GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the IMAP Server...
CVE-2026-48534
GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the IMAP Server configuration that all
#advisory
共收录 23779 条相关情报。
← 返回所有主题Logto does not enforce locally configured MFA during SSO authentication, allowing users to bypass...
CVE-2026-15616
Logto does not enforce locally configured MFA during SSO authentication, allowing users to bypass second-factor requirem
GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the File...
CVE-2026-48532
GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the File History Retention Policy conf
GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the default...
CVE-2026-48538
GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the default import settings configurat
GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the File...
CVE-2026-48537
GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the File Archive Assistant configurati
GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the...
CVE-2026-48539
GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the MailInsights scheduled report conf
GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the General...
CVE-2026-48536
GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the General Settings SMTP configuratio
Logto allows unverified email-based SSO account linking, enabling an attacker to register an...
CVE-2026-15611
Logto allows unverified email-based SSO account linking, enabling an attacker to register an identity at a permissive Id
CyberPanel through 1.9.1, fixed in commit b198460, contains an insecure direct object reference ...
CVE-2026-65917
CyberPanel through 1.9.1, fixed in commit b198460, contains an insecure direct object reference (IDOR) vulnerability in
Improper handling of insufficient permissions or privileges vulnerability in Tridium Niagara...
CVE-2026-11804
Improper handling of insufficient permissions or privileges vulnerability in Tridium Niagara Framework on Windows, Linux
CyberPanel through 1.9.1, fixed in commit b198460, contains a missing authorization vulnerability...
CVE-2026-65916
CyberPanel through 1.9.1, fixed in commit b198460, contains a missing authorization vulnerability in the cancelBackupCre
Logto bypasses OIDC nonce validation when the nonce claim is absent from the id_token, enabling...
CVE-2026-15612
Logto bypasses OIDC nonce validation when the nonce claim is absent from the id_token, enabling replay of authentication
Logto performs principal lookup without normalizing email and identifier strings, enabling...
CVE-2026-15617
Logto performs principal lookup without normalizing email and identifier strings, enabling principal collision and unaut
pypdf: Possible infinite loop for not terminated inline images (ASCII85 and ASCIIHex filter)
CVE-2026-59935
### Impact An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires parsi
pypdf: Possible infinite loop for not terminated inline images
CVE-2026-59936
### Impact An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires parsi
pypdf: Possible long runtimes for repeated malformed cross-reference entries
CVE-2026-59937
### Impact An attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires cross-re
pypdf: Possible large memory usage for wrong image dimensions
CVE-2026-59938
### Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires loa
PostCSS: Arbitrary file read and information disclosure via attacker-controlled sourceMappingURL in CSS comments
CVE-2026-45623
## Summary PostCSS's `PreviousMap` parses the `/*# sourceMappingURL=PATH */` comment from any CSS string passed to `pro
PHPSpreadsheet: XLS/OLE sector-chain self-loop causes memory exhaustion
CVE-2026-59933
## Summary PhpSpreadsheet's OLE reader follows sector chains from attacker-controlled XLS/OLE metadata without detectin
PHPSpreadsheet: Gnumeric reader unbounded gzip expansion causes memory exhaustion
CVE-2026-59932
## Summary PhpSpreadsheet's Gnumeric reader reads attacker-supplied `.gnumeric` files into memory and, when the file st