A cross-site scripting (XSS) vulnerability in Support chatbot in Nopaperforms Niaa-Chatbot...
CVE-2022-30983
A cross-site scripting (XSS) vulnerability in Support chatbot in Nopaperforms Niaa-Chatbot through 2022-05-17 allows rem
#advisory
共收录 23507 条相关情报。
← 返回所有主题A vulnerability was detected in sworddut mcp-ffmpeg-helper 0.1.0/0.1.1/0.2.1. This affects the...
CVE-2026-78430
A vulnerability was detected in sworddut mcp-ffmpeg-helper 0.1.0/0.1.1/0.2.1. This affects the function handleToolCall o
RansomLook contains multiple weaknesses in its authentication endpoint that allow an...
CVE-2026-78551
RansomLook contains multiple weaknesses in its authentication endpoint that allow an unauthenticated remote attacker to
A maliciously crafted SVG file, when parsed through Autodesk 3ds Max, can trigger an Uncontrolled...
CVE-2026-16781
A maliciously crafted SVG file, when parsed through Autodesk 3ds Max, can trigger an Uncontrolled Recursion vulnerabilit
RansomLook created its Flask session-signing key without explicitly restricting the file...
CVE-2026-78553
RansomLook created its Flask session-signing key without explicitly restricting the file permissions. The secret_key fil
Dolibarr 21.0.0 before 24.0.0 contains an authorization bypass vulnerability caused by an...
CVE-2026-77923
Dolibarr 21.0.0 before 24.0.0 contains an authorization bypass vulnerability caused by an inverted boolean condition in
A maliciously crafted SVG file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds...
CVE-2026-16782
A maliciously crafted SVG file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Read vulnerability. A m
The guard checker in Rocq Prover does not recheck the recursive tree representation of an...
CVE-2026-72704
The guard checker in Rocq Prover does not recheck the recursive tree representation of an inductive type parameter after
An out-of-bounds read vulnerability in the CAN::Application::parsePerformFunctionMessage...
CVE-2026-75369
An out-of-bounds read vulnerability in the CAN::Application::parsePerformFunctionMessage component of SpaceDot AcubeSAT
The Lean 4 kernel does not check that the body of an opaque declaration is closed. environment:...
CVE-2026-72711
The Lean 4 kernel does not check that the body of an opaque declaration is closed. environment::add_opaque omits the che
The guard checker in Rocq Prover does not follow recursive calls made through a fixpoint's own...
CVE-2026-72705
The guard checker in Rocq Prover does not follow recursive calls made through a fixpoint's own arguments. A fixpoint may
Rocq Prover does not restore the universe graph's copy of the universe checking flag when a...
CVE-2026-72714
Rocq Prover does not restore the universe graph's copy of the universe checking flag when a module that locally disabled
A stack overflow in the loadRawData function of SpaceDot AcubeSAT OBC software commit eaf90ec...
CVE-2026-75368
A stack overflow in the loadRawData function of SpaceDot AcubeSAT OBC software commit eaf90ec allows attackers to cause
The guard checker in Rocq Prover treats a parameter of a nested mutual fixpoint as uniform...
CVE-2026-72703
The guard checker in Rocq Prover treats a parameter of a nested mutual fixpoint as uniform without examining calls betwe
Dell Client BIOS contains an Improper Link Resolution Before File Access ('Link Following')...
CVE-2026-63693
Dell Client BIOS contains an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privile
Dolibarr before 24.0.0 contains an improper authorization vulnerability in the expense report...
CVE-2026-71509
Dolibarr before 24.0.0 contains an improper authorization vulnerability in the expense report REST API update endpoint t
A stored OS command injection vulnerability exists in the parent-control module of TP-Link Archer...
CVE-2026-78541
A stored OS command injection vulnerability exists in the parent-control module of TP-Link Archer BE3600 V1. An authenti
Dolibarr before 24.0.0 contains an improper authorization vulnerability in the user REST API...
CVE-2026-71508
Dolibarr before 24.0.0 contains an improper authorization vulnerability in the user REST API update endpoint that allows
Insufficient verification of data authenticity in the IronVNC client in Devolutions Remote...
CVE-2026-78417
Insufficient verification of data authenticity in the IronVNC client in Devolutions Remote Desktop Manager 2026.2.17.0 a
Dolibarr before 24.0.0 contains a broken object-level authorization vulnerability in the REST API...
CVE-2026-71507
Dolibarr before 24.0.0 contains a broken object-level authorization vulnerability in the REST API company bank account w