DOMPurify from 3.4.4 before 3.4.17 contains a SAFE_FOR_TEMPLATES bypass that lets attackers...
CVE-2026-116804
DOMPurify from 3.4.4 before 3.4.17 contains a SAFE_FOR_TEMPLATES bypass that lets attackers preserve template expression
#advisory
共收录 23093 条相关情报。
← 返回所有主题OpenPanel before 3.0.0 contains a missing authorization vulnerability in the event.bots tRPC...
CVE-2026-116809
OpenPanel before 3.0.0 contains a missing authorization vulnerability in the event.bots tRPC procedure that allows unaut
OpenPanel before 3.0.0 contains an information disclosure vulnerability that allows read-level...
CVE-2026-116805
OpenPanel before 3.0.0 contains an information disclosure vulnerability that allows read-level project members to obtain
OpenPanel before 3.0.0 contains an sql injection vulnerability in ConversionService.getConversion...
CVE-2026-116813
OpenPanel before 3.0.0 contains an sql injection vulnerability in ConversionService.getConversion that allows project-re
OpenPanel before 3.0.0 contains an sql injection vulnerability that allows authenticated users to...
CVE-2026-116807
OpenPanel before 3.0.0 contains an sql injection vulnerability that allows authenticated users to bypass tenant scoping
OpenPanel before 3.0.0 contains an information exposure vulnerability that writes database...
CVE-2026-116814
OpenPanel before 3.0.0 contains an information exposure vulnerability that writes database connection URLs and email tem
A vulnerability has been found in Argilla up to 2.8.0. The impacted element is an unknown...
CVE-2026-116555
A vulnerability has been found in Argilla up to 2.8.0. The impacted element is an unknown function of the file argilla-f
WWBN AVideo before 29.5.0 contains a local file inclusion vulnerability that allows...
CVE-2026-116800
WWBN AVideo before 29.5.0 contains a local file inclusion vulnerability that allows unauthenticated attackers to include
In apache-airflow-providers-ssh before 7.0.1, SSHRemoteJobOperator quoted the values of its...
CVE-2026-111422
In apache-airflow-providers-ssh before 7.0.1, SSHRemoteJobOperator quoted the values of its templated `environment` para
A vulnerability was detected in SourceCodester Online Food Ordering System 1.0. This issue...
CVE-2026-116602
A vulnerability was detected in SourceCodester Online Food Ordering System 1.0. This issue affects the function unlink o
Parse Server before 8.6.105 and 9.0.0 before 9.10.5-alpha.6 does not validate the owning object...
CVE-2026-116801
Parse Server before 8.6.105 and 9.0.0 before 9.10.5-alpha.6 does not validate the owning object reference in $relatedTo
DOMPurify before 3.4.17 contains a cross-site scripting vulnerability that allows attackers to...
CVE-2026-116802
DOMPurify before 3.4.17 contains a cross-site scripting vulnerability that allows attackers to bypass the SMIL attribute
An NTLM coercion vulnerability exists on Windows nodes when the subPath supplied in a pod's...
CVE-2026-76654
An NTLM coercion vulnerability exists on Windows nodes when the subPath supplied in a pod's volumeMounts is set to a sym
A vulnerability has been found in SourceCodester Online Food Ordering System 1.0. The affected...
CVE-2026-116604
A vulnerability has been found in SourceCodester Online Food Ordering System 1.0. The affected element is an unknown fun
DOMPurify before 3.4.17 contains a cross-site scripting vulnerability that allows attackers to...
CVE-2026-116803
DOMPurify before 3.4.17 contains a cross-site scripting vulnerability that allows attackers to keep event handlers armed
A vulnerability was found in Argilla up to 2.8.0. This affects an unknown function of the file...
CVE-2026-116556
A vulnerability was found in Argilla up to 2.8.0. This affects an unknown function of the file argilla-frontend/componen
A confused deputy attack exists in the StatefulSet controller that allows a user with namespace...
CVE-2026-2270
A confused deputy attack exists in the StatefulSet controller that allows a user with namespace-scoped write permissions
A flaw has been found in SourceCodester Online Food Ordering System 1.0. Impacted is an unknown...
CVE-2026-116603
A flaw has been found in SourceCodester Online Food Ordering System 1.0. Impacted is an unknown function of the file adm
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-66044
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
QloApps 1.6.0 through 1.7.0 contains a missing authorization vulnerability in the qlohotelreview...
CVE-2026-116746
QloApps 1.6.0 through 1.7.0 contains a missing authorization vulnerability in the qlohotelreview module's AddReview AJAX