h2oGPT through 0.2.1 contains a path traversal vulnerability in the OpenAI-compatible files API...
CVE-2026-65700
h2oGPT through 0.2.1 contains a path traversal vulnerability in the OpenAI-compatible files API that allows unauthentica
#advisory
共收录 23779 条相关情报。
← 返回所有主题SoftVC VITS Singing Voice Conversion through commit 730930d contains a path traversal...
CVE-2026-65701
SoftVC VITS Singing Voice Conversion through commit 730930d contains a path traversal vulnerability in the full-song inf
Zohocorp ManageEngine ADAudit Plus versions before 8606 are affected by Unauthenticated Remote...
CVE-2026-6516
Zohocorp ManageEngine ADAudit Plus versions before 8606 are affected by Unauthenticated Remote code execution due to the
Vanna through 2.0.2 contains a path traversal vulnerability in the FileSystemConversationStore...
CVE-2026-65702
Vanna through 2.0.2 contains a path traversal vulnerability in the FileSystemConversationStore persistence integration t
PyTorch torchvision through 0.28.0, fixed in commit 4e05dc2, contains an out-of-bounds heap read...
CVE-2026-65918
PyTorch torchvision through 0.28.0, fixed in commit 4e05dc2, contains an out-of-bounds heap read vulnerability in the GI
AgentGPT through 1.0.0 contains an authorization bypass through user-controlled key vulnerability...
CVE-2026-65699
AgentGPT through 1.0.0 contains an authorization bypass through user-controlled key vulnerability that allows authentica
Joomla Extension - phoca.cz - Reflected XSS vulnerability in Phoca Maps 1.0.0-6.0.9 - Improper...
CVE-2026-65763
Joomla Extension - phoca.cz - Reflected XSS vulnerability in Phoca Maps 1.0.0-6.0.9 - Improper validation of user inputs
Diffusers through 0.39.0, fixed in commit cee298c, contains a path traversal vulnerability in the...
CVE-2026-65920
Diffusers through 0.39.0, fixed in commit cee298c, contains a path traversal vulnerability in the _get_checkpoint_shard_
Joomla Extension - phoca.cz - Reflected XSS vulnerability in Phoca Guestbook 1.0.0-6.1.0 -...
CVE-2026-65762
Joomla Extension - phoca.cz - Reflected XSS vulnerability in Phoca Guestbook 1.0.0-6.1.0 - Improper validation of user i
Meshery before 1.0.57 contains an unauthenticated arbitrary file read vulnerability in the /api...
CVE-2026-65919
Meshery before 1.0.57 contains an unauthenticated arbitrary file read vulnerability in the /api/system/fileView and /api
Void through 1.3.4 contains a path traversal vulnerability in the AI agent file-reading tools...
CVE-2026-65698
Void through 1.3.4 contains a path traversal vulnerability in the AI agent file-reading tools that allows network-adjace
Overseerr through 1.35.0 contains an authorization bypass through user-controlled key...
CVE-2026-65696
Overseerr through 1.35.0 contains an authorization bypass through user-controlled key vulnerability in the push subscrip
Joomla Extension - joomshaper.com - Unauthenticated SQL injection in Easy Store extension 1.0.0-2...
CVE-2026-65761
Joomla Extension - joomshaper.com - Unauthenticated SQL injection in Easy Store extension 1.0.0-2.0.1 - Improper validat
Proxygen lacked a generalized slow-consumer detection mechanism in its core HTTP session layer. A...
CVE-2026-44909
Proxygen lacked a generalized slow-consumer detection mechanism in its core HTTP session layer. A remote, unauthenticate
Office-Word-MCP-Server through 1.1.11 contains a path traversal vulnerability in its document...
CVE-2026-65695
Office-Word-MCP-Server through 1.1.11 contains a path traversal vulnerability in its document tools that allows attacker
Joomla Extension - joomshaper.com - cross-customer order and personal information disclosure in...
CVE-2026-65760
Joomla Extension - joomshaper.com - cross-customer order and personal information disclosure in Easy Store extension 1.0
A flaw was found in gdk-pixbuf. When parsing a specially crafted ICO file with pixel values that...
CVE-2026-16768
A flaw was found in gdk-pixbuf. When parsing a specially crafted ICO file with pixel values that exceed the defined pale
Joomla Extension - joomshaper.com - unauthenticated payment/order forgery in Easy Store extension...
CVE-2026-65759
Joomla Extension - joomshaper.com - unauthenticated payment/order forgery in Easy Store extension 1.0.0-2.0.1 - Critical
Fathom Lite through 1.3.1 contains a stored cross-site scripting vulnerability in the analytics...
CVE-2026-65697
Fathom Lite through 1.3.1 contains a stored cross-site scripting vulnerability in the analytics collection endpoint that
GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the Call Home...
CVE-2026-48535
GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the Call Home proxy server configurati