Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an ...

CVE-2026-57185

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2

来源摘录 · NVD / OSV.dev

Authlib is a Python library which builds OAuth and OpenID Connect servers. From 0.15 until 1.9.1, the documented ClientConfigurationEndpoint.authenticate_client and ClientConfig...

CVE-2026-116672

Authlib is a Python library which builds OAuth and OpenID Connect servers. From 0.15 until 1.9.1, the documented ClientC

来源摘录 · NVD / GitHub Advisory

oretnom23 php-travel-agency-system traceapplication.php sql injection

CVE-2026-117515

A security flaw has been discovered in oretnom23 php-travel-agency-system 4e28b8f84d72420373dd15c3ae32900beb7e0635. Impa

历史摘要 · 未重新核验 · OSV.dev

Atlantis: OS command injection through PR-controlled Terraform workspace enables RCE during plan

CVE-2026-116676

Atlantis is a self-hosted golang application that listens for Terraform pull request events via webhooks. From version 0

历史摘要 · 未重新核验 · OSV.dev

Hydra legacy target blacklist permits unsafe PyYAML loading

## Summary Hydra's legacy target blacklist omits PyYAML's unsafe loading surfaces. If an application passes attacker-co

历史摘要 · 未重新核验 · GitHub Advisory

oretnom23 php-travel-agency-system Admin Record Pages customer_detail.php sql injection

CVE-2026-117514

A vulnerability was identified in oretnom23 php-travel-agency-system. This issue affects some unknown processing of the

历史摘要 · 未重新核验 · OSV.dev

Asterisk: Possible RED T.140 Generation Accumulation OOB Write

CVE-2026-57189

Asterisk is an open source private branch exchange and telephony toolkit. In affected deployments, an authenticated atta

历史摘要 · 未重新核验 · OSV.dev

Asterisk: Stack Buffer Overflow in H.323 ooTrace() via Unbounded vsprintf into Fixed 2048-byte Buffer

CVE-2026-57201

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2

历史摘要 · 未重新核验 · OSV.dev

Asterisk: chan_unistim DIALPAGE digit handling can overflow phone_number and crash Asterisk

CVE-2026-57194

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2

历史摘要 · 未重新核验 · OSV.dev

Asterisk: Possible RED T.140 Heap Buffer Overflow

CVE-2026-57198

Asterisk is an open source private branch exchange and telephony toolkit. In affected deployments, an authenticated atta

历史摘要 · 未重新核验 · OSV.dev

TinyMCE Cross-Site Scripting (XSS) vulnerability using media plugin `data-mce-object` serialization

CVE-2026-116675

TinyMCE is an open source rich text editor. From 7.9.3 until 7.9.4 and from 8.5.1 until 8.9.3, the media plugin creates

历史摘要 · 未重新核验 · OSV.dev

oretnom23 php-travel-agency-system Admin Search Pages customer_search.php sql injection

CVE-2026-117513

A vulnerability was determined in oretnom23 php-travel-agency-system. This vulnerability affects unknown code of the fil

历史摘要 · 未重新核验 · OSV.dev

systeminformation: Prototype pollution in `networkStats()` via the interface name

CVE-2026-116674

systeminformation is a System and OS information library for node.js. Prior to 5.33.13, networkStats(ifaces) in lib/netw

历史摘要 · 未重新核验 · OSV.dev

Asterisk: Buffer over-read in Asterisk PJSIP MWI body parser

CVE-2026-57185

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2

历史摘要 · 未重新核验 · OSV.dev

systeminformation: Path traversal in Linux networkStats() allows symlink-based file disclosure outside /sys/class/net

CVE-2026-116673

systeminformation is a System and OS information library for node.js. Prior to 5.33.14, the Linux networkStats(iface) im

历史摘要 · 未重新核验 · OSV.dev

Asterisk: Heap Buffer Overflow in OGG/Speex File Playback (format_ogg_speex)

CVE-2026-57197

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2

历史摘要 · 未重新核验 · OSV.dev

libXi XGetDeviceControl DEVICE_ENABLE Heap Buffer Overflow

CVE-2026-109090

A malicious X server could cause a heap overflow by injecting a large DEVICE_ENABLE reply when processed by libXi before

历史摘要 · 未重新核验 · OSV.dev

Authlib RFC 7592 examples omit registration-access-token client binding

CVE-2026-116672

Authlib is a Python library which builds OAuth and OpenID Connect servers. From 0.15 until 1.9.1, the documented ClientC

历史摘要 · 未重新核验 · OSV.dev

oretnom23 php-travel-agency-system employee_insert.php unrestricted upload

CVE-2026-117512

A vulnerability was found in oretnom23 php-travel-agency-system. This affects an unknown part of the file admin/employee

历史摘要 · 未重新核验 · OSV.dev

libXtst RECORD EnableContext Reply Endless Loop

CVE-2026-109088

A malicious X server could send malformed  RECORD EnableContext reolies that can cause a X client using the parse_reply_

历史摘要 · 未重新核验 · OSV.dev