An insufficient certificate validation in a privileged communication workflow, was identified in...
CVE-2026-66154
An insufficient certificate validation in a privileged communication workflow, was identified in a GMS application 9.5.1
#advisory
共收录 23530 条相关情报。
← 返回所有主题An unauthenticated command injection vulnerability was identified in the GMS Dispatcher Service...
CVE-2026-66147
An unauthenticated command injection vulnerability was identified in the GMS Dispatcher Service in GMS 9.5.1 and earlier
Improper Control of Generation of Code ('Code Injection') Vulnerability in the SonicWall Email...
CVE-2026-66150
Improper Control of Generation of Code ('Code Injection') Vulnerability in the SonicWall Email Security appliance allows
Improper Control of Generation of Code ('Code Injection') Vulnerability in the SonicWall Email...
CVE-2026-66149
Improper Control of Generation of Code ('Code Injection') Vulnerability in the SonicWall Email Security appliance allows
Improper TLS hostname verification vulnerability in Apache HttpComponents Client 5.4 or newer....
CVE-2026-71290
Improper TLS hostname verification vulnerability in Apache HttpComponents Client 5.4 or newer. HostnameVerificationPolic
An authenticated command injection vulnerability was identified in GMS Command-Line Interface ...
CVE-2026-66148
An authenticated command injection vulnerability was identified in GMS Command-Line Interface (CLI) 9.5.1 (Build 9510.10
A flaw was found in FreeIPA. The trust-fetch-domains command is gated by a read-only permission...
CVE-2026-19550
A flaw was found in FreeIPA. The trust-fetch-domains command is gated by a read-only permission on the trust object rath
CivetWeb (commit 4a4f0c95) contains a heap and stack buffer overflow vulnerability in the...
CVE-2026-29035
CivetWeb (commit 4a4f0c95) contains a heap and stack buffer overflow vulnerability in the read_websocket() function that
An insecure handling of serialized objects vulnerability was found in the one of the service of...
CVE-2026-18634
An insecure handling of serialized objects vulnerability was found in the one of the service of GMS application 9.5.1 (B
The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to authorization bypass in...
CVE-2026-15606
The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to authorization bypass in all versions up to, and i
FileRun up to and including version 2026.2.0 contains an OS command injection vulnerability that...
CVE-2026-14863
FileRun up to and including version 2026.2.0 contains an OS command injection vulnerability that allows authenticated at
In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of...
CVE-2026-73282
In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of remote-forwarding operat
In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to...
CVE-2026-73281
In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, includi
Snipe-IT before 8.6.0 contains an authorization bypass (insecure direct object reference) in the...
CVE-2026-19579
Snipe-IT before 8.6.0 contains an authorization bypass (insecure direct object reference) in the asset checkout-request
In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be...
CVE-2026-73283
In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwar
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based)...
CVE-2026-70339
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized
DB-GPT v0.8.1 contains an unauthenticated path traversal vulnerability that allows remote...
CVE-2026-73034
DB-GPT v0.8.1 contains an unauthenticated path traversal vulnerability that allows remote attackers to write arbitrary f
telegram-search contains a stored cross-site scripting vulnerability that allows remote attackers...
CVE-2026-73031
telegram-search contains a stored cross-site scripting vulnerability that allows remote attackers to execute arbitrary J
When OAuth authentication is enabled and browser-facing TLS terminates at a reverse proxy that...
CVE-2026-65655
When OAuth authentication is enabled and browser-facing TLS terminates at a reverse proxy that forwards the callback to
A flaw was found in insights-client. When the application receives a non-200 response, it logs...
CVE-2026-71474
A flaw was found in insights-client. When the application receives a non-200 response, it logs the request headers, whic