A security flaw has been discovered in SourceCodester Simple Doctors Appointment System 1.0. This...
CVE-2026-19231
A security flaw has been discovered in SourceCodester Simple Doctors Appointment System 1.0. This vulnerability affects
#advisory
共收录 23530 条相关情报。
← 返回所有主题Consul Community Edition and Consul Enterprise 1.13.0 through 2.0.2 are vulnerable to an...
CVE-2026-15972
Consul Community Edition and Consul Enterprise 1.13.0 through 2.0.2 are vulnerable to an unauthenticated denial of servi
Broadcast control frames can disconnect multiple aircraft simultaneously leading to delayed...
CVE-2025-71411
Broadcast control frames can disconnect multiple aircraft simultaneously leading to delayed clearances and air traffic c
Grav CMS's scheduler-webhook plugin contains an authentication bypass in the webhook token check....
CVE-2026-11430
Grav CMS's scheduler-webhook plugin contains an authentication bypass in the webhook token check. When the webhook featu
A vulnerability was identified in SourceCodester Photo Share Website 1.0. This affects an unknown...
CVE-2026-19230
A vulnerability was identified in SourceCodester Photo Share Website 1.0. This affects an unknown part of the file /soci
Consul Community Edition and Consul Enterprise 1.3.0 through 2.0.2 are vulnerable to an...
CVE-2026-19113
Consul Community Edition and Consul Enterprise 1.3.0 through 2.0.2 are vulnerable to an unauthenticated denial of servic
In sol commit 373d848 (2024-12-12), the broker does not fully release resources when handling...
CVE-2025-63235
In sol commit 373d848 (2024-12-12), the broker does not fully release resources when handling malformed or duplicate CON
pypdf: Possible large memory usage for large /ToUnicode streams
CVE-2026-71870
### Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory consumption. This requir
pypdf: Possible long runtimes/large memory usage for large CID font width ranges
CVE-2026-71852
### Impact An attacker who uses this vulnerability can craft a PDF which leads to long runtimes and large memory consum
crypto-js: Insufficient Entropy in Cryptographic Secret Generation via Vulnerable CryptoJS Dependency Chain
CVE-2026-71851
### Summary `CryptoJS.lib.WordArray.random()` in affected versions is not a cryptographically secure random number gene
crypto-js: Insufficient Entropy in Cryptographic Secret Generation via Vulnerable CryptoJS Dependency Chain
CVE-2026-71851
crypto-js is a JavaScript library of crypto standards. Versions of crypto-js prior to 4.0.0 generate randomness in Crypt
Hono: `memo()` retains SSR output across requests, leading to cross-user data disclosure
CVE-2026-71850
### Summary `memo()` from `hono/jsx` retains the result of a server-side render and reuses it for later renders with co
Hono: Proxy Helper does not remove response headers listed in the `Connection` header
CVE-2026-71849
### Summary The Proxy Helper (`hono/proxy`) does not remove response headers named by the origin's `Connection` header.
Hono: Algorithmic Complexity DoS in Language Middleware
CVE-2026-71848
### Summary The `languageDetector` middleware is vulnerable to algorithmic complexity denial of service when processing
Hono: Algorithmic Complexity DoS in Language Middleware
CVE-2026-71848
Hono is a Web application framework that provides support for any JavaScript runtime. From 4.12.0 to 4.12.33, the langua
Ruby JSON: JSON::ResumableParser#partial_value dereferences a freed input buffer and crashes on truncated duplicate-key streams
CVE-2026-71847
### Summary Ruby's JSON native C extension clears the consumed `JSON::ResumableParser` input buffer but leaves `state.s
The OnCallNotificationActivity in the Datadog Android application is declared android:exported=...
CVE-2026-44964
The OnCallNotificationActivity in the Datadog Android application is declared android:exported="true" in AndroidManifest
BubbleChatActivity in the Datadog Android application is declared android:exported="true" with no...
CVE-2026-47361
BubbleChatActivity in the Datadog Android application is declared android:exported="true" with no permission guard and a
Six Android App Widget configuration activities in the Datadog Android application are declared...
CVE-2026-44965
Six Android App Widget configuration activities in the Datadog Android application are declared android:exported="true"
The launcher activity AppActivity in the Datadog Android application is declared android:exported...
CVE-2026-47363
The launcher activity AppActivity in the Datadog Android application is declared android:exported="true" with launchMode