Project Browser - Critical - Cross-site request forgery - SA-CONTRIB-2026-178
CVE-2026-96374
Cross-Site Request Forgery (CSRF) vulnerability in Drupal Project Browser allows Cross Site Request Forgery. This issue
#advisory
共收录 22948 条相关情报。
← 返回所有主题Combined image style - Moderately critical - Improper access control - SA-CONTRIB-2026-188
CVE-2026-96377
Allocation of Resources Without Limits or Throttling vulnerability in Drupal Combined image style allows Excessive Alloc
CVE-2026-114717
CVE-2026-114717
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability when a messa
CVE-2026-114716
CVE-2026-114716
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability. rcmail_send
An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1 before 19.1.9, 19.2 before 19.2.9, 19.3 before 19.3.6, 19...
CVE-2026-110264
An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1
CVE-2026-114715
CVE-2026-114715
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an incorrect authorization vulnerability in the Mo
CVE-2026-114714
CVE-2026-114714
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a path traversal vulnerability in the squirrelmail
massCodeIO massCode Local HTTP Service index.ts information disclosure
CVE-2026-114574
A security vulnerability has been detected in massCodeIO massCode 5.10. Affected is an unknown function of the file src/
oretnom23 php-travel-agency-system update.php sql injection
CVE-2026-114441
A weakness has been identified in oretnom23 php-travel-agency-system. This issue affects some unknown processing of the
oretnom23 php-travel-agency-system delete.php sql injection
CVE-2026-114440
A vulnerability was identified in oretnom23 php-travel-agency-system. This affects an unknown part of the file admin/del
Unauthenticated Biscuit Credential Disclosure via GET /enroll/status in Google OSS Agent Mesh (SAM)
CVE-2026-103090
Missing Authentication for Critical Function (CWE-306) and Insufficiently Protected Credentials (CWE-522) in the control
oretnom23 php-travel-agency-system Session session.php missing authentication
CVE-2026-114439
A vulnerability was determined in oretnom23 php-travel-agency-system. Affected by this issue is some unknown functionali
Laravel TokenGuard authentication bypass through non-string API credentials
CVE-2026-114509
Laravel is a web application framework. Prior to 12.68.0 and 13.29.0, TokenGuard configured as a standard token-based AP
Laravel relationship inclusion can trigger unauthorized data destruction
CVE-2026-114508
Laravel is a web application framework. From 12.45.0 until 12.68.0 and 13.27.0, crafted relationship inclusion on a read
Robots::Validate versions from 0.4.3 before 0.4.10 for Perl report clients as imposter robots when User-Agent matcher state carries over from a previous request
CVE-2026-112921
Robots::Validate versions from 0.4.3 before 0.4.10 for Perl report clients as imposter robots when User-Agent matcher st
virtualenv: Builtin creation follows linked environment directories
CVE-2026-113716
## Summary The builtin creator accepts existing directory symlinks through ensure_dir() and writes environment files th
virtualenv: Deletion recovery can change a symlink target's mode
CVE-2026-113724
## Summary The deletion error handler obtains permission bits with lstat() but applies them through chmod(), which foll
virtualenv: Generated POSIX console launchers interpret destination paths as shell syntax
CVE-2026-113722
## Summary A destination path supplied to virtualenv can be interpreted as shell syntax by a generated POSIX console la
Pillow: Memory disclosure and segfault in libtiff encoder via crafted TIFF tags
CVE-2026-112902
``` ============================================================================ Memory disclosure and segfault in libti
Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO
CVE-2026-112393
``` ============================================================================ Heap buffer overflow in _tiffWriteProc