An OS command injection vulnerability in the openmediavault-md plugin of OpenMediaVault v8.0.4-1...
CVE-2026-52102
An OS command injection vulnerability in the openmediavault-md plugin of OpenMediaVault v8.0.4-1 allows attackers to exe
#advisory
共收录 23530 条相关情报。
← 返回所有主题Shlink contains a blind SQL injection vulnerability that allows any authenticated API key holder...
CVE-2026-18737
Shlink contains a blind SQL injection vulnerability that allows any authenticated API key holder to inject arbitrary SQL
Apache NiFi 2.0.0 through 2.10.0 support creating, reading, and deleting Assets associated with...
CVE-2026-68980
Apache NiFi 2.0.0 through 2.10.0 support creating, reading, and deleting Assets associated with Parameter Contexts throu
Improper Neutralization of Input During Web Page Generation (XSS) vulnerability in lud oaskit...
CVE-2026-66296
Improper Neutralization of Input During Web Page Generation (XSS) vulnerability in lud oaskit allows reflected cross-sit
A security vulnerability has been detected in jina-ai reader up to...
CVE-2026-18647
A security vulnerability has been detected in jina-ai reader up to 1574bfd380d249c86c82db4dace0d9c8fe17e2b1. This issue
Apache NiFi 1.5.0 through 2.10.0 support gzip-encoded HTTP requests for the application REST API...
CVE-2026-68981
Apache NiFi 1.5.0 through 2.10.0 support gzip-encoded HTTP requests for the application REST API using a Jersey encoding
A weakness has been identified in danpros HTMLy up to 3.1.1. This vulnerability affects unknown...
CVE-2026-18646
A weakness has been identified in danpros HTMLy up to 3.1.1. This vulnerability affects unknown code of the file /system
ClearOS 7.9 contains an OS command injection vulnerability in the Log Viewer component that...
CVE-2026-67599
ClearOS 7.9 contains an OS command injection vulnerability in the Log Viewer component that allows authenticated attacke
Apache NiFI 1.10.0 through 2.10.0 provide a Parameter Context update REST API method that does...
CVE-2026-68979
Apache NiFI 1.10.0 through 2.10.0 provide a Parameter Context update REST API method that does not enforce authorization
Authorization handling for Parameter Context validation requests in Apache NiFi 1.10.0 through 2...
CVE-2026-62354
Authorization handling for Parameter Context validation requests in Apache NiFi 1.10.0 through 2.10.0 allows clients wit
Emlog Pro through 2.6.23 contains a disabled TLS certificate validation vulnerability in include...
CVE-2026-67598
Emlog Pro through 2.6.23 contains a disabled TLS certificate validation vulnerability in include/service/ai.php that all
The DuckDB AWS extension for DuckDB contains a security policy bypass vulnerability that allows...
CVE-2026-58139
The DuckDB AWS extension for DuckDB contains a security policy bypass vulnerability that allows any database user with S
A vulnerability was detected in Blix Email Blue Mail Calendar App 2.2.305. Impacted is the...
CVE-2026-18648
A vulnerability was detected in Blix Email Blue Mail Calendar App 2.2.305. Impacted is the function FileDirectory.getDat
A security flaw has been discovered in danpros HTMLy up to 3.1.1. This affects the function...
CVE-2026-18645
A security flaw has been discovered in danpros HTMLy up to 3.1.1. This affects the function add_content of the file /sys
A race condition exists in the cloud-based Omada device adoption process when an attacker may be...
CVE-2025-15630
A race condition exists in the cloud-based Omada device adoption process when an attacker may be able to interact with t
A vulnerability was found in GL-iNet GL-MT3000 up to 4.4.5. Impacted is the function s2s...
CVE-2026-18614
A vulnerability was found in GL-iNet GL-MT3000 up to 4.4.5. Impacted is the function s2s.enable_echo_server of the file
osTicket 1.18.3 generates API keys using a predictable construction based on MD5 hashing. The use...
CVE-2026-38447
osTicket 1.18.3 generates API keys using a predictable construction based on MD5 hashing. The use of MD5, combined with
A vulnerability was determined in GL-iNet GL-MT3000 up to 4.4.5. The affected element is the...
CVE-2026-18615
A vulnerability was determined in GL-iNet GL-MT3000 up to 4.4.5. The affected element is the function wg-server.generate
A vulnerability was identified in GL-iNet GL-MT3000 up to 4.4.5. The impacted element is the...
CVE-2026-18616
A vulnerability was identified in GL-iNet GL-MT3000 up to 4.4.5. The impacted element is the function server.set_peer of
A vulnerability was determined in Sangfor Operation and Maintenance Security Management System up...
CVE-2026-18641
A vulnerability was determined in Sangfor Operation and Maintenance Security Management System up to 3.0.13. Affected by