A security flaw has been discovered in MZ Automation libiec61850 up to 1.6.1. This affects the...
CVE-2026-19206
A security flaw has been discovered in MZ Automation libiec61850 up to 1.6.1. This affects the function SVReceiver_stopT
#advisory
共收录 23530 条相关情报。
← 返回所有主题DOMPurify: IN_PLACE hook removal leaves a detached subtree executable, causing XSS
### Summary During `IN_PLACE` sanitization, a hook that removes an element can leave that element's detached descendant
Frappe: Field-level permission bypass via Document Follow
CVE-2026-66059
Frappe is a full-stack web application framework. Prior to 16.20.0 and 15.112.0, a field-level permissions bypass expose
Smarty Security stream restriction bypass through stream: resource
CVE-2026-62996
`smarty/smarty` version `5.8.0` can read local files through PHP stream wrappers even when Smarty Security is enabled an
Smarty: Symlink path traversal out of trusted directories
CVE-2026-62992
When Smarty's Security policy is enabled, secure_dir (and the configured template/trusted directories) restrict which lo
Craft CMS: Passkey login accepts replayed WebAuthn assertions
Craft CMS passkey login accepts WebAuthn requestOptions from the unauthenticated login request body and does not persist
【实时互动-教育版】产品退市公告
【实时互动-教育版】产品退市公告
【腾讯云认证】升级及认证发布公告
【腾讯云认证】升级及认证发布公告
【智能体开发平台 ADP】关于服务等级协议与隐私政策更新公告
【智能体开发平台 ADP】关于服务等级协议与隐私政策更新公告
Software installed and run as a non-privileged user may conduct improper GPU system calls to...
CVE-2026-49746
Software installed and run as a non-privileged user may conduct improper GPU system calls to cause OOB read kernel memor
A security flaw has been discovered in Power Sofware PowerISO 9.3.0.0. Affected by this issue is...
CVE-2026-19189
A security flaw has been discovered in Power Sofware PowerISO 9.3.0.0. Affected by this issue is some unknown functional
Kernel software from a non-secure operating system on a platform with Trusted Execution...
CVE-2026-45198
Kernel software from a non-secure operating system on a platform with Trusted Execution Environment support, may cause G
Software installed and run as a non-privileged user may conduct improper GPU system calls to...
CVE-2026-45204
Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger OOB access and kern
Exposed dangerous method or function in Azure Confidential Ledger allows an authorized attacker...
CVE-2026-68823
Exposed dangerous method or function in Azure Confidential Ledger allows an authorized attacker to execute code over a n
Missing authorization in Microsoft Teams allows an unauthorized attacker to elevate privileges...
CVE-2026-65667
Missing authorization in Microsoft Teams allows an unauthorized attacker to elevate privileges over a network.
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an unauthorized attacker...
CVE-2026-70332
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing ov
Missing authentication for critical function in Microsoft Planetary Computer Pro allows an...
CVE-2026-63508
Missing authentication for critical function in Microsoft Planetary Computer Pro allows an unauthorized attacker to elev
Improper access control in Microsoft Purview eDiscovery allows an authorized attacker to elevate...
CVE-2026-65668
Improper access control in Microsoft Purview eDiscovery allows an authorized attacker to elevate privileges over a netwo
Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over...
CVE-2026-62830
Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network.
Improper authentication in Microsoft Teams allows an authorized attacker to elevate privileges...
CVE-2026-62896
Improper authentication in Microsoft Teams allows an authorized attacker to elevate privileges over a network.