An integer handling flaw in the cobs_decode function of SpaceDot AcubeSAT OBC software commit...
CVE-2026-75371
An integer handling flaw in the cobs_decode function of SpaceDot AcubeSAT OBC software commit eaf90ec allows physically-
#advisory
共收录 23507 条相关情报。
← 返回所有主题Aria2 version 1.37.0 and below is affected by a Divide By Zero issue in src/bittorrent_helper.cc,...
CVE-2026-71832
Aria2 version 1.37.0 and below is affected by a Divide By Zero issue in src/bittorrent_helper.cc, which allows a remote
An out-of-bounds read/write vulnerability in the MessageParser::parseECSSTCHeader component of...
CVE-2026-75370
An out-of-bounds read/write vulnerability in the MessageParser::parseECSSTCHeader component of SpaceDot AcubeSAT OBC sof
Dolibarr before 24.0.0 contains a SQL injection vulnerability in the users REST API that allows...
CVE-2026-71510
Dolibarr before 24.0.0 contains a SQL injection vulnerability in the users REST API that allows authenticated attackers
Print Assumptions does not report that a definition was produced while universe checking was...
CVE-2020-37268
Print Assumptions does not report that a definition was produced while universe checking was disabled when that definiti
Dolibarr before 24.0.0 contains a sensitive data exposure vulnerability in the Members REST API...
CVE-2026-71511
Dolibarr before 24.0.0 contains a sensitive data exposure vulnerability in the Members REST API that allows authenticate
Dell ThinOS 10, versions prior to 2605_10.2518, contain an Improper Access Control vulnerability....
CVE-2026-61419
Dell ThinOS 10, versions prior to 2605_10.2518, contain an Improper Access Control vulnerability. A low privileged attac
Dolibarr before 24.0.0 contains an improper authorization vulnerability in the payments REST API...
CVE-2026-71506
Dolibarr before 24.0.0 contains an improper authorization vulnerability in the payments REST API delete endpoint that al
Rejected reason: Red Hat is not the CNA for PHP. CVE was reserved in error; the appropriate CNA...
CVE-2026-13081
Rejected reason: Red Hat is not the CNA for PHP. CVE was reserved in error; the appropriate CNA should assign CVE IDs fo
Dolibarr before 24.0.0 contains an improper authorization vulnerability in the Members REST API...
CVE-2026-71504
Dolibarr before 24.0.0 contains an improper authorization vulnerability in the Members REST API that allows attackers wi
Dolibarr before 24.0.0 contains a broken object-level authorization vulnerability in the REST API...
CVE-2026-71505
Dolibarr before 24.0.0 contains a broken object-level authorization vulnerability in the REST API third-party site accou
D-Link DI-7001 MINI_5G 19.10.31A1 contains a code execution vulnerability in the flag parameter...
CVE-2025-26237
D-Link DI-7001 MINI_5G 19.10.31A1 contains a code execution vulnerability in the flag parameter of msp_info, which can b
Dolibarr before 24.0.0 contains a reflected cross-site scripting vulnerability in the extra...
CVE-2026-71503
Dolibarr before 24.0.0 contains a reflected cross-site scripting vulnerability in the extra fields administration templa
Rejected reason: Red Hat is not the CNA for PHP. CVE was reserved in error; the appropriate CNA...
CVE-2026-13047
Rejected reason: Red Hat is not the CNA for PHP. CVE was reserved in error; the appropriate CNA should assign CVE IDs fo
In D-Link DI-8100G 17.12.20A1, the flag parameter in msp_info can be exploited to execute...
CVE-2025-26238
In D-Link DI-8100G 17.12.20A1, the flag parameter in msp_info can be exploited to execute arbitrary code.
3X-UI Vulnerable to Authenticated Arbitrary File Write via Database Import and Xray Log Path Manipulation
CVE-2026-55477
# Summary An authenticated administrator can abuse the database import functionality to achieve arbitrary file write on
Gorilla WebSocket Uses Cryptographically Weak PRNG for WebSocket Mask Key
gorilla/websocket used `math/rand` (cryptographically weak pseudo-random number generator) to generate WebSocket frame m
netfoil vulnerable to improper handling of untrusted DoH response data
### Summary HTTPS RR data returned from the DoH server was not properly handled. Unverified APLN data (which could conta
django CMS: Page cache ignores plugin-declared Vary headers (disclosure & poisoning)
CVE-2026-54625
### Summary The CMS page cache key ignores the request headers that plugins declare via `get_vary_cache_on()`. The heade
django CMS: Plugin move endpoint allows cyclic reparenting (DoS)
CVE-2026-54623
### Summary The `move_plugin` admin endpoint does not prevent a plugin from being reparented under itself or one of it