Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-3883
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
#advisory
共收录 23530 条相关情报。
← 返回所有主题dua-cli fails to filter terminal escape sequences when printing marked file paths after exiting...
CVE-2026-73479
dua-cli fails to filter terminal escape sequences when printing marked file paths after exiting the TUI interface. Attac
A vulnerability was detected in Model Context Protocol mcp-rdf-explorer 1.0.0. Affected is the...
CVE-2026-19753
A vulnerability was detected in Model Context Protocol mcp-rdf-explorer 1.0.0. Affected is the function explore_url of t
streama contains an insecure direct object reference vulnerability in ViewingStatusController...
CVE-2026-73039
streama contains an insecure direct object reference vulnerability in ViewingStatusController that allows authenticated
Budibase before 3.40.0 fails to redact datasource credentials stored in STRING typed fields,...
CVE-2026-72857
Budibase before 3.40.0 fails to redact datasource credentials stored in STRING typed fields, allowing authenticated user
Budibase before 3.40.0 contains an unauthenticated SQL injection vulnerability in webhook...
CVE-2026-72851
Budibase before 3.40.0 contains an unauthenticated SQL injection vulnerability in webhook-triggered automations with EXE
luci-app-lxc contains an ACL inconsistency vulnerability that allows low-privileged authenticated...
CVE-2026-72842
luci-app-lxc contains an ACL inconsistency vulnerability that allows low-privileged authenticated LuCI users to access b
Budibase before 3.40.0 fails to properly sanitize S3 object keys, allowing authenticated builders...
CVE-2026-72850
Budibase before 3.40.0 fails to properly sanitize S3 object keys, allowing authenticated builders to upload files with t
Budibase versions before 3.40.0 contain an authorization/authentication bypass in the PUT /api...
CVE-2026-72856
Budibase versions before 3.40.0 contain an authorization/authentication bypass in the PUT /api/global/users/tenant/owner
Budibase before 3.40.0 contains a cross-site request forgery vulnerability in the chat-link...
CVE-2026-72849
Budibase before 3.40.0 contains a cross-site request forgery vulnerability in the chat-link handoff endpoint that allows
Budibase before 3.40.0 contains a SQL injection vulnerability in the Oracle datasource connector...
CVE-2026-72853
Budibase before 3.40.0 contains a SQL injection vulnerability in the Oracle datasource connector's post-write row lookup
Budibase before 3.40.0 contains server-side request forgery vulnerabilities in OpenAPI query...
CVE-2026-72855
Budibase before 3.40.0 contains server-side request forgery vulnerabilities in OpenAPI query import and REST query execu
luci-app-openvpn fails to properly validate the instance_name2 parameter during file upload,...
CVE-2026-72841
luci-app-openvpn fails to properly validate the instance_name2 parameter during file upload, allowing authenticated user
filebrowser through 2.63.16 fails to properly restrict scope and permissions when self-signup is...
CVE-2026-72839
filebrowser through 2.63.16 fails to properly restrict scope and permissions when self-signup is enabled with default Cr
AgenticSeek (commit fc242c7) contains an unauthenticated remote code execution vulnerability that...
CVE-2026-72776
AgenticSeek (commit fc242c7) contains an unauthenticated remote code execution vulnerability that allows any network-adj
OpenWrt LuCI contains an overly permissive ACL definition in luci-mod-system-mounts that grants...
CVE-2026-72840
OpenWrt LuCI contains an overly permissive ACL definition in luci-mod-system-mounts that grants write access to /etc/cro
Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of...
CVE-2026-56862
Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has b
Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead...
CVE-2026-56859
Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion.
Previously, resolving relative paths containing parent directory ('..') segments performed string...
CVE-2026-56860
Previously, resolving relative paths containing parent directory ('..') segments performed string conversions and buffer
A flaw has been found in EnzoVezzaro mcp-dominican-layer up to...
CVE-2026-19751
A flaw has been found in EnzoVezzaro mcp-dominican-layer up to 39dd373786712650097ad31db27d5c477c8f9c82. The affected el