Next Terminal fails to enforce per-asset authorization checks on the portal ping and wake-on-LAN...
CVE-2026-75108
Next Terminal fails to enforce per-asset authorization checks on the portal ping and wake-on-LAN endpoints, allowing any
#advisory
共收录 23530 条相关情报。
← 返回所有主题Typemill before 2.26.0 contains an authorization bypass vulnerability in the media file download...
CVE-2026-71518
Typemill before 2.26.0 contains an authorization bypass vulnerability in the media file download route that allows unaut
phpIPAM through 1.8.1 fails to verify that a requested IP address belongs to the subnet a...
CVE-2026-75105
phpIPAM through 1.8.1 fails to verify that a requested IP address belongs to the subnet a temporary share token was issu
Crawlab fails to verify user ownership or administrative role on the password-change endpoint,...
CVE-2026-75103
Crawlab fails to verify user ownership or administrative role on the password-change endpoint, allowing any authenticate
hashcat master branch builds after v7.1.2 contain a heap buffer overflow vulnerability in the...
CVE-2026-68765
hashcat master branch builds after v7.1.2 contain a heap buffer overflow vulnerability in the KeePass AESKDF/KDBX v4 mod
Hugging Face Transformers fails to validate shard filenames in checkpoint index files, allowing...
CVE-2026-75104
Hugging Face Transformers fails to validate shard filenames in checkpoint index files, allowing attackers to read arbitr
Determined fails to authorize requests on the generic task kill, pause, and unpause endpoints in...
CVE-2026-75109
Determined fails to authorize requests on the generic task kill, pause, and unpause endpoints in the API handlers. Authe
A flaw was found in the managedcluster-import-controller. The Certificate Signing Request (CSR)...
CVE-2026-66795
A flaw was found in the managedcluster-import-controller. The Certificate Signing Request (CSR) auto-approval logic impr
Buffer Overflow vulnerability in SteelSeries GG (macOS) v.107.0.0 allows a remote attacker to...
CVE-2026-39254
Buffer Overflow vulnerability in SteelSeries GG (macOS) v.107.0.0 allows a remote attacker to execute arbitrary code via
zuraCast versions up to and including 0.23.7 contain a SQL injection vulnerability in the backup...
CVE-2026-67917
zuraCast versions up to and including 0.23.7 contain a SQL injection vulnerability in the backup restore functionality.
Buffer Overflow vulnerability in Tenda W20E V16.01.0.6(2782) allows an attacker to execute...
CVE-2026-67967
Buffer Overflow vulnerability in Tenda W20E V16.01.0.6(2782) allows an attacker to execute arbitrary code. This is an in
An issue in JeecgBoot v.3.9.2 allows a remote attacker to execute arbitrary code via the files...
CVE-2026-67926
An issue in JeecgBoot v.3.9.2 allows a remote attacker to execute arbitrary code via the files Parameter in JeecgBoot AI
An issue in Tneda W20E v.16.01.0.6(2782) allows a remote attacker to execute arbitrary code via...
CVE-2026-67965
An issue in Tneda W20E v.16.01.0.6(2782) allows a remote attacker to execute arbitrary code via the url_need_login funct
Cross Site Scripting vulnerability in JeecgBoot v.3.9.2 allows a remote attacker to execute...
CVE-2026-67925
Cross Site Scripting vulnerability in JeecgBoot v.3.9.2 allows a remote attacker to execute arbitrary code via the endpo
Buffer Overflow vulnerability in SteelSeries GG (macOS) v.107.0.0 allows a remote attacker to...
CVE-2026-39255
Buffer Overflow vulnerability in SteelSeries GG (macOS) v.107.0.0 allows a remote attacker to execute arbitrary code via
Tenda W20E V16.01.0.6(2782) /goform/telnet endpoint allows unauthenticated remote attackers to...
CVE-2026-67966
Tenda W20E V16.01.0.6(2782) /goform/telnet endpoint allows unauthenticated remote attackers to activate the Telnet daemo
A flaw was found in acm-search-v2-rhel9. This vulnerability allows an authenticated attacker,...
CVE-2026-71472
A flaw was found in acm-search-v2-rhel9. This vulnerability allows an authenticated attacker, such as a hub administrato
Legora before 2026-08-14 contains a cross-site scripting vulnerability that allows attackers to...
CVE-2026-74234
Legora before 2026-08-14 contains a cross-site scripting vulnerability that allows attackers to achieve arbitrary JavaSc
An issue in ACME mini_httpd 1.30 and prior allows a remote attacker to cause a denial of service...
CVE-2026-68005
An issue in ACME mini_httpd 1.30 and prior allows a remote attacker to cause a denial of service via the HTTP request he
A flaw was found in search-v2-operator. This component's `search-serviceaccount` has overly broad...
CVE-2026-70495
A flaw was found in search-v2-operator. This component's `search-serviceaccount` has overly broad permissions, allowing