WWBN AVideo through 30.0 contains an information disclosure vulnerability in the MobileManager...
CVE-2026-84481
WWBN AVideo through 30.0 contains an information disclosure vulnerability in the MobileManager plugin getConfiguration e
#advisory
共收录 23717 条相关情报。
← 返回所有主题Net::DNS versions before 1.57 for Perl allow memory exhaustion via unbounded recursion in...
CVE-2026-81928
Net::DNS versions before 1.57 for Perl allow memory exhaustion via unbounded recursion in sig_data when re-encoding a me
Improper input validation in DataTransfer in Google Chrome prior to 152.0.7977.75 allowed a...
CVE-2026-84325
Improper input validation in DataTransfer in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging s
WWBN AVideo through commit 9c39d8c8 contains a cross-site request forgery vulnerability in the...
CVE-2026-84482
WWBN AVideo through commit 9c39d8c8 contains a cross-site request forgery vulnerability in the get_domain() and isSameDo
Use after free in Proxy in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to...
CVE-2026-84324
Use after free in Proxy in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outs
WWBN AVideo through commit 9c39d8c8 contains an incomplete authentication bypass in encryptPass...
CVE-2026-84483
WWBN AVideo through commit 9c39d8c8 contains an incomplete authentication bypass in encryptPass.json.php that allows una
Missing authorization in FileSystem in Google Chrome prior to 152.0.7977.75 allowed a remote...
CVE-2026-84323
Missing authorization in FileSystem in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromise
WWBN AVideo (current e01e41ecc and earlier) makes three login-time security controls depend...
CVE-2026-84479
WWBN AVideo (current e01e41ecc and earlier) makes three login-time security controls depend solely on the client-supplie
AVideo Live_schedule::setTitle() and setDescription() store POST input without sanitization,...
CVE-2026-84477
AVideo Live_schedule::setTitle() and setDescription() store POST input without sanitization, allowing users with streami
WWBN AVideo fails to validate password recovery token expiration in userRecoverPassSave.json.php,...
CVE-2026-84480
WWBN AVideo fails to validate password recovery token expiration in userRecoverPassSave.json.php, allowing attackers to
WWBN AVideo fails to validate trusted proxies before accepting X-Real-IP and X-Forwarded-For...
CVE-2026-84476
WWBN AVideo fails to validate trusted proxies before accepting X-Real-IP and X-Forwarded-For headers, allowing attackers
A vulnerability has been found in Casdoor up to 4.0.0. This affects an unknown function of the...
CVE-2026-84423
A vulnerability has been found in Casdoor up to 4.0.0. This affects an unknown function of the file controllers/resource
AVideo through version 29.0 contains an unauthenticated SQL injection vulnerability in the...
CVE-2026-84208
AVideo through version 29.0 contains an unauthenticated SQL injection vulnerability in the User_Location plugin's region
WWBN AVideo contains a path traversal vulnerability in the API get_api_login_code endpoint that...
CVE-2026-84478
WWBN AVideo contains a path traversal vulnerability in the API get_api_login_code endpoint that allows unauthenticated a
A server-side request forgery (SSRF) vulnerability was identified in GitHub Enterprise Server...
CVE-2026-18730
A server-side request forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed an unauthenti
Proxmox Virtual Environment (VE) 7.0 through 8.0 contains an authentication bypass vulnerability...
CVE-2023-54391
Proxmox Virtual Environment (VE) 7.0 through 8.0 contains an authentication bypass vulnerability in libpve-access-contro
Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS...
CVE-2026-83549
Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerabi
A vulnerability was found in NousResearch hermes-agent up to 0.18.2. This vulnerability affects...
CVE-2026-84289
A vulnerability was found in NousResearch hermes-agent up to 0.18.2. This vulnerability affects the function list_tools
A Server-Side Request Forgery (SSRF) vulnerability was identified in GitHub Enterprise Server...
CVE-2026-76851
A Server-Side Request Forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed remote code e
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due...
CVE-2026-83548
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended altern