A malicious IMAP server can trigger use-after-free and heap-memory disclosure by sending a...
CVE-2026-84641
A malicious IMAP server can trigger use-after-free and heap-memory disclosure by sending a crafted ID response. Heap con
#advisory
共收录 23717 条相关情报。
← 返回所有主题The values of the mail.allowed_attachment_hostnames advanced config setting were used in a...
CVE-2026-84642
The values of the mail.allowed_attachment_hostnames advanced config setting were used in a regular expression without es
Triggering an error condition in certain MIME bodies would cause uninitialized memory to be used....
CVE-2026-84639
Triggering an error condition in certain MIME bodies would cause uninitialized memory to be used. This vulnerability was
A vulnerability has been found in NousResearch hermes-agent up to 0.18.2. This affects the...
CVE-2026-84288
A vulnerability has been found in NousResearch hermes-agent up to 0.18.2. This affects the function HermesACPAgent.promp
A time-of-check time-of-use race condition vulnerability was identified in GitHub Enterprise...
CVE-2026-19118
A time-of-check time-of-use race condition vulnerability was identified in GitHub Enterprise Server that allowed remote
Malicious calendar invitations could use file URI attachments to launch local or network-hosted...
CVE-2026-84637
Malicious calendar invitations could use file URI attachments to launch local or network-hosted executables on Windows,
A maliciously constructed mail header could lead to a one byte read past the end of a buffer....
CVE-2026-84640
A maliciously constructed mail header could lead to a one byte read past the end of a buffer. This vulnerability was fix
Casdoor upload-resource API resource.go missing authentication
CVE-2026-84423
A vulnerability has been found in Casdoor up to 4.0.0. This affects an unknown function of the file controllers/resource
WWBN AVideo Password Recovery Token Expiration Bypass
CVE-2026-84480
WWBN AVideo fails to validate password recovery token expiration in userRecoverPassSave.json.php, allowing attackers to
WWBN AVideo Authentication Bypass via User-Agent Header
CVE-2026-84479
WWBN AVideo (current e01e41ecc and earlier) makes three login-time security controls depend solely on the client-supplie
AVideo Stored XSS via Live Schedule Title Description
CVE-2026-84477
AVideo Live_schedule::setTitle() and setDescription() store POST input without sanitization, allowing users with streami
WWBN AVideo Authentication Bypass via X-Real-IP Header
CVE-2026-84476
WWBN AVideo fails to validate trusted proxies before accepting X-Real-IP and X-Forwarded-For headers, allowing attackers
AVideo User_Location Plugin Unauthenticated SQL Injection
CVE-2026-84208
AVideo through version 29.0 contains an unauthenticated SQL injection vulnerability in the User_Location plugin's region
js-yaml: maxTotalMergeKeys does not limit CPU use for empty merge sources
CVE-2026-84375
js-yaml is a JavaScript YAML parser and dumper. From 3.0.0 until 3.15.2 and 4.3.2, maxTotalMergeKeys in lib/js-yaml/load
gRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation
CVE-2026-84304
### Impact An unauthenticated remote attacker can initiate a gRPC stream and purposefully fragment their payload into mi
A flaw has been found in NousResearch hermes-agent 0.18.0. Affected by this issue is some unknown...
CVE-2026-84287
A flaw has been found in NousResearch hermes-agent 0.18.0. Affected by this issue is some unknown functionality of the f
A vulnerability in the web-based management interface of AOS-CX could allow an authenticated...
CVE-2026-73781
A vulnerability in the web-based management interface of AOS-CX could allow an authenticated remote attacker to conduct
A flaw was found in Ansible Automation Platform's automation-controller (AWX). The Bulk Job...
CVE-2026-84470
A flaw was found in Ansible Automation Platform's automation-controller (AWX). The Bulk Job Launch API (POST /api/v2/bul
Vulnerabilities have been identified in the API endpoint of AOS-CX switches that could...
CVE-2026-73777
Vulnerabilities have been identified in the API endpoint of AOS-CX switches that could potentially allow an unauthentica
Stack overflow vulnerabilities exist in an API endpoint of AOS-CX. Successful exploitation could...
CVE-2026-73783
Stack overflow vulnerabilities exist in an API endpoint of AOS-CX. Successful exploitation could allow an authenticated