Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-15424
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
#advisory
共收录 23530 条相关情报。
← 返回所有主题The web interface of the affected device relies on the HTTP referrer header as part of request...
CVE-2026-15141
The web interface of the affected device relies on the HTTP referrer header as part of request validation. Requests con
PDF::WebKit versions through 1.2 for Perl allow argument injection into wkhtmltopdf via meta tags...
CVE-2026-16770
PDF::WebKit versions through 1.2 for Perl allow argument injection into wkhtmltopdf via meta tags in the source document
PDF::WebKit versions through 1.2 for Perl allow OS command injection via a 2-arg open() of the...
CVE-2026-17431
PDF::WebKit versions through 1.2 for Perl allow OS command injection via a 2-arg open() of the output path in to_pdf and
IBM DataPower Gateway 11.0.0.0 through 11.0.0.1 and IBM DataPower Gateway 10.5.0.0 through 10.5.0...
CVE-2026-7366
IBM DataPower Gateway 11.0.0.0 through 11.0.0.1 and IBM DataPower Gateway 10.5.0.0 through 10.5.0.21 and IBM DataPower G
WolfStack before 25.9.2 contains a hard-coded cluster-authentication secret compiled into every...
CVE-2026-73519
WolfStack before 25.9.2 contains a hard-coded cluster-authentication secret compiled into every build and published as a
A flaw was found in acm-search-v2-rhel9. An attacker with administrative privileges on the hub...
CVE-2026-71471
A flaw was found in acm-search-v2-rhel9. An attacker with administrative privileges on the hub cluster, specifically wit
A flaw was found in insights-client. The component's ServiceAccount is bound to a ClusterRole...
CVE-2026-71846
A flaw was found in insights-client. The component's ServiceAccount is bound to a ClusterRole granting cluster-wide secr
A flaw was found in the `search-v2-operator` component. A user with specific administrative...
CVE-2026-71473
A flaw was found in the `search-v2-operator` component. A user with specific administrative permissions on a managed clu
A flaw was found in search-v2-api. An unauthenticated attacker can exploit this by sending...
CVE-2026-71469
A flaw was found in search-v2-api. An unauthenticated attacker can exploit this by sending requests with unique random b
A flaw was found in open-iscsi. This vulnerability allows a remote attacker on the same local...
CVE-2026-18726
A flaw was found in open-iscsi. This vulnerability allows a remote attacker on the same local network segment to cause a
A flaw was found in open-iscsi's iscsiuio component. This vulnerability involves an integer...
CVE-2026-18727
A flaw was found in open-iscsi's iscsiuio component. This vulnerability involves an integer underflow and out-of-bounds
vinny/views.py: (ModifyEmailNotifications) IDOR: view fetches VinceCommEmail by raw pk from URL...
CVE-2026-18750
vinny/views.py: (ModifyEmailNotifications) IDOR: view fetches VinceCommEmail by raw pk from URL and toggles email_functi
The type=track branch authorises on _is_my_case(t_attach.case) only and never checks...
CVE-2026-18749
The type=track branch authorises on _is_my_case(t_attach.case) only and never checks VinceTrackAttachment.shared. A coor
Any authenticated case participant can fetch any OTHER vendor's CaseStatement + per-vul...
CVE-2026-18744
Any authenticated case participant can fetch any OTHER vendor's CaseStatement + per-vul CaseMemberStatus by supplying th
A data source definition containing an over-length file path setting may cause the MongoDB BI...
CVE-2026-19003
A data source definition containing an over-length file path setting may cause the MongoDB BI Connector ODBC Driver setu
IBM DOORS Next 7.0.3 through 7.0.3 Interim Fix 018 could allow an authenticated user to bypass...
CVE-2024-27253
IBM DOORS Next 7.0.3 through 7.0.3 Interim Fix 018 could allow an authenticated user to bypass security logic to perform
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to buffer overflow in the...
CVE-2026-10534
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to buffer overflow in the IXF IMPORT parser.
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and...
CVE-2026-17485
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and obtain sensitive information
Ansible FreeBSD Jail Connection Plugin: Jail escape via symlink following in put_file (host-side root mv)
CVE-2026-55074
Through version 1.3.0, the jailexec connection plugin's put_file resolved a transfer's destination to a path on the jail