WWBN AVideo contains a path traversal vulnerability in notify.ffmpeg.json.php that allows...
CVE-2026-86189
WWBN AVideo contains a path traversal vulnerability in notify.ffmpeg.json.php that allows unauthenticated attackers to w
#advisory
共收录 23717 条相关情报。
← 返回所有主题AVideo with YPTSocket plugin enabled contains a cross-site scripting vulnerability allowing...
CVE-2026-86188
AVideo with YPTSocket plugin enabled contains a cross-site scripting vulnerability allowing unauthenticated attackers to
WWBN AVideo contains a broken access control vulnerability in videoViewsInfo endpoints that...
CVE-2026-86190
WWBN AVideo contains a broken access control vulnerability in videoViewsInfo endpoints that returns complete user record
SiYuan versions before v3.8.2 fail to properly filter private attribute-view cell values in the...
CVE-2026-86192
SiYuan versions before v3.8.2 fail to properly filter private attribute-view cell values in the getAttributeViewKeys end
grav-plugin-api versions before 1.0.20 contain a privilege escalation vulnerability in the...
CVE-2026-86195
grav-plugin-api versions before 1.0.20 contain a privilege escalation vulnerability in the InvitationsController where t
WWBN AVideo generates passwords for external-login accounts using rand() instead of a...
CVE-2026-86187
WWBN AVideo generates passwords for external-login accounts using rand() instead of a cryptographic generator, producing
Grav API plugin versions before 1.0.20 build password reset links from the untrusted Host header...
CVE-2026-86196
Grav API plugin versions before 1.0.20 build password reset links from the untrusted Host header in the forgot-password
Grav Form Plugin before 9.1.22 fails to verify page authorization when resolving forms by name...
CVE-2026-86194
Grav Form Plugin before 9.1.22 fails to verify page authorization when resolving forms by name across pages, allowing an
grav-plugin-api before 1.0.20 fails to validate group-inherited super permissions in user...
CVE-2026-86193
grav-plugin-api before 1.0.20 fails to validate group-inherited super permissions in user-management guards, allowing no
SiYuan versions before v3.8.2 contain an information disclosure vulnerability in the...
CVE-2026-86191
SiYuan versions before v3.8.2 contain an information disclosure vulnerability in the getAttributeViewKeysByID endpoint t
AVideo API fails to enforce rate limits when clients send a bot User-Agent header, allowing...
CVE-2026-86186
AVideo API fails to enforce rate limits when clients send a bot User-Agent header, allowing attackers to bypass all eigh
CDT before 1.4.5 contains an out-of-bounds read vulnerability in the opposedVertexInd() function...
CVE-2025-15647
CDT before 1.4.5 contains an out-of-bounds read vulnerability in the opposedVertexInd() function when constraint edge in
The Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails plugin for...
CVE-2026-10196
The Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails plugin for WordPress is vulnerable to
Lara Dashboard before 1.3.0 contains an authentication bypass vulnerability in the screenshot...
CVE-2026-86184
Lara Dashboard before 1.3.0 contains an authentication bypass vulnerability in the screenshot-login route that allows un
ugrep before 7.6.0 contains a heap buffer over-read vulnerability in the LZW decompressor when...
CVE-2025-15614
ugrep before 7.6.0 contains a heap buffer over-read vulnerability in the LZW decompressor when processing crafted .Z arc
The Ninja Forms - Save Progress plugin for WordPress is vulnerable to Missing Authorization in...
CVE-2026-15550
The Ninja Forms - Save Progress plugin for WordPress is vulnerable to Missing Authorization in versions up to, and inclu
Pterodactyl Panel before 1.14.1 fails to validate action-specific permissions in scheduled task...
CVE-2026-86177
Pterodactyl Panel before 1.14.1 fails to validate action-specific permissions in scheduled task creation, allowing subus
NetBox through 4.7.0 fails to properly scope user-private records in REST and GraphQL API...
CVE-2026-86176
NetBox through 4.7.0 fails to properly scope user-private records in REST and GraphQL API endpoints for Notifications, S
Plane through 1.4.2 fails to validate that issues belong to the deploy board's project in the...
CVE-2026-86174
Plane through 1.4.2 fails to validate that issues belong to the deploy board's project in the public comment endpoint. A
The Nokri – Job Board WordPress Theme theme for WordPress is vulnerable to unauthorized...
CVE-2025-9049
The Nokri – Job Board WordPress Theme theme for WordPress is vulnerable to unauthorized modification of data due to a mi