Linux Foundation Magma SecurityModeComplete integrity check
CVE-2026-82549
A vulnerability was identified in Linux Foundation Magma 1.9.0. This affects an unknown function of the component Securi
#advisory
共收录 23717 条相关情报。
← 返回所有主题Linux Foundation Magma InitialUEMessage information disclosure
CVE-2026-82548
A vulnerability was determined in Linux Foundation Magma 1.9.0. The impacted element is an unknown function of the compo
Linux Foundation Magma Registration Complete Message amf_fsm.cpp improper authentication
CVE-2026-82547
A vulnerability was found in Linux Foundation Magma 1.9.0. The affected element is an unknown function of the file tasks
Admidio before 5.0.12 Broken Access Control via profile_function.php
CVE-2026-82658
Admidio versions before 5.0.12 contain a broken access control vulnerability in profile_function.php that allows authent
Admidio before 5.0.12 Authentication Bypass via RSS feeds
CVE-2026-82657
Admidio before 5.0.12 fails to enforce login-only module restrictions in RSS feed endpoints for forum and announcements
Admidio before 5.0.12 Path Traversal via Photo ZIP Download
CVE-2026-82656
Admidio before 5.0.12 fails to sanitize album names in the photo ZIP download functionality, allowing authenticated user
Admidio before 5.0.12 SQL Injection via relation_type_list
CVE-2026-82655
Admidio before 5.0.12 contains a blind SQL injection vulnerability in the relation_type_list parameter of lists_show.php
SiYuan before v3.8.1 Stored XSS via block name
CVE-2026-82654
SiYuan before v3.8.1 fails to properly escape block name, alias, and memo fields in hint, backlink, and breadcrumb rende
SiYuan before v3.8.1 Stored XSS via confirmDialog
CVE-2026-82653
SiYuan before v3.8.1 contains a stored cross-site scripting vulnerability in confirmDialog() where unescaped package nam
SiYuan before v3.8.1 Information Disclosure via Publish Access
CVE-2026-82652
SiYuan before v3.8.1 fails to filter invisible-tier content from SQL embed blocks, attribute-view keys, and attribute-vi
SiYuan before v3.8.1 Missing Authorization via /history and /repo/diff
CVE-2026-82651
SiYuan before v3.8.1 does not apply the IsForbiddenAbsPath guard (introduced in GHSA-c8r8-95hg-mp34) to the /history/*pa
SiYuan before v3.8.1 Path Traversal via /api/template/render
CVE-2026-82650
SiYuan 3.8.0 contains a path traversal / sensitive file exposure vulnerability in the RenderTemplate function (kernel/mo
SiYuan before 3.8.1 Local Privilege Escalation via Uncontrolled Search Path
CVE-2026-82649
SiYuan Windows installer before version 3.8.1 (affected versions >= 2.0.14) contains an uncontrolled search path element
Readest: unsanitized iframe srcdoc attribute in the EPUB sanitizer can lead to arbitrary code execution
CVE-2026-82642
Readest is an open-source e-book reader built on Tauri. In versions prior to 0.11.16, EPUB chapter HTML is sanitized wit
keploy 3.1.0 through 3.6.25 Unauthenticated TLS Key Exposure
CVE-2026-82641
keploy versions 3.1.0 through 3.6.25 bind the agent control-plane HTTP server to all interfaces without authentication,
browser-use web-ui 2.0.0 through 3.0.0 Cleartext API Key Storage
CVE-2026-82640
browser-use web-ui versions 2.0.0 through 3.0.0 write configured LLM API keys to disk in cleartext without encryption or
NextChat 2.15.8 through 2.16.1 OpenAI API Key Disclosure
CVE-2026-82639
NextChat versions from 2.15.8 through 2.16.1 contain an improper URL validation vulnerability in the proxy endpoint that
browser-use web-ui 2.0.0 through 3.0.0 Arbitrary Directory Creation
CVE-2026-82637
browser-use web-ui versions 2.0.0 through 3.0.0 fail to validate browser settings paths in run_agent_task, allowing atta
vastsa FileCodeBox Pickup Limit views.py update_file_usage race condition
CVE-2026-82543
A vulnerability was detected in vastsa FileCodeBox up to 2.3. This vulnerability affects the function update_file_usage
Dolibarr 10.0.0 before 24.0.0 Missing Authorization on REST Users Groups Endpoint
CVE-2026-82633
Dolibarr versions 10.0.0 before 24.0.0 fail to perform per-object authorization checks in the Users::getGroups REST API