共收录 23530 条相关情报。
← 返回所有主题CVE-2026-55209
### Impact Prior to version 6.2.9 resdata would not correctly validate input in GRDECL files. The severity rating assume
CVE-2026-55107
### Summary A guest mruby script running inside the Kobako sandbox can execute arbitrary Ruby in the host process, fully
### Description A rogue or compromised MeshAgent can inject arbitrary HTML/JavaScript via the osdesc (OS description) f
【大模型服务平台 TokenHub】&【智能体开发平台 ADP】& 【云开发 CloudBase】 关于腾讯云 Qwen3.5-Flash、Qwen3.5-Plus 模型下线及切换升级的通知
CVE-2026-42164
Mahara before 25.04.5 and 26.04.0 is vulnerable in the Text block/section functionality when a call is crafted in a cert
CVE-2026-42162
Mahara before 25.04.5 and 26.04.0 is vulnerable to artefacts being accessible to others under certain circumstances when
CVE-2026-75078
A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. This affects an unknown par
CVE-2026-75080
A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. This issue affects s
CVE-2026-75079
A weakness has been identified in SourceCodester Class and Exam Timetabling System 1.0. This vulnerability affects unkno
CVE-2026-75082
A flaw has been found in Webkul Bagisto up to 2.4.4. The affected element is an unknown function of the file /customer/r
CVE-2026-75077
A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected by this issue is some u
CVE-2026-75587
Mattermost Desktop App versions <=6.2 6.2.2.0 fail to redact the pre-auth secret when generating a diagnostics report, w
CVE-2026-9816
Mattermost versions 11.7.x <= 11.7.6, 10.11.x <= 10.11.21, 11.8.x <= 11.8.3 fail to validate BoardMember.Scheme* fields
CVE-2026-9693
Mattermost versions 10.11.x <= 10.11.20, 11.7.x <= 11.7.5 Mattermost fails to remove thread membership records when a us
CVE-2026-75081
A vulnerability was detected in Webkul Bagisto up to 2.4.4. Impacted is an unknown function of the file /customer/accoun
CVE-2026-67961
An issue in O2OA v.10.0.2 allows a local attacker to execute arbitrary code via the the sandbox mechanism of the Invoke
CVE-2026-38165
A Server-Side Template Injection (SSTI) vulnerability in the Velocity template engine configuration of xdocreport v0.9.2
CVE-2026-67919
An issue in Halo 2.25.4 allows a remote attacker to execute arbitrary code via the PluginEndpoint.java, installFromUri m
CVE-2026-9859
Mattermost versions 11.7.x <= 11.7.6, 10.11.x <= 10.11.21, 11.8.x <= 11.8.3 fail to enforce PermissionManageBoardRoles o
CVE-2026-64781
The issue was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.