CAT through 3.1.0 Session Cookie Forgery via Unkeyed hashCode Checksum
CVE-2026-85181
CAT uses Java String.hashCode as the sole integrity check for session cookies without server-side keying, allowing attac
#advisory
共收录 23717 条相关情报。
← 返回所有主题Ollama 0.30.0 through 0.33.2 SSRF via Cross-Host Tensor Blob Redirect
CVE-2026-85180
Ollama fails to validate redirect destinations when pulling tensor-layer models, allowing unauthenticated attackers to r
Label Studio through 1.23.0 SSRF via Unvalidated Webhook URL
CVE-2026-85179
Label Studio through 1.23.0 fails to validate webhook URLs, allowing authenticated users to dispatch requests to interna
CRMEB through 6.0.0 Unauthorized Message Modification via edit_message
CVE-2026-85177
CRMEB through 6.0.0 fails to validate message ownership in the edit_message handler of MessageSystemController.php, allo
ILIAS MediaPool ZipAdapter.php uploadMultipleSubtitleFileObject unrestricted upload
CVE-2026-85135
A security flaw has been discovered in ILIAS up to 9.21/10.9/11.2. This affects the function ilObjMediaObjectGUI::upload
MISP LDAP and LinOTP Authentication Bypass via Empty or Invalid Credentials
CVE-2026-85216
MISP contains an authentication bypass vulnerability in its LDAP and LinOTP authentication components due to insufficien
n8n before 2.36.2 Missing Authorization via Insights API
CVE-2026-85173
n8n versions before 2.36.2 contain a missing per-project authorization vulnerability in the Insights API routes that all
n8n before 2.34.1 SSRF via Request Helper URI Validation Bypass
CVE-2026-85172
n8n versions before 2.34.1 contain a server-side request forgery vulnerability in the legacy request helper function exp
n8n before 1.123.73 Credential Exposure via Error Logging
CVE-2026-85171
n8n before 1.123.73, 2.35.4, and 2.36.2 contains a credential exposure vulnerability in the Strapi, SeaTable, and Mailch
n8n before 1.123.73 Local File Read and SSRF via Gmail and Brevo nodes
CVE-2026-85170
n8n versions before 1.123.73, 2.35.4, and 2.36.2 pass message content in the Gmail (v1) and Brevo nodes to the mail comp
n8n before 1.123.73 Remote Code Execution via $fromAI Prototype Leak
CVE-2026-85169
n8n versions before 1.123.73, 2.35.4, and 2.36.2 contain an expression sandbox escape in the $fromAI handler. $fromAI re
n8n before 1.123.73 Remote Code Execution via Git Node
CVE-2026-85168
n8n versions before 1.123.73, 2.35.4, and 2.36.2 contain a remote code execution vulnerability in the Git node. The node
n8n before 2.36.2 Query Injection via Elasticsearch Firestore Nodes
CVE-2026-85167
n8n before 2.35.4 and 2.36.x before 2.36.2 contain a query injection vulnerability in the Elasticsearch Document Get All
n8n before 2.36.2 Credential Exfiltration via Workflow Tool Node
CVE-2026-85166
n8n before 2.35.4 and 2.36.x before 2.36.2 does not validate credential references in the inline workflow JSON of nodes
n8n before 2.36.2 Expression Sandbox Bypass via SpreadElement
CVE-2026-85165
n8n versions before 2.36.2 contain an expression sandbox bypass vulnerability where free identifiers in spread, computed
WWBN AVideo Broken Access Control via feed/index.php program_id
CVE-2026-85157
WWBN AVideo contains a broken access control vulnerability in the unauthenticated feed/index.php endpoint that disables
WWBN AVideo Broken Access Control via Channel Page
CVE-2026-85156
WWBN AVideo fails to properly validate access controls on the public channel page, allowing unauthenticated visitors to
WWBN AVideo SQL Injection via get.json.php APIName channels
CVE-2026-85155
WWBN AVideo contains a SQL injection vulnerability in the sort column parameter of the get.json.php endpoint with APINam
WWBN AVideo Authentication Bypass via Non-Expiring video_id_hash
CVE-2026-85154
WWBN AVideo contains an authentication failure vulnerability where the video_id_hash credential is a non-expiring, non-r
util-linux libmount Privilege Escalation via Failed Mount Helper
CVE-2026-76642
util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, al