A vulnerability was found in code-projects Barangay Resident Profiling Management System 1.0....
CVE-2026-78142
A vulnerability was found in code-projects Barangay Resident Profiling Management System 1.0. This impacts an unknown fu
#advisory
共收录 23507 条相关情报。
← 返回所有主题A vulnerability was determined in code-projects Barangay Resident Profiling Management System 1.0...
CVE-2026-78143
A vulnerability was determined in code-projects Barangay Resident Profiling Management System 1.0. Affected is an unknow
A vulnerability has been found in Tenda CH22 1.0.0.1. This affects the function formexeCommand of...
CVE-2026-78141
A vulnerability has been found in Tenda CH22 1.0.0.1. This affects the function formexeCommand of the file /goform/exeCo
exceljs through 4.4.0 CSV Formula Injection via Unescaped Cell Values
CVE-2026-78209
exceljs-hardened versions before 5.0.0 fail to neutralize leading equals, plus, minus, or at signs in cell values writte
exceljs through 4.4.0 Prototype Pollution via deepMerge Reached From Note Serialization
CVE-2026-78207
exceljs-hardened before 5.0.0 contains a prototype pollution vulnerability in the deepMerge helper that fails to reject
BentoML 1.4.19 through 1.4.39 Server-Side Request Forgery via Unfiltered RFC 6598 Shared Address Space
CVE-2026-78205
BentoML's outbound connection safeguard (make_safe_connect in _internal/utils/uri.py) blocks private, loopback, and link
Ghostwriter through 7.2.6 Missing Authorization on Report Template Lint Endpoints
CVE-2026-78204
Ghostwriter through 7.2.6 does not apply per-object authorization on its report template lint endpoints. RoleBasedAccess
Dolibarr ERP User Notes note.php authorization
CVE-2026-78160
A vulnerability has been found in Dolibarr ERP up to 18.0.10/22.0.5/23.0.3. This issue affects some unknown processing o
Open5GS AMF UEContextReleaseRequest Path improper authorization
CVE-2026-78158
A flaw has been found in Open5GS 2.8.0. This vulnerability affects unknown code of the component AMF UEContextReleaseReq
Open5GS Rx AA-Request pcrf-rx-path.c pcrf_rx_aar_cb out-of-bounds
CVE-2026-78157
A vulnerability was detected in Open5GS 2.8.0. This affects the function pcrf_rx_aar_cb of the file src/pcrf/pcrf-rx-pat
Open5GS S6a Authentication-Information-Request hss-s6a-path.c hss_ogs_diam_s6a_air_cb heap-based overflow
CVE-2026-78156
A security vulnerability has been detected in Open5GS 2.8.0. Affected by this issue is the function hss_ogs_diam_s6a_air
the-momentum open-wearables Public Invitation-Code Redemption Endpoint user_invitation_code.py redeem_invitation_code missing authentication
CVE-2026-78154
A vulnerability was identified in the-momentum open-wearables up to 0.6.2. This impacts the function redeem_invitation_c
CTFd __init__.py _is_safe_url redirect
CVE-2026-78145
A vulnerability has been found in CTFd up to 3.8.4. The affected element is the function _is_safe_url of the file CTFd/u
Apache::AppSamurai::Util versions through 1.01 for Perl generate predictable session...
CVE-2026-19565
Apache::AppSamurai::Util versions through 1.01 for Perl generate predictable session authentication keys from the clock
A flaw has been found in Dromara UJCMS up to 10.1.3. The impacted element is the function update...
CVE-2026-78140
A flaw has been found in Dromara UJCMS up to 10.1.3. The impacted element is the function update of the file src/main/ja
DBD::Pg version 3.21.0 for Perl has a heap out-of-bounds write in quote_float. quote_float()...
CVE-2026-78183
DBD::Pg version 3.21.0 for Perl has a heap out-of-bounds write in quote_float. quote_float() allocates the length of th
Reverse::Proxy versions before 0.04 for Perl allow HTTP request smuggling via a percent-decoded...
CVE-2026-75922
Reverse::Proxy versions before 0.04 for Perl allow HTTP request smuggling via a percent-decoded PATH_INFO written unenco
justhtml before 1.12.0 (versions <= 1.11.0) contains a mutation cross-site scripting (mXSS)...
CVE-2026-8630
justhtml before 1.12.0 (versions and . When a DOM tree is processed by sanitize_dom() using a custom policy that keeps
justhtml through 1.9.1 (fixed in 1.10.0) is vulnerable to uncontrolled recursion leading to...
CVE-2026-9769
justhtml through 1.9.1 (fixed in 1.10.0) is vulnerable to uncontrolled recursion leading to denial of service. During Ju
justhtml versions <= 1.11.0 (fixed in 1.12.0) do not sufficiently escape HTML-significant...
CVE-2026-8445
justhtml versions are preserved, so untrusted input that is safe in to_html() — including entity-decoded text (e.g. <