Incorrect access control in NASA cFS v7.0.1 allows attackers to arbitrarily remove low-index...
CVE-2026-67975
Incorrect access control in NASA cFS v7.0.1 allows attackers to arbitrarily remove low-index subscriptions and add new s
#advisory
共收录 23530 条相关情报。
← 返回所有主题A parser boundary flaw in the Software Bus Network (SBN) application's peer subscription message...
CVE-2026-67974
A parser boundary flaw in the Software Bus Network (SBN) application's peer subscription message handling in NASA cFS v7
An integer overflow in the Svc::FileDownlink::SendPartial component of fprime framework v4.2.2...
CVE-2026-67977
An integer overflow in the Svc::FileDownlink::SendPartial component of fprime framework v4.2.2 allows attackers to cause
Incorrect access control in the DS_SetDestPathCmd() component of NASA cFS v7.0.1 allows attackers...
CVE-2026-67970
Incorrect access control in the DS_SetDestPathCmd() component of NASA cFS v7.0.1 allows attackers to access sensitive co
An issue in the HS_MonitorApplications() component of NASA cFS v7.0.1 allows attackers to force...
CVE-2026-67969
An issue in the HS_MonitorApplications() component of NASA cFS v7.0.1 allows attackers to force the processor to reset v
A security flaw has been discovered in OpenAkita up to 1.27.12. This vulnerability affects...
CVE-2026-18682
A security flaw has been discovered in OpenAkita up to 1.27.12. This vulnerability affects unknown code of the file /api
An issue in the CFDP receive path of NASA cFS v7.0.1 allows attackers to cause a Denial of...
CVE-2026-67973
An issue in the CFDP receive path of NASA cFS v7.0.1 allows attackers to cause a Denial of Service (DoS) via replaying f
Camaleon CMS through 2.9.2, fixed in commit 88ab703, contains a missing authorization...
CVE-2026-67616
Camaleon CMS through 2.9.2, fixed in commit 88ab703, contains a missing authorization vulnerability on the drafts endpoi
Microweber CMS through 2.0.20 contains a stored cross-site scripting vulnerability in the content...
CVE-2026-67617
Microweber CMS through 2.0.20 contains a stored cross-site scripting vulnerability in the content tagging system that al
The Ref::SignalGen component of fprime framework v4.2.2 does not validate the safety of user...
CVE-2026-67976
The Ref::SignalGen component of fprime framework v4.2.2 does not validate the safety of user-controlled parameters, allo
OPNsense before 26.1.9 contains a stored cross-site scripting vulnerability that allows...
CVE-2026-49131
OPNsense before 26.1.9 contains a stored cross-site scripting vulnerability that allows authenticated attackers with fir
Emlog CMS <= 2.6.14 contains a stored cross-site scripting (XSS) vulnerability in the article...
CVE-2026-52520
Emlog CMS <= 2.6.14 contains a stored cross-site scripting (XSS) vulnerability in the article publishing module (/admin/
Shlink contains a server-side request forgery vulnerability that allows authenticated API key...
CVE-2026-18736
Shlink contains a server-side request forgery vulnerability that allows authenticated API key holders to cause the serve
OPNsense before 26.1.9 contains a stored cross-site scripting vulnerability that allows...
CVE-2026-49132
OPNsense before 26.1.9 contains a stored cross-site scripting vulnerability that allows authenticated attackers to injec
A SQL injection vulnerability in Z-BlogPHP 1.7.5 allows authenticated attackers to execute...
CVE-2026-52521
A SQL injection vulnerability in Z-BlogPHP 1.7.5 allows authenticated attackers to execute arbitrary SQL commands via th
FirmaCheck for Windows before 1.3.16 contains a dll hijacking vulnerability that allows local...
CVE-2026-41447
FirmaCheck for Windows before 1.3.16 contains a dll hijacking vulnerability that allows local attackers to execute arbit
The "s init" command in Serverless-Devs @serverless-devs/s <= 3.1.11 passes unsanitized user...
CVE-2026-51190
The "s init" command in Serverless-Devs @serverless-devs/s <= 3.1.11 passes unsanitized user input to child_process.spaw
An issue in the CF_CFDP_RecvMd() component of NASA cFS v7.0.1 allows attackers to contrl where...
CVE-2026-67972
An issue in the CF_CFDP_RecvMd() component of NASA cFS v7.0.1 allows attackers to contrl where received content and data
SQL injection vulnerability in Fastadmin v.1.6.1.20250430 allows an attacker to exectue arbitrary...
CVE-2026-51775
SQL injection vulnerability in Fastadmin v.1.6.1.20250430 allows an attacker to exectue arbitrary code via the applicati
Shlink versions 5.0.0 through 5.1.5 contain a CSV formula injection vulnerability that allows...
CVE-2026-18738
Shlink versions 5.0.0 through 5.1.5 contain a CSV formula injection vulnerability that allows unauthenticated remote att