A flaw in Node.js Permission Model filesystem enforcement leaves `fs.realpathSync()` without the...
CVE-2026-106073
A flaw in Node.js Permission Model filesystem enforcement leaves `fs.realpathSync()` without the required read permissio
#advisory
共收录 22948 条相关情报。
← 返回所有主题A flaw in Node.js `crypto` causes the internal entropy caches used by `crypto.randomUUID()`, ...
CVE-2026-106074
A flaw in Node.js `crypto` causes the internal entropy caches used by `crypto.randomUUID()`, `crypto.randomUUIDv7()`, an
A flaw in Node.js Permission Model filesystem enforcement can grant access to paths that do not...
CVE-2026-106071
A flaw in Node.js Permission Model filesystem enforcement can grant access to paths that do not match a wildcard `--allo
Improper sanitization in the registration module allows reflected Cross-Site Scripting.
CVE-2026-87901
Improper sanitization in the registration module allows reflected Cross-Site Scripting.
Server-side request forgery in the model download path in Amazon Web Services Multi Model Server...
CVE-2026-115813
Server-side request forgery in the model download path in Amazon Web Services Multi Model Server 1.1.11 and earlier migh
A flaw was found in Kruize Autotune. Its REST API ships without an authentication layer, and the...
CVE-2026-110975
A flaw was found in Kruize Autotune. Its REST API ships without an authentication layer, and the endpoints that return d
Tandoor Recipes before 2.7.0 contains a server-side request forgery vulnerability in the Pestle...
CVE-2026-115810
Tandoor Recipes before 2.7.0 contains a server-side request forgery vulnerability in the Pestle importer that allows aut
baserCMS is a website development framework. In versions 5.2.5 before 5.3.2 and 5.4.0 before 5.4.2, an unauthenticated visitor can supply a comma-separated address list in a pub...
CVE-2026-115479
baserCMS is a website development framework. In versions 5.2.5 before 5.3.2 and 5.4.0 before 5.4.2, an unauthenticated v
baserCMS is a website development framework. In versions 5.2.3 before 5.3.2 and 5.4.0 before 5.4.2, the optional BcThemeFile plugin's Admin API validates a raw path in ThemeFile...
CVE-2026-114622
baserCMS is a website development framework. In versions 5.2.3 before 5.3.2 and 5.4.0 before 5.4.2, the optional BcTheme
A server-side request forgery (SSRF) vulnerability in the unauthenticated form service in version...
CVE-2026-19678
A server-side request forgery (SSRF) vulnerability in the unauthenticated form service in version 11.0.14 in onPhase For
A weakness has been identified in gedelumbung HospitalManagement up to...
CVE-2026-115537
A weakness has been identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. This af
An authentication bypass vulnerability in the public onPhase/ frevvo registration form version 11...
CVE-2026-19677
An authentication bypass vulnerability in the public onPhase/ frevvo registration form version 11.0.14 allows an unauthe
A vulnerability was identified in gedelumbung HospitalManagement up to...
CVE-2026-115535
A vulnerability was identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. The aff
A security flaw has been discovered in gedelumbung HospitalManagement up to...
CVE-2026-115536
A security flaw has been discovered in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Th
A flaw was found in the iscsiuio component of open-iscsi. The IPv6 Neighbor Discovery handler...
CVE-2026-115486
A flaw was found in the iscsiuio component of open-iscsi. The IPv6 Neighbor Discovery handler accesses link-layer addres
A flaw was found in the iscsiuio component of open-iscsi. The DHCPv4 option parser incorrectly...
CVE-2026-115484
A flaw was found in the iscsiuio component of open-iscsi. The DHCPv4 option parser incorrectly calculates the length of
A flaw was found in the iscsiuio component of open-iscsi. The DHCPv6 option parser calls strlen()...
CVE-2026-115485
A flaw was found in the iscsiuio component of open-iscsi. The DHCPv6 option parser calls strlen() on raw network data wi
The network management service on affected Kiloview E3 NDI encoder firmware fails to validate the...
CVE-2026-110243
The network management service on affected Kiloview E3 NDI encoder firmware fails to validate the network interface name
The system control service on affected Kiloview E3 NDI encoder firmware fails to sanitize the...
CVE-2026-107861
The system control service on affected Kiloview E3 NDI encoder firmware fails to sanitize the hostname parameter accepte
Improper authentication in AAD App Proxy allows an unauthorized attacker to elevate privileges...
CVE-2026-97785
Improper authentication in AAD App Proxy allows an unauthorized attacker to elevate privileges over a network.