Zip Slip Arbitrary File Write in AWS diagram-as-code (awsdac)
CVE-2026-81838
A relative path traversal issue in the zip extraction functionality in AWS diagram-as-code (awsdac) in versions 0.10 thr
#advisory
共收录 23717 条相关情报。
← 返回所有主题Trilium unauthenticated share-search discloses password-protected and hidden shared notes
CVE-2026-77438
Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0, the public shar
Trilium arbitrary file read and denial of service via file:// URLs in the automatic image-download feature
CVE-2026-53580
Trilium is an open-source hierarchical note-taking application. In versions prior to 0.104.0, the automatic image-downlo
Redis TLS pending-data list use-after-free
CVE-2026-81934
Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handles the TLS pending-d
SpeechBrain < 1.1.1 Arbitrary Code Execution via CKPT.yaml Parsing
CVE-2026-10036
SpeechBrain before 1.1.1 contains an arbitrary code execution vulnerability that allows attackers to execute arbitrary c
Trilium: Note Import to RCE via Book Note
CVE-2026-53579
Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0, the default-on
Trilium: Note Import to RCE via Mind Elixir dangerouslySetInnerHtml
CVE-2026-53578
Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0, the default-on
Cross-tenant database retargeting via dot/NUL injection in namespace strings in the PHP Driver
CVE-2026-81525
The MongoDB client library for PHP does not sufficiently sanitize special elements in application-supplied namespace ide
Cross-tenant database retargeting via dot/NUL injection in namespace strings in the C Driver
CVE-2026-81524
A weakness in the MongoDB C Driver allows special elements in caller-supplied database and collection name components to
Cross-tenant database retargeting via dot/NUL injection in namespace strings in the C++ Driver
CVE-2026-81522
A weakness in the MongoDB C++ Driver's handling of caller-supplied namespace identifiers allows special characters embed
LimeSurvey Community Edition 7.0.5 - Improper authorization in survey menu entry creation endpoint
CVE-2026-65931
LimeSurvey Community Edition 7.0.5 contains an authenticated improper authorization vulnerability in the survey menu ent
Trilium: Malicious import with GeoMap marker title XSS leads to RCE on the desktop client
CVE-2026-48996
Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0, the default-on
Crossplane's TOCTOU between cosign verification and image fetch in xpkg.CachedClient allows tag-based package install to bypass signature check
## Summary Crossplane allows package signature verification to be configured via the `ImageConfig` mechanism. When enab
libreoffice-convert vulnerable to path traversal / arbitrary file write
CVE-2026-54732
### Impact options.fileName is used to build a filesystem path (path.join(tempDir.name, fileName)) and the caller-suppli
libreoffice-convert: path traversal / arbitrary file write
CVE-2026-54732
libreoffice-convert is a Node.js module for converting office documents to different formats. Prior to 1.8.2, index.js u
silverstripe-advancedworkflow vulnerable to remote code execution via advanced workflow email template
CVE-2026-54718
### Impact The advanced workflow email template field is vulnerable to a specially crafted payload that can be used to r
Silverstripe Advanced Workflow: Remote code execution via advanced workflow email template
CVE-2026-54718
Silverstripe Advanced Workflow is a highly configurable step-based workflow module. Prior to 6.4.5, 7.1.3, and 7.2.1, an
Kargo has Open Redirect in UI OIDC Login Flow via redirectTo Query Parameter
CVE-2026-42350
## Summary The Kargo UI reads a `redirectTo` query parameter on the `/login` and `/token-renew` routes and, following a
n8n-nodes-sqlite3 vulnerable to path traversal via user-controlled database file path (db_path parameter)
CVE-2026-54687
## Affected versions < 1.0.0 ## Patched version 1.0.0 ## Description In versions prior to 1.0.0, the SQLite node accep
cakephp/queue's Incomplete Comparison in getUniqueId vulnerable to collisions
CVE-2026-54713
### Impact For jobs with `shouldBeUnique = true` the queue plugin will generate a 'unique identifier' based on the job