Traefik before v2.11.58 and v3.7.14 SNI Check Bypass via HTTP/2 Scheme
CVE-2026-114635
Traefik before v2.11.58 and v3.7.14 contains an authentication bypass vulnerability in its SNI check, which is skipped w
#advisory
共收录 22948 条相关情报。
← 返回所有主题WWBN AVideo before 29.4.0 Blind SSRF via getHeaderContentTypeFromURL Redirect
CVE-2026-114634
WWBN AVideo before 29.4.0 contains a blind server-side request forgery vulnerability in getHeaderContentTypeFromURL() be
WWBN AVideo before 29.4.0 Incorrect Authorization via confirmDeleteUser.json.php
CVE-2026-114633
WWBN AVideo before 29.4.0 contains an incorrect authorization vulnerability that allows delegated Users Admin accounts t
CVE-2026-114722
CVE-2026-114722
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a CSS scoping bypass in HTML messages. rcube_utils
CVE-2026-114721
CVE-2026-114721
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 allows the disabled_actions configuration setting to be bypassed.
CVE-2026-114720
CVE-2026-114720
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an IMAP command injection vulnerability. A remote
CVE-2026-114719
CVE-2026-114719
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a CSRF validation bypass in the mark-as-junk actio
CVE-2026-114718
CVE-2026-114718
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a cross-site scripting vulnerability in the passwo
Advanced Search - Moderately critical - Access bypass - SA-CONTRIB-2026-118
CVE-2026-84910
Missing Authorization vulnerability in Drupal Advanced Search allows Forceful Browsing. This issue affects Advanced Sear
AI (Artificial Intelligence) - Moderately critical - Cross site scripting - SA-CONTRIB-2026-119
CVE-2026-84911
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artific
AI (Artificial Intelligence) - Moderately critical - Access Bypass - SA-CONTRIB-2026-120
CVE-2026-84912
Missing Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Forceful Browsing. This issue affects
AI translate - Moderately critical - Access Bypass - SA-CONTRIB-2026-121
CVE-2026-84913
Missing Authorization vulnerability in Drupal AI Translate allows Forceful Browsing. This issue affects AI Translate ver
Calculate Working Days - Critical - Access bypass - SA-CONTRIB-2026-122
CVE-2026-84914
Missing Authorization vulnerability in Drupal Calculate Working Days allows Forceful Browsing. This issue affects Calcul
Component blocks - Moderately critical - Cross site scripting - SA-CONTRIB-2026-123
CVE-2026-84915
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Component b
Islandora - Moderately critical - Access bypass - SA-CONTRIB-2026-126
CVE-2026-84916
Missing Authorization vulnerability in Drupal Islandora allows Forceful Browsing. This issue affects Islandora version
Jsonapi Role Access - Critical - Access bypass - SA-CONTRIB-2026-127
CVE-2026-84917
Incorrect Authorization vulnerability in Drupal Jsonapi Role Access allows Forceful Browsing. This issue affects Jsonap
Mailer Plus Log - Moderately critical - Access bypass - SA-CONTRIB-2026-128
CVE-2026-16648
Insertion of Sensitive Information into Log File vulnerability in Drupal Mailer Plus Log allows Remote Services with Sto
Media Library Importer - Moderately critical - Access bypass - SA-CONTRIB-2026-129
CVE-2026-81163
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Drupal Media Library Imp
Monobank payment API - Moderately critical - Access bypass - SA-CONTRIB-2026-130
CVE-2026-84918
Improper Verification of Cryptographic Signature vulnerability in Drupal Monobank payment API allows Signature Spoof. Th
PhotoSwipe - Responsive JavaScript Modal Image Gallery - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-131
CVE-2026-84919
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal PhotoSwipe