MongoDB Server's handling of a Queryable Encryption maintenance operation did not properly...
CVE-2026-18687
MongoDB Server's handling of a Queryable Encryption maintenance operation did not properly validate certain request para
#advisory
共收录 23530 条相关情报。
← 返回所有主题The AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress...
CVE-2026-15426
The AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress plugin for WordPress is v
TypeBot has Arbitrary S3 Object Write in deprecated public upload endpoint via attacker-controlled filePath
CVE-2026-48763
TypeBot is a chatbot builder tool. Versions prior to 3.17.0 expose a deprecated public upload endpoint at `GET /api/v1/t
TypeBot vulnerable to cross-workspace OAuth credential takeover in updateOAuthCredentials via missing object binding
CVE-2026-48765
TypeBot is a chatbot builder tool. Versions prior to 3.17.0 allow a low-privilege read collaborator to extract a workspa
Malcolm Vulnerable to Authorization Bypass via URI Normalization Differential in Nginx Lua RBAC
CVE-2026-63177
Malcolm is a network traffic analysis tool suite. Prior to version 26.07.0, role-based access control enforced in the Ng
Malcolm has Uncontrolled Resource Consumption in Archive Extraction (Inode-Exhaustion DoS)
CVE-2026-63133
Malcolm is a network traffic analysis tool suite. Prior to version 26.07.0, `safe-extract.py` extracts uploaded archives
Malcolm vulnerable to RCE via unrestricted .php upload to the file-upload component
CVE-2026-55676
Malcolm is a network traffic analysis tool suite. The file-upload component (FilePond PHP backend) accepts uploads at `P
Microsoft Security Advisory CVE-2026-62902 – .NET Information Disclosure Vulnerability
CVE-2026-62902
## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Wind
FreeRDP: Kerberos GSS Wrap-token `EC` field is unbounded, causing an out-of-bounds decrypt in `kerberos_DecryptMessage`
CVE-2026-72745 · CVE-2026-73242
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.30.0, FreeRDP's winpr/libwinpr/sspi/Kerberos
Microsoft Security Advisory CVE-2026-62871 – .NET Elevation of Privilege Vulnerability
CVE-2026-62871
## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Wind
FreeCAD: XXE file read and SSRF via external entity injection in Document.xml SAX parser
CVE-2026-73235
FreeCAD is a free and open-source multiplatform 3D parametric modeler. Prior to 1.1.2, the Xerces SAX2 XMLReader constru
GeoDirectory <= 2.8.169 - Authenticated (Subscriber+) Arbitrary File Deletion via 'post_type' Parameter via Query-String Bypass in geodir_save_post + geodir_delete_revision
CVE-2026-19091
The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to
Bash-it barbuk Theme 3.2.0 Terminal Escape Sequence Injection via pyproject.toml
CVE-2026-73036
Bash-it 3.2.0 contains a terminal escape sequence injection vulnerability in the barbuk theme's Python virtualenv prompt
Microsoft Security Advisory CVE-2026-62897 – .NET Remote Code Execution Vulnerability
CVE-2026-62897
## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Wind
ffuf denial of service (OOM) via HTTP response decompression bomb
CVE-2026-73232
ffuf is a fast web fuzzer written in Go. Prior to 2.2.0, ffuf allows a malicious target server to cause an out-of-memory
Flawfinder output manipulation via untrusted filenames and source text
CVE-2026-48813
Flawfinder is a a static analysis tool for finding vulnerabilities in C/C++ source code. Versions prior to 2.0.20 have a
Microsoft Security Advisory CVE-2026-70354 – .NET Core Remote Code Execution Vulnerability
CVE-2026-70354
## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Wind
Open5GS Diameter S6a hss-s6a-path.c hss_ogs_diam_s6a_ulr_cb stack-based overflow
CVE-2024-14042
A vulnerability was found in Open5GS up to 2.7.1. This affects the function hss_ogs_diam_s6a_air_cb/hss_ogs_diam_s6a_ulr
Microsoft Security Advisory CVE-2026-62909 – .NET Elevation of Privilege Vulnerability
CVE-2026-62909
## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET
Microsoft Security Advisory CVE-2026-62886 – .NET Elevation of Privilege Vulnerability
CVE-2026-62886
## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Wind