Grav: Decompression Bomb via ZipArchiver - Missing Extraction Limits
CVE-2026-61690
## Summary `ZipArchiver::extract()` lacks limits on uncompressed size, file count, and nesting depth, creating a distinc
#advisory
共收录 23717 条相关情报。
← 返回所有主题A security vulnerability has been detected in Reader Tools PDF Reader App 98.8 on Android. The...
CVE-2026-84852
A security vulnerability has been detected in Reader Tools PDF Reader App 98.8 on Android. The affected element is the f
A security flaw has been discovered in tsi-coop tsi-dpdp-cms up to 0.5.0. This vulnerability...
CVE-2026-84841
A security flaw has been discovered in tsi-coop tsi-dpdp-cms up to 0.5.0. This vulnerability affects unknown code. The m
A flaw has been found in sigoden aichat up to 0.30.4. This affects an unknown function of the...
CVE-2026-84857
A flaw has been found in sigoden aichat up to 0.30.4. This affects an unknown function of the file src/serve.rs of the c
Insufficient Verification of Data Authenticity in AGESA™ may allow an attacker to update SPI ROM...
CVE-2023-20576
Insufficient Verification of Data Authenticity in AGESA™ may allow an attacker to update SPI ROM data potentially result
UpSignOn for Windows before 7.19.0 contains a sensitive data exposure vulnerability that allows...
CVE-2026-75137
UpSignOn for Windows before 7.19.0 contains a sensitive data exposure vulnerability that allows local attackers to recov
UnoPim before 2.1.5 contains an authenticated file upload vulnerability that allows authenticated...
CVE-2026-82524
UnoPim before 2.1.5 contains an authenticated file upload vulnerability that allows authenticated administrators to uplo
A vulnerability was identified in tsi-coop tsi-dpdp-cms up to 0.5.0. This affects an unknown part...
CVE-2026-84840
A vulnerability was identified in tsi-coop tsi-dpdp-cms up to 0.5.0. This affects an unknown part of the file Intercepti
A heap overflow in SMM module may allow an attacker with access to a second vulnerability that...
CVE-2023-20577
A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI fl
UpSignOn for Windows before 7.19.0 contains an insecure credential storage vulnerability that...
CVE-2026-75136
UpSignOn for Windows before 7.19.0 contains an insecure credential storage vulnerability that allows local attackers to
UpSignOn for Windows before 7.19.0 contains a sensitive data exposure vulnerability that allows...
CVE-2026-75135
UpSignOn for Windows before 7.19.0 contains a sensitive data exposure vulnerability that allows local attackers to recov
SEOWriting plugin for WordPress through 1.12.5 contains a stored cross-site scripting...
CVE-2026-75134
SEOWriting plugin for WordPress through 1.12.5 contains a stored cross-site scripting vulnerability that allows authenti
A vulnerability was detected in rowboatlabs rowboat up to 0.9.1. The impacted element is the...
CVE-2026-84856
A vulnerability was detected in rowboatlabs rowboat up to 0.9.1. The impacted element is the function request.text/req.j
A vulnerability was determined in tsi-coop tsi-dpdp-cms up to 0.5.0. Affected by this issue is...
CVE-2026-84839
A vulnerability was determined in tsi-coop tsi-dpdp-cms up to 0.5.0. Affected by this issue is some unknown functionalit
Under specific conditions, an attacker can register an attacker-controlled FIDO2 credential...
CVE-2026-19117
Under specific conditions, an attacker can register an attacker-controlled FIDO2 credential against a target account and
link-preview-js DNS Rebinding SSRF Bypass / Incomplete Fix for CVE-2026-43897
CVE-2026-61704
The existing advisory GHSA-4gp8-rjrq-ch6q / CVE-2026-43897 states that the SSRF issue was fixed in 4.0.1. However, 4.0.3
Uncontrolled recursion in the Ion reader in Amazon Ion-C before 1.1.6
CVE-2026-84851
An uncontrolled recursion issue exists in Amazon Ion-C versions before 1.1.6 that might allow a remote unauthenticated a
rowboatlabs rowboat Composio Webhook Endpoint route.ts req.json denial of service
CVE-2026-84856
A vulnerability was detected in rowboatlabs rowboat up to 0.9.1. The impacted element is the function request.text/req.j
UnoPim File Upload RCE via TinyMCE Image Upload Endpoint
CVE-2026-82524
UnoPim before 2.1.5 contains an authenticated file upload vulnerability that allows authenticated administrators to uplo
Windows ML CLI: CORS misconfig enables localhost RCE
CVE-2026-84452
Windows ML CLI is a command line tool for building portable, performant, and high-quality AI models for Windows ML. Prio