Authentication tokens issued by the E3's web management interface on login are given an...
CVE-2026-96616
Authentication tokens issued by the E3's web management interface on login are given an expiration time far beyond any r
#advisory
共收录 22948 条相关情报。
← 返回所有主题The ONVIF service on the E3 can be rendered unresponsive by sending malformed or incomplete...
CVE-2026-110491
The ONVIF service on the E3 can be rendered unresponsive by sending malformed or incomplete requests to certain operatio
A vulnerability was determined in gedelumbung HospitalManagement up to...
CVE-2026-115534
A vulnerability was determined in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Impacte
The ONVIF device service on affected Kiloview E3 NDI encoder firmware accepts hostname, DNS, and...
CVE-2026-110825
The ONVIF device service on affected Kiloview E3 NDI encoder firmware accepts hostname, DNS, and NTP configuration write
The authentication framework used by affected Kiloview E3 NDI encoder firmware signs session JSON...
CVE-2026-92450
The authentication framework used by affected Kiloview E3 NDI encoder firmware signs session JSON Web Tokens using an HM
Stack-based buffer overflow in Microsoft Exchange Online allows an authorized attacker to execute...
CVE-2026-96185
Stack-based buffer overflow in Microsoft Exchange Online allows an authorized attacker to execute code over a network.
Improper neutralization of special elements used in a command ('command injection') in Azure...
CVE-2026-105014
Improper neutralization of special elements used in a command ('command injection') in Azure Pipelines allows an unautho
Improper link resolution before file access ('link following') in VM Inspector for Azure Virtual...
CVE-2026-110063
Improper link resolution before file access ('link following') in VM Inspector for Azure Virtual Machines allows an unau
The network management service on affected Kiloview E3 NDI encoder firmware fails to sanitize one...
CVE-2026-109122
The network management service on affected Kiloview E3 NDI encoder firmware fails to sanitize one field used when config
Missing authentication for critical function in Azure Kubernetes Configuration Service allows an...
CVE-2026-83938
Missing authentication for critical function in Azure Kubernetes Configuration Service allows an unauthorized attacker t
The ONVIF device service on the E3 responds to certain informational requests without requiring...
CVE-2026-111100
The ONVIF device service on the E3 responds to certain informational requests without requiring authentication. A remote
A vulnerability exists in the the time zone parameter and does not properly validate user input,...
CVE-2026-105265
A vulnerability exists in the the time zone parameter and does not properly validate user input, which may allow an auth
InterSystems IRIS for Health has TLS/SSL encryption turned off by default, which may enable an...
CVE-2026-111594
InterSystems IRIS for Health has TLS/SSL encryption turned off by default, which may enable an attacker to view transmit
A flaw was found in libslirp. When handling ICMP echo requests, the reply length is not updated...
CVE-2026-115449
A flaw was found in libslirp. When handling ICMP echo requests, the reply length is not updated to match the actual data
A flaw was found in FreeIPA. An improper authorization check allows an authenticated host to...
CVE-2026-115221
A flaw was found in FreeIPA. An improper authorization check allows an authenticated host to retrieve and revoke digital
A flaw was found in the OpenShift client oc. When extracting container image layers with oc image...
CVE-2026-115424
A flaw was found in the OpenShift client oc. When extracting container image layers with oc image extract, the applicati
Server-side request forgery (ssrf) in Azure AI Foundry allows an authorized attacker to elevate...
CVE-2026-108456
Server-side request forgery (ssrf) in Azure AI Foundry allows an authorized attacker to elevate privileges over a networ
Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.0, Authlib's RFC 9101 JWTAuthenticationRequest passes the unauthenticated, client-control...
CVE-2026-114620
Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.0, Authlib's RFC 9101 JWTAuthent
Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.1, Authlib's OctKey.import_key() and HMAC signing and verification path accept zero-lengt...
CVE-2026-114616
Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.1, Authlib's OctKey.import_key()
VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote...
CVE-2026-114625
VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privile