OpenRemote core (openremote-manager) before 1.31.0 does not perform realm or gateway-descendant...
CVE-2026-116186
OpenRemote core (openremote-manager) before 1.31.0 does not perform realm or gateway-descendant authorization on inbound
#advisory
共收录 23093 条相关情报。
← 返回所有主题OpenRemote before 1.31.0 contains an authorization bypass vulnerability that allows realm admins...
CVE-2026-116184
OpenRemote before 1.31.0 contains an authorization bypass vulnerability that allows realm admins to impersonate gateways
OpenRemote core before 1.31.0 contains an authorization bypass vulnerability that allows...
CVE-2026-116185
OpenRemote core before 1.31.0 contains an authorization bypass vulnerability that allows authenticated users to read oth
vLLM from 0.8.5 before 0.31.0 has a denial of service flaw. LogprobsTensors.empty_cpu() in vllm...
CVE-2026-116180
vLLM from 0.8.5 before 0.31.0 has a denial of service flaw. LogprobsTensors.empty_cpu() in vllm/v1/outputs.py allocates
phpMyFAQ before 4.1.10 contains a server-side request forgery vulnerability in the PDF export...
CVE-2026-116182
phpMyFAQ before 4.1.10 contains a server-side request forgery vulnerability in the PDF export feature that fetches exter
phpMyFAQ before 4.1.10 contains an object-level authorization bypass vulnerability that allows...
CVE-2026-116183
phpMyFAQ before 4.1.10 contains an object-level authorization bypass vulnerability that allows unauthenticated attackers
vLLM from 0.20.1 before 0.29.0 contains an improper input validation vulnerability that allows...
CVE-2026-116181
vLLM from 0.20.1 before 0.29.0 contains an improper input validation vulnerability that allows remote attackers to crash
Rclone from v1.68.0 before v1.75.2 contains an authorization bypass vulnerability in serve s3 -...
CVE-2026-116187
Rclone from v1.68.0 before v1.75.2 contains an authorization bypass vulnerability in serve s3 --auth-proxy that allows a
vLLM from 0.18.0 before 0.31.0 contains a resource exhaustion vulnerability that allows API...
CVE-2026-116179
vLLM from 0.18.0 before 0.31.0 contains a resource exhaustion vulnerability that allows API clients to bypass the video/
rclone serve s3 versions 1.75.0 before 1.75.2 contain an integer overflow vulnerability in...
CVE-2026-116188
rclone serve s3 versions 1.75.0 before 1.75.2 contain an integer overflow vulnerability in multipart reorder-memory acco
vLLM from 0.10.2 before 0.25.0 contains an uncontrolled resource consumption vulnerability that...
CVE-2026-116177
vLLM from 0.10.2 before 0.25.0 contains an uncontrolled resource consumption vulnerability that allows unauthenticated a
vLLM from 0.20.0 before 0.30.0 contains a denial of service vulnerability that allows remote...
CVE-2026-116178
vLLM from 0.20.0 before 0.30.0 contains a denial of service vulnerability that allows remote attackers to crash the engi
vLLM from 0.19.0 before 0.24.0 contains a decompression bomb vulnerability because the...
CVE-2026-116175
vLLM from 0.19.0 before 0.24.0 contains a decompression bomb vulnerability because the AudioMediaIO multimodal path call
vLLM from 0.22.0 before 0.24.0 contains a denial of service vulnerability that allows remote...
CVE-2026-116173
vLLM from 0.22.0 before 0.24.0 contains a denial of service vulnerability that allows remote attackers to terminate Engi
SiYuan 3.5.4 before 3.8.7 on Windows contains a sensitive-path denylist bypass in IsSensitivePath...
CVE-2026-116171
SiYuan 3.5.4 before 3.8.7 on Windows contains a sensitive-path denylist bypass in IsSensitivePath because the Windows ex
vLLM from 0.22.0 before 0.24.0 contains an improper input validation vulnerability in the Rust...
CVE-2026-116174
vLLM from 0.22.0 before 0.24.0 contains an improper input validation vulnerability in the Rust gRPC Generate and Generat
vLLM from 0.9.2 before 0.24.0 contains a server-side request forgery vulnerability that allows...
CVE-2026-116176
vLLM from 0.9.2 before 0.24.0 contains a server-side request forgery vulnerability that allows API callers to force outb
vLLM from 0.22.0 before 0.24.0 contains an improper input validation vulnerability in the Rust...
CVE-2026-116172
vLLM from 0.22.0 before 0.24.0 contains an improper input validation vulnerability in the Rust gRPC converter that allow
Parse Server before 8.6.104 and 9.0.0 before 9.10.5-alpha.5 saves the entire login request with...
CVE-2026-116162
Parse Server before 8.6.104 and 9.0.0 before 9.10.5-alpha.5 saves the entire login request with master privileges when i
Parse Server before 8.6.103 and 9.0.0 before 9.10.5-alpha.4 contains an information disclosure...
CVE-2026-116161
Parse Server before 8.6.103 and 9.0.0 before 9.10.5-alpha.4 contains an information disclosure vulnerability in LiveQuer