Multiple Cross-Site Scripting (XSS) vulnerabilities were identified in GMS 9.5.1 (Build 9510.1044...
CVE-2026-66146
Multiple Cross-Site Scripting (XSS) vulnerabilities were identified in GMS 9.5.1 (Build 9510.1044) and earlier versions
#advisory
共收录 23530 条相关情报。
← 返回所有主题PapersGPT for Zotero 0.6.1 contains a remote code execution vulnerability that allows attackers...
CVE-2026-73032
PapersGPT for Zotero 0.6.1 contains a remote code execution vulnerability that allows attackers to execute arbitrary Jav
A flaw was found in acm-search-v2-api-rhel9. When the `getFederationConfig` function refreshes...
CVE-2026-71468
A flaw was found in acm-search-v2-api-rhel9. When the `getFederationConfig` function refreshes its cache, it improperly
Bash-it 3.2.0 contains a terminal escape sequence injection vulnerability in the barbuk theme's...
CVE-2026-73036
Bash-it 3.2.0 contains a terminal escape sequence injection vulnerability in the barbuk theme's Python virtualenv prompt
A flaw was found in insights-client. The setDefault() function logs the value of every...
CVE-2026-71845
A flaw was found in insights-client. The setDefault() function logs the value of every environment variable it processes
An unauthenticated remote code execution vulnerability was identified in GMS 9.5.1 (Build 9510...
CVE-2026-66145
An unauthenticated remote code execution vulnerability was identified in GMS 9.5.1 (Build 9510.1044) and earlier version
A flaw was found in insights-client. A compromised managed cluster, referred to as a 'spoke', can...
CVE-2026-71475
A flaw was found in insights-client. A compromised managed cluster, referred to as a 'spoke', can inject unencoded data
A flaw was found in search-v2-api. The authentication middleware in the affected component...
CVE-2026-71467
A flaw was found in search-v2-api. The authentication middleware in the affected component unconditionally skips authent
The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for...
CVE-2026-19091
The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to
The Formidable Digital Signatures plugin for WordPress is vulnerable to file deletion due to...
CVE-2026-16230
The Formidable Digital Signatures plugin for WordPress is vulnerable to file deletion due to insufficient file path vali
The firmware of the Pulsetto Vagus Nerve Stimulator accepts several undisclosed commands over its...
CVE-2026-18844
The firmware of the Pulsetto Vagus Nerve Stimulator accepts several undisclosed commands over its Bluetooth Low Energy (
The InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress is vulnerable to Remote...
CVE-2026-13457
The InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress is vulnerable to Remote Code Execution in all
A vulnerability was found in Open5GS up to 2.7.1. This affects the function...
CVE-2024-14042
A vulnerability was found in Open5GS up to 2.7.1. This affects the function hss_ogs_diam_s6a_air_cb/hss_ogs_diam_s6a_ulr
An issue in MongoDB Server's query execution engine could allow an authenticated user with read...
CVE-2026-18711
An issue in MongoDB Server's query execution engine could allow an authenticated user with read and write privileges to
DSPy 3.3.0b1 contains a file exfiltration vulnerability in the Image and Audio output field...
CVE-2026-72742
DSPy 3.3.0b1 contains a file exfiltration vulnerability in the Image and Audio output field adapters that allows attacke
An issue in MongoDB Server's $graphLookup aggregation stage could allow an authenticated user...
CVE-2026-18706
An issue in MongoDB Server's $graphLookup aggregation stage could allow an authenticated user able to issue aggregation
OpenIM Server v3.8.3 contains a missing authorization vulnerability that allows any authenticated...
CVE-2026-69115
OpenIM Server v3.8.3 contains a missing authorization vulnerability that allows any authenticated user to access admin-o
An issue in MongoDB Server's Queryable Encryption maintenance operations could allow an...
CVE-2026-18712
An issue in MongoDB Server's Queryable Encryption maintenance operations could allow an authenticated user with privileg
Taubyte Tau v1.1.10 contains a missing authorization vulnerability in the services/auth HTTP...
CVE-2026-69119
Taubyte Tau v1.1.10 contains a missing authorization vulnerability in the services/auth HTTP service that allows any aut
An issue in MongoDB Server could allow an authenticated user with direct network access to a...
CVE-2026-18709
An issue in MongoDB Server could allow an authenticated user with direct network access to a shard to improperly commit