In OpenStack Glance through 32.0.0, the /v2/tasks API accepts type=import tasks that bypass...
CVE-2026-77648
In OpenStack Glance through 32.0.0, the /v2/tasks API accepts type=import tasks that bypass import_filtering_opts, allow
#advisory
共收录 23530 条相关情报。
← 返回所有主题A Server-Side Request Forgery (SSRF) vulnerability has been reported in PTC Windchill PDMLink and...
CVE-2026-77646
A Server-Side Request Forgery (SSRF) vulnerability has been reported in PTC Windchill PDMLink and PTC FlexPLM. The vulne
The POST /api/provider-nodes/validate route in 9router takes a caller-supplied baseUrl and issues...
CVE-2026-72860
The POST /api/provider-nodes/validate route in 9router takes a caller-supplied baseUrl and issues server-side HTTP reque
Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to...
CVE-2026-69836
Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute code over a network.
The customer update route in EverShop is declared with "access": "public" in packages/evershop...
CVE-2026-72843
The customer update route in EverShop is declared with "access": "public" in packages/evershop/src/modules/customer/api/
Lightdash stores the webhook URL supplied with a scheduled delivery and later posts to it from...
CVE-2026-72846
Lightdash stores the webhook URL supplied with a scheduled delivery and later posts to it from sendWebhook in packages/b
Server-side request forgery (ssrf) in Azure Active Directory allows an authorized attacker to...
CVE-2026-69851
Server-side request forgery (ssrf) in Azure Active Directory allows an authorized attacker to elevate privileges over a
SitemapLoader.parse_sitemap in langchain_community/document_loaders/sitemap.py applies the...
CVE-2026-72848
SitemapLoader.parse_sitemap in langchain_community/document_loaders/sitemap.py applies the documented restrict_to_same_d
Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose...
CVE-2026-70105
Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information over a networ
The URLS regular expression in nltk/tokenize/casual.py, compiled into TweetTokenizer.WORD_RE and...
CVE-2026-72818
The URLS regular expression in nltk/tokenize/casual.py, compiled into TweetTokenizer.WORD_RE and applied by TweetTokeniz
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-72858
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
A cross-site scripting vulnerability in queryparser/termgenerator_internal.cc in Xapian xapian...
CVE-2026-77643
A cross-site scripting vulnerability in queryparser/termgenerator_internal.cc in Xapian xapian-core before 2.1.0 and be
Authorization bypass through user-controlled key in Microsoft Partner Center allows an...
CVE-2026-69558
Authorization bypass through user-controlled key in Microsoft Partner Center allows an unauthorized attacker to disclose
Server-side request forgery (ssrf) in Microsoft Copilot in Azure allows an authorized attacker to...
CVE-2026-69855
Server-side request forgery (ssrf) in Microsoft Copilot in Azure allows an authorized attacker to disclose information o
tor before 0.4.9.9 was prone to an out-of-bounds write when parsing a consensus or detached...
CVE-2026-77642
tor before 0.4.9.9 was prone to an out-of-bounds write when parsing a consensus or detached signature with unexpected s
Incorrect authorization in Azure Arc allows an unauthorized attacker to elevate privileges over a...
CVE-2026-69555
Incorrect authorization in Azure Arc allows an unauthorized attacker to elevate privileges over a network.
Server-side request forgery (ssrf) in Azure Virtual Machines allows an authorized attacker to...
CVE-2026-69543
Server-side request forgery (ssrf) in Azure Virtual Machines allows an authorized attacker to elevate privileges over a
Observable response discrepancy in Azure Stack HCI allows an unauthorized attacker to disclose...
CVE-2026-69519
Observable response discrepancy in Azure Stack HCI allows an unauthorized attacker to disclose information over a networ
Server-side request forgery (ssrf) in Microsoft Exchange Online allows an unauthorized attacker...
CVE-2026-65801
Server-side request forgery (ssrf) in Microsoft Exchange Online allows an unauthorized attacker to elevate privileges ov
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to...
CVE-2026-18835
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary commands