Unleash: Unauthenticated single-request DoS via OpenAPI validation error formatter
CVE-2026-63462
## Summary An unauthenticated `POST` to any OpenAPI-validated endpoint, including the anonymous `POST /edge/validate` a
#advisory
共收录 23508 条相关情报。
← 返回所有主题Cleartext Storage of Sensitive Information in Memory vulnerability in Johnson Controls Simplex...
CVE-2026-27875
Cleartext Storage of Sensitive Information in Memory vulnerability in Johnson Controls Simplex Incident Manager / Autoca
UAC (Unix-like Artifacts Collector) versions prior to 3.3.0 contain a command injection...
CVE-2026-41451
UAC (Unix-like Artifacts Collector) versions prior to 3.3.0 contain a command injection vulnerability in the user substi
UAC (Unix-like Artifacts Collector) versions prior to 3.3.0 contain a command injection...
CVE-2026-41450
UAC (Unix-like Artifacts Collector) versions prior to 3.3.0 contain a command injection vulnerability in the _command_co
A stack-based out-of-bounds write vulnerability exists in the login request handling...
CVE-2026-17252
A stack-based out-of-bounds write vulnerability exists in the login request handling functionality of the administrative
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-63726
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
UAC (Unix-like Artifacts Collector) versions prior to 3.3.0 contain a command injection...
CVE-2026-41449
UAC (Unix-like Artifacts Collector) versions prior to 3.3.0 contain a command injection vulnerability in the _run_comman
In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_route: fix...
CVE-2026-74583
In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_route: fix fastmap use-after-free on
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-9324
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
In the Linux kernel, the following vulnerability has been resolved: vhost: reset the vring...
CVE-2026-74580
In the Linux kernel, the following vulnerability has been resolved: vhost: reset the vring metadata cache on vring reco
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-9244
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
A NULL pointer dereference vulnerability exists in the HTTP request parsing functionality of TL...
CVE-2026-17251
A NULL pointer dereference vulnerability exists in the HTTP request parsing functionality of TL-MR6400 v7. An unauthent
A stack-based buffer overflow vulnerability exists in the firmware update functionality of TL...
CVE-2026-17250
A stack-based buffer overflow vulnerability exists in the firmware update functionality of TL-MR6400 v7 due to unsafe pr
In the Linux kernel, the following vulnerability has been resolved: net: ipv6: clear suppressed...
CVE-2026-74581
In the Linux kernel, the following vulnerability has been resolved: net: ipv6: clear suppressed fib6 rule result fib6_
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-9321
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-9012
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
In the Linux kernel, the following vulnerability has been resolved: packet: use consistent...
CVE-2026-74582
In the Linux kernel, the following vulnerability has been resolved: packet: use consistent hard_header_len in non-ring
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-69099
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-69701
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Jet Admin allows an authenticated attacker to inject JavaScript via the sign-in page's scripts...
CVE-2026-75933
Jet Admin allows an authenticated attacker to inject JavaScript via the sign-in page's scripts and styles option. Inject