IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain...
CVE-2026-17175
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due t
#advisory
共收录 23530 条相关情报。
← 返回所有主题IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain...
CVE-2026-17173
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due t
MindsDB Minds Platform version 26.1.0 and earlier contains an unauthenticated remote code...
CVE-2026-73678
MindsDB Minds Platform version 26.1.0 and earlier contains an unauthenticated remote code execution vulnerability that a
A critical OS command injection vulnerability has been identified in the Haiwell IoT Cloud HMI...
CVE-2026-19188
A critical OS command injection vulnerability has been identified in the Haiwell IoT Cloud HMI Gateway product. The vul
LimeSurvey Community Edition 7.0.5 contains an authenticated SQL injection vulnerability in the...
CVE-2026-18403
LimeSurvey Community Edition 7.0.5 contains an authenticated SQL injection vulnerability in the Central Participant Data
The vulnerability, if exploited, could allow an authenticated miscreant with "DNA Authority -...
CVE-2025-7639
The vulnerability, if exploited, could allow an authenticated miscreant with "DNA Authority - Operator" privilege to ta
ContextForge: DNS TOCTOU race condition causes SSRF protection bypass (`/admin/gateways/test`)
CVE-2026-53708
## Summary The `/admin/gateways/test` endpoint validates submitted URLs by resolving the hostname at validation time an
SurrealDB: Array element-level (field.*) SELECT permissions leak denied elements to record users
A `SELECT` permission defined on an array element (`DEFINE FIELD field.* … PERMISSIONS FOR select …`) is not enforced co
mchange-commons-java contains elements susceptible to abuse via JNDI injection and "deserialization gadgets"
CVE-2026-55153
### Impact Prior to version 0.6.0, mchange-commons-java includes a JNDI `ObjectFactory` implementation (`com.mchange.v2.
OpenAM Insecure SSO Cookie Initialization
CVE-2026-53660
## Summary **Description** An Insecure Default Initialization of Resource (CWE-1188) issue in the OpenAM default config
Fabric CA Developer's Guide: LDAP Injection via Unescaped Username in GetUser Filter
CVE-2026-53658
When fabric-ca is configured with an LDAP backend, the username from HTTP Basic authentication is included in an LDAP ui
Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket
CVE-2026-53657
### Impact On an instance of Lima running with `qemu` driver, an arbitrary user in the VM could access `/run/lima-guesta
Grav: Unauthenticated denial of service via unbounded image derivative dimensions
CVE-2026-53653
### Summary An unauthenticated visitor exhausts server memory and CPU by requesting an image with oversized resize dimen
Budibase: SSRF in Automation Steps - Webhook, Zapier, N8N, Slack, Discord Bypass IP Blacklist
CVE-2026-35219
## Summary Budibase automation steps (outgoing webhook, Zapier, n8n, Slack, Discord, Make.com) make server-side HTTP re
A vulnerability was identified in TOTOLINK A800R 4.1.2cu.5137_B20200730. This impacts the...
CVE-2026-19846
A vulnerability was identified in TOTOLINK A800R 4.1.2cu.5137_B20200730. This impacts the function setUrlFilterRules of
Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to...
CVE-2026-72970
Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a net
A command injection vulnerability exists in Security Center where a remote, unauthenticated...
CVE-2026-19682
A command injection vulnerability exists in Security Center where a remote, unauthenticated attacker could exploit this
LimeSurvey Community Edition 7.0.5 contains an authenticated reflected cross-site scripting...
CVE-2026-63361
LimeSurvey Community Edition 7.0.5 contains an authenticated reflected cross-site scripting vulnerability in the HTML ed
A security flaw has been discovered in TOTOLINK A800R 4.1.2cu.5137_B20200730. Affected is the...
CVE-2026-19847
A security flaw has been discovered in TOTOLINK A800R 4.1.2cu.5137_B20200730. Affected is the function setWiFiWpsConfig
An authenticated command injection vulnerability exists in Security Center related to file upload...
CVE-2026-19681
An authenticated command injection vulnerability exists in Security Center related to file upload processing. An attacke