Cal.com (calcom/cal.diy) versions through 4.7.15 contain a stored cross-site scripting...
CVE-2024-58355
Cal.com (calcom/cal.diy) versions through 4.7.15 contain a stored cross-site scripting vulnerability. The single booking
#advisory
共收录 23779 条相关情报。
← 返回所有主题A vulnerability was identified in localstack serverless-localstack up to 1.4.0. The affected...
CVE-2026-16763
A vulnerability was identified in localstack serverless-localstack up to 1.4.0. The affected element is an unknown funct
A vulnerability was identified in OWASP DefectDojo 2.59.0. This issue affects the function...
CVE-2026-16764
A vulnerability was identified in OWASP DefectDojo 2.59.0. This issue affects the function UserSerializer of the file do
Use after free in Input in Google Chrome prior to 150.0.7871.186 allowed a remote attacker who...
CVE-2026-16804
Use after free in Input in Google Chrome prior to 150.0.7871.186 allowed a remote attacker who had compromised the rende
A bug in the entropy initialization for SiWx917 causes the DRBG to use a predictable seed. As...
CVE-2026-6924
A bug in the entropy initialization for SiWx917 causes the DRBG to use a predictable seed. As such, all random numbers g
The affected product is vulnerable to a stack-based buffer overflow, which may allow an attacker...
CVE-2026-50039
The affected product is vulnerable to a stack-based buffer overflow, which may allow an attacker to cause a memory corru
A NULL pointer dereference in the L2 GOOSE and R-GOOSE shared parser, which may allow a network...
CVE-2026-50103
A NULL pointer dereference in the L2 GOOSE and R-GOOSE shared parser, which may allow a network-adjacent attacker to cra
An issue in xiandafu beetl 3.20.2 allows a remote attacker to execute arbitrary code via the type...
CVE-2026-52439
An issue in xiandafu beetl 3.20.2 allows a remote attacker to execute arbitrary code via the type.new function and the p
The affected product is vulnerable to a heap-based buffer overflow via a crafted MMS Initiate...
CVE-2026-49035
The affected product is vulnerable to a heap-based buffer overflow via a crafted MMS Initiate request. Remote code execu
A NULL pointer dereference in the MMS Write Named Variable List handler, which may allow a...
CVE-2026-50032
A NULL pointer dereference in the MMS Write Named Variable List handler, which may allow a network adjacent attacker to
The Appriss Insights (Equifax) Victim Information Notification Exchange (VINE) applications allow...
CVE-2026-63359
The Appriss Insights (Equifax) Victim Information Notification Exchange (VINE) applications allow an unauthenticated att
The SAML Single Sign On – SSO Login plugin for WordPress is vulnerable to Authentication Bypass...
CVE-2026-15981
The SAML Single Sign On – SSO Login plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, a
FFmpeg versions 2.7 through 8.1.2 contain an out-of-bounds write vulnerability in the TDSC video...
CVE-2026-65703
FFmpeg versions 2.7 through 8.1.2 contain an out-of-bounds write vulnerability in the TDSC video decoder that allows rem
Victor SSRF vulnerability in Johnson Controls CCure 9000 and victor application server allows...
CVE-2026-21653
Victor SSRF vulnerability in Johnson Controls CCure 9000 and victor application server allows Server Side Request Forger
Insufficient session expiration vulnerability in Progress MOVEit Transfer. This issue affects...
CVE-2026-15967
Insufficient session expiration vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2
An unauthenticated attacker could trigger an Out of Memory condition to crash the Java process...
CVE-2026-12353
An unauthenticated attacker could trigger an Out of Memory condition to crash the Java process for RHCS by repeatedly se
A non-global organization admin in one tenant can bypass tenant boundaries to delete, create, or...
CVE-2026-15630
A non-global organization admin in one tenant can bypass tenant boundaries to delete, create, or modify resources in any
Knot DNS before 3.4.10 and 3.5.x before 3.5.4 contains a vulnerability in mod-onlinesign where...
CVE-2026-39155
Knot DNS before 3.4.10 and 3.5.x before 3.5.4 contains a vulnerability in mod-onlinesign where the next NSEC owner name
Improper neutralization of input during web page generation ('cross-site scripting')...
CVE-2026-15968
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Progress MOVEit Tr
FFmpeg versions 3.4 through 8.1.2 contain an out-of-bounds write vulnerability in the...
CVE-2026-65705
FFmpeg versions 3.4 through 8.1.2 contain an out-of-bounds write vulnerability in the vf_floodfill video filter that all