Bridge is affected by an Untrusted Search Path vulnerability that could result in arbitrary code...
CVE-2026-48395
Bridge is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the contex
#advisory
共收录 23636 条相关情报。
← 返回所有主题Bridge is affected by an Untrusted Search Path vulnerability that could result in arbitrary code...
CVE-2026-48391
Bridge is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the contex
Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code...
CVE-2026-48394
Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context
The Media Cleaner: Clean your WordPress! plugin for WordPress is vulnerable to Server-Side...
CVE-2026-4912
The Media Cleaner: Clean your WordPress! plugin for WordPress is vulnerable to Server-Side Request Forgery in all versio
Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code...
CVE-2026-48393
Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context
Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code...
CVE-2026-48392
Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context
Bridge is affected by an Incorrect Authorization vulnerability that could result in arbitrary...
CVE-2026-48396
Bridge is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the cont
Bridge is affected by an Incorrect Authorization vulnerability that could result in privilege...
CVE-2026-48390
Bridge is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker co
In firmware versions 2.7.7 and earlier, the Arris BGW210‑700 gateway fails to enforce any server...
CVE-2026-16771
In firmware versions 2.7.7 and earlier, the Arris BGW210‑700 gateway fails to enforce any server‑side authentication on
The terraform-mcp-server before version 1.1.0 is vulnerable to a cross-tenant credential reuse...
CVE-2026-16498
The terraform-mcp-server before version 1.1.0 is vulnerable to a cross-tenant credential reuse issue in the streamable-H
The WP Password Policy plugin for WordPress is vulnerable to Privilege Escalation in all versions...
CVE-2026-15992
The WP Password Policy plugin for WordPress is vulnerable to Privilege Escalation in all versions up to and including 3.
A flaw was found in CRIU's handling of restartable sequences (rseq) during checkpoint/restore. A...
CVE-2026-18107
A flaw was found in CRIU's handling of restartable sequences (rseq) during checkpoint/restore. A malicious process insid
The terraform-mcp-server before version 1.1.0 is vulnerable to an authorization bypass in the...
CVE-2026-16496
The terraform-mcp-server before version 1.1.0 is vulnerable to an authorization bypass in the streamable-HTTP stateful t
The terraform-mcp-server before version 1.1.0 is vulnerable to a server-side request forgery...
CVE-2026-14869
The terraform-mcp-server before version 1.1.0 is vulnerable to a server-side request forgery issue in the streamable-HTT
The Plugin Organizer plugin for WordPress is vulnerable to SQL Injection via the 'PO_plugin_path'...
CVE-2026-15304
The Plugin Organizer plugin for WordPress is vulnerable to SQL Injection via the 'PO_plugin_path' parameter in versions
datamodel-code-generator vulnerable to SSRF via --url: no host/IP validation, follows redirects
CVE-2026-54691
### Summary `datamodel-code-generator`'s built-in HTTP fetcher (`http.get_body`) issues an `httpx.GET` against any URL
datamodel-code-generator vulnerable to arbitrary local file read via XSD `schemaLocation` (`xs:include`/`xs:import`) path traversal, with no remote-ref gate
CVE-2026-55390
### Summary When generating models from an XML Schema (`--input-file-type xmlschema`), `datamodel-code-generator` resol
Microsoft Security Advisory CVE-2026-32203 – .NET and Visual Studio Denial of Service Vulnerability
CVE-2026-32203
## Executive Summary: Microsoft is releasing this security advisory to provide information about a vulnerability in Sy
NocoBase: Sensitive Data Exposure via SQL Blacklist Bypass
CVE-2026-52888
# Security Vulnerability Report: Sensitive Data Exposure via SQL Blacklist Bypass ## Summary The `checkSQL()` function
Cosmos-Server has an authentication bypass via forward-auth header smuggling on Constellation tunnel
CVE-2026-49446
### Summary The Constellation-tunnel bypass branch in `tokenMiddleware` at `src/proxy/routerGen.go:53-66` returns to th