The SmartAIPress WordPress plugin through 1.2.0 does not perform a capability check on one of its...
CVE-2026-16600
The SmartAIPress WordPress plugin through 1.2.0 does not perform a capability check on one of its AJAX actions and does
#advisory
共收录 23717 条相关情报。
← 返回所有主题The Rest Routes WordPress plugin through 5.5.5 does not sanitize and validate a value taken from...
CVE-2026-16061
The Rest Routes WordPress plugin through 5.5.5 does not sanitize and validate a value taken from the URL of one of its
Traffic interception vulnerability in BOSH Director vCenter CPI allows attackers positioned...
CVE-2026-41012
Traffic interception vulnerability in BOSH Director vCenter CPI allows attackers positioned between BOSH Director and vC
A network-reachable client that has not yet authenticated can hold a MongoDB Connector for BI...
CVE-2026-81520
A network-reachable client that has not yet authenticated can hold a MongoDB Connector for BI authentication session ope
A pre-authentication stack-based buffer overflow vulnerability exists in the http_gdpr_decrypt...
CVE-2026-75118
A pre-authentication stack-based buffer overflow vulnerability exists in the http_gdpr_decrypt function of TL-MR100 V3.2
IBM Cloud Pak for Data System 11.3.0.2 through Interim Fix 001 is vulnerable to a denial of...
CVE-2026-3686
IBM Cloud Pak for Data System 11.3.0.2 through Interim Fix 001 is vulnerable to a denial of service due to improper limi
Incorrect access control in the getCloudSrvCheckStatus function of TOTOLINK T6 4.1.5cu...
CVE-2026-51662
Incorrect access control in the getCloudSrvCheckStatus function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthentica
A buffer overflow vulnerability exists in the embedded HTTP service in TL-WR841N v14 when...
CVE-2026-76651
A buffer overflow vulnerability exists in the embedded HTTP service in TL-WR841N v14 when processing multipart/form-data
A NULL pointer dereference vulnerability exists in TL-WR841N v14 in the UPnP service when...
CVE-2026-76650
A NULL pointer dereference vulnerability exists in TL-WR841N v14 in the UPnP service when processing SOAP state variable
Incorrect access control in the getTracerouteCfg function of TOTOLINK T6 4.1.5cu.748_B20211015...
CVE-2026-51665
Incorrect access control in the getTracerouteCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated at
Incorrect access control in the getTelnetCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows...
CVE-2026-51664
Incorrect access control in the getTelnetCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attack
IGEL OS 12 before 12.7.6 and IGEL OS 11 before 11.11.150 contain a boot registry parameter...
CVE-2026-82017
IGEL OS 12 before 12.7.6 and IGEL OS 11 before 11.11.150 contain a boot registry parameter injection vulnerability that
An application using the MongoDB BI Connector ODBC Driver may encounter a memory-safety issue...
CVE-2026-81533
An application using the MongoDB BI Connector ODBC Driver may encounter a memory-safety issue when a submitted SQL state
A user able to submit SQL through an application using the MongoDB Connector for BI ODBC driver...
CVE-2026-81532
A user able to submit SQL through an application using the MongoDB Connector for BI ODBC driver can supply a positioned-
A database user able to create a view in a namespace that MongoDB Connector for BI samples can...
CVE-2026-81490
A database user able to create a view in a namespace that MongoDB Connector for BI samples can cause the schema-sampling
An unauthenticated party able to reach the port of a MongoDB Connector for BI (mongosqld)...
CVE-2026-81517
An unauthenticated party able to reach the port of a MongoDB Connector for BI (mongosqld) instance may generate enough r
IGEL OS 12 before 12.9.0, 12.8.3 LTS and IGEL OS 11 before 11.11.150 contain a secure boot bypass...
CVE-2026-82018
IGEL OS 12 before 12.9.0, 12.8.3 LTS and IGEL OS 11 before 11.11.150 contain a secure boot bypass vulnerability in the G
Incorrect access control in the getWiFiApcliScan function of TOTOLINK T6 4.1.5cu.748_B20211015...
CVE-2026-51663
Incorrect access control in the getWiFiApcliScan function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated at
When mongosqld is configured with a client certificate authority file, the listener requests a...
CVE-2026-81518
When mongosqld is configured with a client certificate authority file, the listener requests a client certificate during
A NULL pointer dereference vulnerability exists in TL-WR841N v14 in the UPnP service when...
CVE-2026-76649
A NULL pointer dereference vulnerability exists in TL-WR841N v14 in the UPnP service when processing SOAP action request