prefix lengths. Non-numeric and non-ASCII prefix lengths ar
Protocol::HTTP2 versions before 1.14 for Perl allow memory exhaustion via closed streams that stream_state never removes from the connection stream table
CVE-2026-16028
Protocol::HTTP2 versions before 1.14 for Perl allow memory exhaustion via closed streams that stream_state never removes
In JetBrains YouTrack before 2026.2.18687 missing permission checks allowed creating knowledge...
CVE-2026-86495
In JetBrains YouTrack before 2026.2.18687 missing permission checks allowed creating knowledge base articles in inaccess
In JetBrains YouTrack before 2026.2.18769 changing a mailbox host without re-authentication...
CVE-2026-86497
In JetBrains YouTrack before 2026.2.18769 changing a mailbox host without re-authentication allowed a project administra
In JetBrains YouTrack before 2026.2.18634 improper permission checks allowed read-only users to...
CVE-2026-86493
In JetBrains YouTrack before 2026.2.18634 improper permission checks allowed read-only users to create and modify whiteb
In JetBrains IntelliJ IDEA before 2026.2.2 opening an untrusted project could trigger SSRF via...
CVE-2026-86503
In JetBrains IntelliJ IDEA before 2026.2.2 opening an untrusted project could trigger SSRF via Kubernetes spec-source UR
In JetBrains IntelliJ IDEA before 2026.2.2 terminal command input could be written to idea.log
CVE-2026-86501
In JetBrains IntelliJ IDEA before 2026.2.2 terminal command input could be written to idea.log
In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust check leaked project metadata to...
CVE-2026-86505
In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust check leaked project metadata to JetBrains Marketplace
In JetBrains YouTrack before 2025.3.160480, 2026.1.14047 pUT requests on link sub-resources...
CVE-2026-86498
In JetBrains YouTrack before 2025.3.160480, 2026.1.14047 pUT requests on link sub-resources allowed modification linked
In JetBrains YouTrack before 2026.2.18769 missing access control on Helpdesk authorized reporters...
CVE-2026-86496
In JetBrains YouTrack before 2026.2.18769 missing access control on Helpdesk authorized reporters exposed reporter email
In JetBrains YouTrack before 2026.1.14047 predefined search fields leaked all group names to any...
CVE-2026-86499
In JetBrains YouTrack before 2026.1.14047 predefined search fields leaked all group names to any user, regardless of vis
In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust confirmation before building a...
CVE-2026-86504
In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust confirmation before building a Dev Container allowed ho
In JetBrains YouTrack before 2026.2.18634 cloning a whiteboard allowed unauthorized changes to...
CVE-2026-86494
In JetBrains YouTrack before 2026.2.18634 cloning a whiteboard allowed unauthorized changes to links on inaccessible iss
In JetBrains GoLand before 2026.2.2.1 missing authentication on the GoLand profiler's injected...
CVE-2026-86506
In JetBrains GoLand before 2026.2.2.1 missing authentication on the GoLand profiler's injected pprof server exposed prof