A flaw has been found in BareBones BBEdit up to 15.5.5. Impacted is an unknown function of the...
CVE-2026-82604
A flaw has been found in BareBones BBEdit up to 15.5.5. Impacted is an unknown function of the component Java Language M
#advisory
共收录 23717 条相关情报。
← 返回所有主题A vulnerability was identified in SeaCMS up to 13.6. Affected by this vulnerability is the...
CVE-2026-82599
A vulnerability was identified in SeaCMS up to 13.6. Affected by this vulnerability is the function unlink of the file /
A security vulnerability has been detected in SeaCMS up to 13.6. This vulnerability affects...
CVE-2026-82602
A security vulnerability has been detected in SeaCMS up to 13.6. This vulnerability affects unknown code of the file /as
A vulnerability was identified in TOTOLINK NR1800X 9.1.0u.6681_B20230703. This affects the...
CVE-2026-82597
A vulnerability was identified in TOTOLINK NR1800X 9.1.0u.6681_B20230703. This affects the function setUssd of the file
AshPhoenix FilterForm allows filtering across non-public relationships, disclosing private related data
CVE-2026-82725
Authorization Bypass Through User-Controlled Key vulnerability in ash-project ash_phoenix lets an attacker who controls
Broken access control in AshPhoenix SubdomainHook via a nil tenant in handle_subdomain
CVE-2026-82724
Incorrect Authorization vulnerability in ash-project ash_phoenix invokes the SubdomainHook authorization callback with a
AshPhoenix get_subdomain maps a crafted or differently-cased Host header to an arbitrary tenant
CVE-2026-82726
Permissive Regular Expression vulnerability in ash-project ash_phoenix lets a remote client select the tenant an Ash app
AshPhoenix Form.Auto leaks submitted params in an unknown _union_type error message
CVE-2026-82727
Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_phoenix writes the entire
Kamailio AVP cxdx_avp.c get_4bytes out-of-bounds
CVE-2026-82608
A vulnerability was determined in Kamailio up to 5.5.0/6.0.7. This affects the function get_4bytes of the file src/modul
Path traversal in AshAdmin file uploads via unsanitized client filename
CVE-2026-82673
Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) vulnerability in ash-project ash_admin allo
AshAdmin composite primary key decoding accepts arbitrary fields, enabling a secret-attribute oracle
CVE-2026-81853
Authorization Bypass Through User-Controlled Key vulnerability in ash-project ash_admin turns a record-lookup URL into a
AshAdmin ships a hardcoded CSP nonce, allowing nonce-based CSP bypass
CVE-2026-81852
Use of Insufficiently Random Values vulnerability in ash-project ash_admin ships a hardcoded, publicly known CSP nonce,
Query-parameter injection in AshAdmin row-action links via unencoded string primary keys
CVE-2026-82681
Improper Encoding or Escaping of Output vulnerability in ash-project ash_admin lets an attacker who controls a record's
Stored XSS in AshAdmin relationship typeahead via unescaped label_field content
CVE-2026-77850
Stored Cross-site Scripting vulnerability in ash-project ash_admin executes attacker-supplied record content as script i
AshAdmin LiveView events intern atoms from client input, exhausting the atom table (node DoS)
CVE-2026-82722
Allocation of Resources Without Limits or Throttling vulnerability in ash-project ash_admin lets any client that can rea
AshAdmin cookie reader matches names by substring, enabling actor/session shadowing from a sibling subdomain
CVE-2026-75757
Reliance on Cookies without Validation and Integrity Checking vulnerability in ash-project ash_admin lets an attacker wh
AshAi vectorize change leaks raw embedding-provider errors, including credentials, in a user-facing error
CVE-2026-75760
Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_ai discloses provider requ
AshAi echoes raw tool exception messages into the conversation, disclosing internal details
CVE-2026-82580
Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_ai discloses internal erro
AshAi tool loop never terminates when all tool calls are filtered out, enabling denial of service
CVE-2026-82579
Loop with Unreachable Exit Condition (Infinite Loop) vulnerability in ash-project ash_ai allows an attacker who can infl
Identity tool filter in AshAi accepts operator maps, allowing update or destroy of unidentified records
CVE-2026-82564
Authorization Bypass Through User-Controlled Key vulnerability in ash-project ash_ai allows a caller of an identity-conf