SiYuan before v3.8.1 fails to properly escape block name, alias, and memo fields in hint,...
CVE-2026-82654
SiYuan before v3.8.1 fails to properly escape block name, alias, and memo fields in hint, backlink, and breadcrumb rende
#advisory
共收录 23717 条相关情报。
← 返回所有主题WWBN AVideo contains an unauthenticated credential submission vulnerability in plugin/Live/api...
CVE-2026-82643
WWBN AVideo contains an unauthenticated credential submission vulnerability in plugin/Live/api/preauthorize.json.php tha
Admidio before 5.0.12 contains a blind SQL injection vulnerability in the relation_type_list...
CVE-2026-82655
Admidio before 5.0.12 contains a blind SQL injection vulnerability in the relation_type_list parameter of lists_show.php
WWBN AVideo (current e01e41ecc and earlier) contains a brute-force rate limiting bypass in...
CVE-2026-82644
WWBN AVideo (current e01e41ecc and earlier) contains a brute-force rate limiting bypass in enforceRateLimit(), which pro
Readest is an open-source e-book reader built on Tauri. In versions prior to 0.11.16, EPUB...
CVE-2026-82642
Readest is an open-source e-book reader built on Tauri. In versions prior to 0.11.16, EPUB chapter HTML is sanitized wit
A vulnerability was found in Linux Foundation Magma 1.9.0. The affected element is an unknown...
CVE-2026-82547
A vulnerability was found in Linux Foundation Magma 1.9.0. The affected element is an unknown function of the file tasks
keploy versions 3.1.0 through 3.6.25 bind the agent control-plane HTTP server to all interfaces...
CVE-2026-82641
keploy versions 3.1.0 through 3.6.25 bind the agent control-plane HTTP server to all interfaces without authentication,
A vulnerability was determined in Linux Foundation Magma 1.9.0. The impacted element is an...
CVE-2026-82548
A vulnerability was determined in Linux Foundation Magma 1.9.0. The impacted element is an unknown function of the compo
A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Impacted is an...
CVE-2026-82545
A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the fi
A weakness has been identified in Tenda HG10 300001138. Affected by this issue is the function...
CVE-2026-82542
A weakness has been identified in Tenda HG10 300001138. Affected by this issue is the function formIPv6Routing of the fi
jina-ai reader disables its private-address guard outside Google Cloud deployments, allowing...
CVE-2026-82638
jina-ai reader disables its private-address guard outside Google Cloud deployments, allowing unauthenticated attackers t
Dolibarr versions 10.0.0 before 24.0.0 fail to perform per-object authorization checks in the...
CVE-2026-82633
Dolibarr versions 10.0.0 before 24.0.0 fail to perform per-object authorization checks in the Users::getGroups REST API
browser-use web-ui versions 2.0.0 through 3.0.0 write configured LLM API keys to disk in...
CVE-2026-82640
browser-use web-ui versions 2.0.0 through 3.0.0 write configured LLM API keys to disk in cleartext without encryption or
browser-use web-ui versions 2.0.0 through 3.0.0 fail to validate browser settings paths in...
CVE-2026-82637
browser-use web-ui versions 2.0.0 through 3.0.0 fail to validate browser settings paths in run_agent_task, allowing atta
Pake before 3.13.1 joins the JavaScript-supplied filename for the download_file Tauri command...
CVE-2026-82635
Pake before 3.13.1 joins the JavaScript-supplied filename for the download_file Tauri command onto the user's Downloads
A vulnerability was detected in vastsa FileCodeBox up to 2.3. This vulnerability affects the...
CVE-2026-82543
A vulnerability was detected in vastsa FileCodeBox up to 2.3. This vulnerability affects the function update_file_usage
Qubes OS before qubes-core-dom0-linux 4.3.22 allows OS command injection during a qvm-copy-to-vm...
CVE-2026-82636
Qubes OS before qubes-core-dom0-linux 4.3.22 allows OS command injection during a qvm-copy-to-vm call from dom0 to an at
Frappe Framework development builds contain an authorization flaw in the render_jinja_template...
CVE-2026-82634
Frappe Framework development builds contain an authorization flaw in the render_jinja_template endpoint that allows low-
A flaw has been found in wger-project wger up to 2.6.0-alpha2. This issue affects the function...
CVE-2026-82544
A flaw has been found in wger-project wger up to 2.6.0-alpha2. This issue affects the function reset_user_password of th
NextChat versions from 2.15.8 through 2.16.1 contain an improper URL validation vulnerability in...
CVE-2026-82639
NextChat versions from 2.15.8 through 2.16.1 contain an improper URL validation vulnerability in the proxy endpoint that