共收录 22920 条相关情报。
← 返回所有主题CVE-2026-114622
baserCMS is a website development framework. In versions 5.2.3 before 5.3.2 and 5.4.0 before 5.4.2, the optional BcTheme
CVE-2026-19678
A server-side request forgery (SSRF) vulnerability in the unauthenticated form service in version 11.0.14 in onPhase For
CVE-2026-115537
A weakness has been identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. This af
CVE-2026-19677
An authentication bypass vulnerability in the public onPhase/ frevvo registration form version 11.0.14 allows an unauthe
CVE-2026-115535
A vulnerability was identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. The aff
CVE-2026-115536
A security flaw has been discovered in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Th
CVE-2026-115486
A flaw was found in the iscsiuio component of open-iscsi. The IPv6 Neighbor Discovery handler accesses link-layer addres
CVE-2026-115484
A flaw was found in the iscsiuio component of open-iscsi. The DHCPv4 option parser incorrectly calculates the length of
CVE-2026-115485
A flaw was found in the iscsiuio component of open-iscsi. The DHCPv6 option parser calls strlen() on raw network data wi
CVE-2026-110243
The network management service on affected Kiloview E3 NDI encoder firmware fails to validate the network interface name
CVE-2026-107861
The system control service on affected Kiloview E3 NDI encoder firmware fails to sanitize the hostname parameter accepte
CVE-2026-97785
Improper authentication in AAD App Proxy allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-96616
Authentication tokens issued by the E3's web management interface on login are given an expiration time far beyond any r
CVE-2026-110491
The ONVIF service on the E3 can be rendered unresponsive by sending malformed or incomplete requests to certain operatio
CVE-2026-115534
A vulnerability was determined in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Impacte
CVE-2026-110825
The ONVIF device service on affected Kiloview E3 NDI encoder firmware accepts hostname, DNS, and NTP configuration write
CVE-2026-92450
The authentication framework used by affected Kiloview E3 NDI encoder firmware signs session JSON Web Tokens using an HM
CVE-2026-96185
Stack-based buffer overflow in Microsoft Exchange Online allows an authorized attacker to execute code over a network.
CVE-2026-105014
Improper neutralization of special elements used in a command ('command injection') in Azure Pipelines allows an unautho
CVE-2026-110063
Improper link resolution before file access ('link following') in VM Inspector for Azure Virtual Machines allows an unau