Server-side request forgery (ssrf) in Azure AI Search allows an authorized attacker to elevate...
CVE-2026-56167
Server-side request forgery (ssrf) in Azure AI Search allows an authorized attacker to elevate privileges over a network
#advisory
共收录 23779 条相关情报。
← 返回所有主题Exposure of sensitive information to an unauthorized actor in Microsoft Graph allows an...
CVE-2026-49159
Exposure of sensitive information to an unauthorized actor in Microsoft Graph allows an authorized attacker to disclose
Improper access control in Azure API Management (APIM) allows an authorized attacker to execute...
CVE-2026-35425
Improper access control in Azure API Management (APIM) allows an authorized attacker to execute code over a network.
Pronetiqs IntraVUE versions 3.2.1a14 and prior have an unintended proxy or intermediary...
CVE-2026-42933
Pronetiqs IntraVUE versions 3.2.1a14 and prior have an unintended proxy or intermediary vulnerability which could allow
Pronetiqs IntraVUE versions 3.2.1a14 and prior have an exposure of sensitive system information...
CVE-2026-44955
Pronetiqs IntraVUE versions 3.2.1a14 and prior have an exposure of sensitive system information to an unauthorized contr
A vulnerability was detected in Ne-Lexa php-zip up to 4.0.2. This affects the function ZipFile:...
CVE-2026-16767
A vulnerability was detected in Ne-Lexa php-zip up to 4.0.2. This affects the function ZipFile::extractTo of the file sr
Skipper contains an incomplete fix for CVE-2026-50197 in which oversized request bodies bypass...
CVE-2026-65604
Skipper contains an incomplete fix for CVE-2026-50197 in which oversized request bodies bypass Open Policy Agent (OPA) d
Pronetiqs IntraVUE versions 3.2.1a14 and prior have an exposure of sensitive system information...
CVE-2026-28698
Pronetiqs IntraVUE versions 3.2.1a14 and prior have an exposure of sensitive system information to an unauthorized contr
Microweber CMS through 2.0.20 contains a path traversal vulnerability in the static file...
CVE-2026-65694
Microweber CMS through 2.0.20 contains a path traversal vulnerability in the static file controller that allows unauthen
Pronetiqs IntraVUE Versions 3.2.1a14 and prior have a plaintext storage of a password...
CVE-2026-40430
Pronetiqs IntraVUE Versions 3.2.1a14 and prior have a plaintext storage of a password vulnerability that could expose cl
Pronetiqs IntraVUE versions 3.2.1a14 and prior have an inadequate encryption strength...
CVE-2026-50044
Pronetiqs IntraVUE versions 3.2.1a14 and prior have an inadequate encryption strength vulnerability which could allow an
9router 0.4.59 (fixed in 0.4.60) contains a chain of vulnerabilities: a hardcoded default...
CVE-2026-63732
9router 0.4.59 (fixed in 0.4.60) contains a chain of vulnerabilities: a hardcoded default password (123456) that authent
9Router before 0.4.72 contains a server-side request forgery (SSRF) vulnerability in the /v1/web...
CVE-2026-63313
9Router before 0.4.72 contains a server-side request forgery (SSRF) vulnerability in the /v1/web/fetch endpoint. The end
cal.com (calcom repository, later renamed cal.diy) is affected by a repository takeover...
CVE-2024-58354
cal.com (calcom repository, later renamed cal.diy) is affected by a repository takeover vulnerability in its GitHub Acti
Cal.com (calcom/cal.diy) before 5.9.9 is vulnerable to unauthenticated remote code execution...
CVE-2025-71389
Cal.com (calcom/cal.diy) before 5.9.9 is vulnerable to unauthenticated remote code execution because it bundles a versio
Out of bounds write in Codecs in Google Chrome prior to 150.0.7871.186 allowed a remote attacker...
CVE-2026-16807
Out of bounds write in Codecs in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to potentially perform
Use after free in Blink in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to...
CVE-2026-16805
Use after free in Blink in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to execute arbitrary code ins
Cal.com (repository calcom/cal.diy) in versions <= 4.7.15 is vulnerable to cross-site scripting ...
CVE-2024-58353
Cal.com (repository calcom/cal.diy) in versions ). Booking question (form field) labels are rendered via React's dangero
A vulnerability was determined in CodeAstro Online Classroom 1.0. Affected by this issue is some...
CVE-2026-16765
A vulnerability was determined in CodeAstro Online Classroom 1.0. Affected by this issue is some unknown functionality o
Use after free in WebMCP in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to...
CVE-2026-16806
Use after free in WebMCP in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to execute arbitrary code in