A vulnerability in an API endpoint of AOS-CX could allow a remote unauthenticated attacker to...
CVE-2026-73756
A vulnerability in an API endpoint of AOS-CX could allow a remote unauthenticated attacker to obtain sensitive informati
#advisory
共收录 23717 条相关情报。
← 返回所有主题TYPO3 CMS - Broken Access Control in Backend and Install Tool
CVE-2026-19418
### Problem The referrer enforcement introduced with [TYPO3-CORE-SA-2020-006](https://news.typo3.com/security/advisory/t
Filament: Multi-factor authentication (app) codes can still be used after a newer code has been used
CVE-2026-84306
A flaw in the handling of one-time codes for app-based multi-factor authentication allows a previously issued code to be
Filament: Password validity disclosure for accounts denied panel access on login page
CVE-2026-84307
When multi-factor authentication is enabled, the login page presents the multi-factor challenge before evaluating `canAc
Filament: Multi-factor authentication (app) can be bypassed when recovery codes are enabled
CVE-2026-77567
A flaw in the challenge handling for app-based multi-factor authentication allows the second factor to be bypassed. This
pypdf: Possible long runtimes/large memory usage when retrieving outlines
CVE-2026-84310
### Impact An attacker who uses this vulnerability can craft a PDF which leads to long runtimes and large memory consum
pypdf: Possible long runtimes/large memory usage when extracting XForm objects
CVE-2026-84311
### Impact An attacker who uses this vulnerability can craft a PDF which leads to long runtimes and large memory consum
Vitest: Path Traversal / Arbitrary File Read via @vitest/mocker Redirect Mock
CVE-2026-84373
Vitest is a testing framework powered by Vite. From 2.1.0 until 4.1.11 and 5.0.0-rc.2, the public mockerPlugin and stand
Predis: Redis command injection and denial of service via CRLF smuggling in pipelined commands on aggregate connections
CVE-2026-84372
Predis is a flexible and feature-complete Redis and Valkey client for PHP. From version 3.0.0-RC1 until version 3.3.0, p
pypdf: Possible infinite loop for TreeObject.insert_child
CVE-2026-84309
### Impact An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires a (us
sqlparse: Reindentation of tuple lists causes near-cap quadratic CPU consumption
CVE-2026-84305
### Summary When SQL is formatted with reindentation enabled, `ReindentFilter` repeatedly rebuilds prefixes of the curr
ApostropheCMS: Stored XSS via SVG SMIL URI-list scheme-policy bypass
CVE-2026-84371
### Summary When SVG animation is allowed, `attributeName="href"` makes `values` a list of URL destinations. `sanitize-h
ApostropheCMS: Stored XSS via SVG SMIL URI-list scheme-policy bypass
CVE-2026-84371
ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer wi
SVGO: removeScripts incompletely sanitizes executable HTML in SVG foreignObject elements
CVE-2026-84369
SVGO, short for SVG Optimizer, is a Node.js library and command-line application for optimizing SVG files. From version
Cypht < 2.12.2 PHP Object Injection RCE via back_query Parameter
CVE-2026-71981
Cypht before 2.12.2 contains a PHP object injection vulnerability that allows authenticated attackers to execute arbitra
NLTK: JVM argument injection bypass via per-call options in the NLTK Stanford wrappers (incomplete fix of CVE-2026-12841)
CVE-2026-79675
## Vulnerability The fix for CVE-2026-12841 (CWE-88, JVM argument injection) added `_validate_java_options()` to block
joi: Prototype pollution via a `__proto__` language key in custom messages
CVE-2026-84368
joi is a schema description language and data validator for JavaScript. From 16.0.0 until 17.13.6 and 18.2.5, the @hapi/
Scrapy: S3DownloadHandler sends signed S3 requests over plaintext HTTP by default
CVE-2026-84366
Scrapy is a high-level web crawling and scraping framework for Python. Prior to 2.17.0, in scrapy/core/downloader/handle
league/commonmark: Denial of service via distinctly-named attributes in the Attributes extension
### Impact `AttributesExtension` ships with the library but must be explicitly registered on the `Environment`; it is n
NLTK: Uncontrolled search path when invoking the Graphviz 'dot' binary
CVE-2026-78680
Two NLTK sites executed the Graphviz `dot` program by bare name, so process creation resolved it via the search path — a