OP-TEE OS through 4.10.0, fixed in commit 8794043, contains a use-after-free vulnerability in the...
CVE-2026-71968
OP-TEE OS through 4.10.0, fixed in commit 8794043, contains a use-after-free vulnerability in the Trusted Application lo
#advisory
共收录 23530 条相关情报。
← 返回所有主题Flowise versions 2.2.4 through 3.1.4 contain a missing authorization vulnerability in the POST ...
CVE-2026-71962
Flowise versions 2.2.4 through 3.1.4 contain a missing authorization vulnerability in the POST /api/v1/openai-assistants
OP-TEE OS through 4.10.0, fixed in commit 7b8b494, contains a buffer underwrite vulnerability in...
CVE-2026-71969
OP-TEE OS through 4.10.0, fixed in commit 7b8b494, contains a buffer underwrite vulnerability in the RSA NOPAD encrypt a
Calling wordexp with WRDE_APPEND in the GNU C Library version 2.0 to version 2.43 can cause the...
CVE-2026-6368
Calling wordexp with WRDE_APPEND in the GNU C Library version 2.0 to version 2.43 can cause the interface to return inva
When expanding paths that begin with a tilde (~) followed by a username, the internal parse_tilde...
CVE-2026-6791
When expanding paths that begin with a tilde (~) followed by a username, the internal parse_tilde function extracts the
OP-TEE OS through 4.10.0, fixed in commit 0aadfc2, contains a null pointer dereference...
CVE-2026-71967
OP-TEE OS through 4.10.0, fixed in commit 0aadfc2, contains a null pointer dereference vulnerability in the Widevine pse
The AWS Systems Manager Parameter Store and Secrets Manager backends in Apache Airflow's Amazon...
CVE-2026-68872
The AWS Systems Manager Parameter Store and Secrets Manager backends in Apache Airflow's Amazon provider resolved a team
The Azure Key Vault secrets backend in Apache Airflow's Microsoft Azure provider resolved a team...
CVE-2026-68870
The Azure Key Vault secrets backend in Apache Airflow's Microsoft Azure provider resolved a team-scoped Connection or Va
A Zip Slip vulnerability in the WebUI ISP Upgrade functionality allows arbitrary file write via a...
CVE-2026-12339
A Zip Slip vulnerability in the WebUI ISP Upgrade functionality allows arbitrary file write via a crafted archive contai
The Yandex Lockbox secrets backend in Apache Airflow's Yandex provider resolved a team-scoped...
CVE-2026-68871
The Yandex Lockbox secrets backend in Apache Airflow's Yandex provider resolved a team-scoped Connection or Variable id
A flaw was found in GIMP's file format plugins, including those for PSD and PAA files. A remote...
CVE-2026-59091
A flaw was found in GIMP's file format plugins, including those for PSD and PAA files. A remote attacker could exploit t
Improper restriction of XML external entity reference vulnerability (unauthenticated) in...
CVE-2026-16626
Improper restriction of XML external entity reference vulnerability (unauthenticated) in Jaspersoft JasperReports Server
Pega Platform versions 8.5.0 through 25.1.2 are affected by an improper validation of...
CVE-2026-10754
Pega Platform versions 8.5.0 through 25.1.2 are affected by an improper validation of cryptographic signatures that may
tar-rs versions 0.4.11 through 0.4.46 contain a symlink escape vulnerability in the Builder:...
CVE-2026-70622
tar-rs versions 0.4.11 through 0.4.46 contain a symlink escape vulnerability in the Builder::append_dir_all() function t
HCL BigFix Mobile is vulnerable to Reflected Cross-Site Scripting (Reflected XSS) due to...
CVE-2026-56619
HCL BigFix Mobile is vulnerable to Reflected Cross-Site Scripting (Reflected XSS) due to insufficient validation and out
A flaw was found in multicluster-global-hub. The manager component improperly validates the...
CVE-2026-71576
A flaw was found in multicluster-global-hub. The manager component improperly validates the source identity of incoming
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-35005
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
A flaw was found in multicluster-global-hub. During a ManagedClusterMigration, the system...
CVE-2026-71577
A flaw was found in multicluster-global-hub. During a ManagedClusterMigration, the system incorrectly grants all managed
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-35026
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
A flaw was found in libvirt. During storage volume clone or convert operations, newly created...
CVE-2026-63623
A flaw was found in libvirt. During storage volume clone or convert operations, newly created volume images were tempora