On every successful login, the Datadog Android application calls FirebaseCrashlytics.setUserId...
CVE-2026-47364
On every successful login, the Datadog Android application calls FirebaseCrashlytics.setUserId with the signed-in user's
#advisory
共收录 23530 条相关情报。
← 返回所有主题The Datadog Android application stores operationally sensitive content in plaintext SQLite...
CVE-2026-47362
The Datadog Android application stores operationally sensitive content in plaintext SQLite databases via Room. Two datab
Improper privilege management in the XML-RPC API of Plesk before 18.0.80, allows an authenticated...
CVE-2026-64637
Improper privilege management in the XML-RPC API of Plesk before 18.0.80, allows an authenticated reseller to obtain an
A vulnerability was determined in SourceCodester Online Clothing Store. Affected by this issue is...
CVE-2026-19229
A vulnerability was determined in SourceCodester Online Clothing Store. Affected by this issue is some unknown functiona
An SQL injection vulnerability in Plesk Obsidian up to 18.0.80 for Linux and Windows allows an...
CVE-2026-64636
An SQL injection vulnerability in Plesk Obsidian up to 18.0.80 for Linux and Windows allows an authenticated user to rea
A vulnerability was identified in WonderTrader up to 0.9.9. Affected is the function _undone_qty...
CVE-2026-19213
A vulnerability was identified in WonderTrader up to 0.9.9. Affected is the function _undone_qty in the library src/WtCo
ZenML 0.94.6 contains a remote code execution vulnerability in the CloudpickleMaterializer...
CVE-2026-68772
ZenML 0.94.6 contains a remote code execution vulnerability in the CloudpickleMaterializer component that allows attacke
A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote...
CVE-2026-20338
A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condi
A vulnerability in the XAR file format parser of ClamAV could allow an unauthenticated, remote...
CVE-2026-20348
A vulnerability in the XAR file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS c
A vulnerability in the Mach-O file format parser of ClamAV could allow an unauthenticated, remote...
CVE-2026-20347
A vulnerability in the Mach-O file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a Do
A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote...
CVE-2026-20339
A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a Do
A vulnerability in the PDF file format parser of ClamAV could allow an unauthenticated, remote...
CVE-2026-20346
A vulnerability in the PDF file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS c
Allocation of Resources Without Limits or Throttling vulnerability in DivvyPayHQ...
CVE-2026-67585
Allocation of Resources Without Limits or Throttling vulnerability in DivvyPayHQ absinthe_federation allows an unauthent
A vulnerability in the GPT file format parser of ClamAV could allow an unauthenticated, remote...
CVE-2026-20345
A vulnerability in the GPT file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS c
Nexus Repository 3 was found to be vulnerable to stored cross-site scripting (XSS). A user with...
CVE-2026-17596
Nexus Repository 3 was found to be vulnerable to stored cross-site scripting (XSS). A user with the nexus:blobstores:cre
An account holding the nexus:settings:update permission in Nexus Repository 3 (or the equivalent...
CVE-2026-17593
An account holding the nexus:settings:update permission in Nexus Repository 3 (or the equivalent nexus:settings permissi
A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote...
CVE-2026-20337
A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condi
Nexus Repository 3 contains a Server-Side Request Forgery (SSRF) vulnerability in the email...
CVE-2026-17597
Nexus Repository 3 contains a Server-Side Request Forgery (SSRF) vulnerability in the email configuration verification f
Sonatype Nexus Repository 3 did not properly filter internal configuration keys from user...
CVE-2026-17598
Sonatype Nexus Repository 3 did not properly filter internal configuration keys from user-supplied task properties when
Nexus Repository 3 contained an endpoint used to change the administrator account password during...
CVE-2026-17599
Nexus Repository 3 contained an endpoint used to change the administrator account password during initial onboarding. Th