An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. Certain API...
CVE-2021-32088
An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. Certain API endpoints contain a rate-
#advisory
共收录 23636 条相关情报。
← 返回所有主题The vulnerability involves an Insecure Direct Object Reference (IDOR) in the ...
CVE-2026-59240
The vulnerability involves an Insecure Direct Object Reference (IDOR) in the `DeleteNotificationController::delete()` me
An issue in the redirect parameter in Milk admin <=0.9.8 allows remote attackers to redirect...
CVE-2026-51564
An issue in the redirect parameter in Milk admin <=0.9.8 allows remote attackers to redirect users to arbitrary external
Cross-site scripting (XSS) vulnerability in Modules/Docs/DocsController.php in Milk admin <=0.9.8...
CVE-2026-51565
Cross-site scripting (XSS) vulnerability in Modules/Docs/DocsController.php in Milk admin <=0.9.8 allows remote attacker
Unauthenticated Server Side Request Forgery (SSRF) in Simple Link Directory Pro <= 15.0.6 versions.
CVE-2026-61953
Unauthenticated Server Side Request Forgery (SSRF) in Simple Link Directory Pro <= 15.0.6 versions.
SQL injection vulnerability in Dede CMS v.5.7.118 allows a remote attacker to obtain sensitive...
CVE-2026-51077
SQL injection vulnerability in Dede CMS v.5.7.118 allows a remote attacker to obtain sensitive information via the sqlqu
An issue in Dede CMS v.5.7.118 allows a remote attacker to obtain sensitive information via the...
CVE-2026-51078
An issue in Dede CMS v.5.7.118 allows a remote attacker to obtain sensitive information via the str parameter of the fil
Unauthenticated Cross Site Scripting (XSS) in miniorange otp verification <= 5.5.1 versions.
CVE-2026-61957
Unauthenticated Cross Site Scripting (XSS) in miniorange otp verification <= 5.5.1 versions.
An issue was discovered in OpenSBI 1.3 allowing attackers to cause a denial of service via...
CVE-2025-63913
An issue was discovered in OpenSBI 1.3 allowing attackers to cause a denial of service via crafted request to the SBI fu
An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. If a customer...
CVE-2021-32084
An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. If a customer restricts access to the
An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. It installs...
CVE-2021-32085
An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. It installs with default user credent
An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. It installs...
CVE-2021-32087
An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. It installs with default user credent
An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. It uses a...
CVE-2021-32086
An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. It uses a hardcoded symmetric encrypt
React Router: Open redirect via backslash in <Link> and useNavigate (CVE-2025-68470 bypass)
CVE-2026-53669
React Router is a router for React. Versions 6.0.0 through 7.17.0 are vulnerable to Open Redirtect through use of backsl
React Router: Unauthenticated Denial of Service via Inefficient Route Matching
CVE-2026-55685
React Router is a router for React. In versions 7.0.0 through 7.17.0, the manifest endpoint could be accessed via unauth
React Router: Open redirect can lead to XSS
CVE-2026-53668
React Router is a router for React. In versions 6.30.2 through 6.30.4 and 7.9.6 through 7.12.0, applications that allow
IDOR in Prospero Flow CRM allows deletion of other users' notifications
CVE-2026-59240
The vulnerability involves an Insecure Direct Object Reference (IDOR) in the `DeleteNotificationController::delete()` me
Pivotick contains a cross-site scripting vulnerability in the sidebar property-list component....
CVE-2026-66825
Pivotick contains a cross-site scripting vulnerability in the sidebar property-list component. Values associated with li
A stored cross-site scripting vulnerability existed in the capture tree visualization page. The...
CVE-2026-66824
A stored cross-site scripting vulnerability existed in the capture tree visualization page. The application embedded the
A use-after-free issue was addressed with improved memory management. This issue is fixed in...
CVE-2026-64783
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6, iOS 26.6 and i