Croogo CMS Admin File Manager FileManager.php isEditable path traversal
CVE-2026-16219
A flaw has been found in Croogo CMS up to 4.0.7. This affects the function FileManager::isEditable of the file FileManag
#advisory
共收录 23779 条相关情报。
← 返回所有主题hunvreus devpush Storage Reset Failure storage.py reset_storage improper check or handling of exceptional conditions
CVE-2026-16218
A vulnerability was detected in hunvreus devpush up to 0.4.6. Affected by this issue is the function reset_storage of th
guohongze adminset Delivery Deployment Endpoint deli.py authorization
CVE-2026-16217
A security vulnerability has been detected in guohongze adminset up to 0.61. Affected by this vulnerability is an unknow
geex-arts django-jet OAuth cross-site request forgery
CVE-2026-16216
A weakness has been identified in geex-arts django-jet up to 1.0.8. Affected is an unknown function of the component OAu
geex-arts django-jet OAuth Credential Revoke authorization
CVE-2026-16215
A security flaw has been discovered in geex-arts django-jet up to 1.0.8. This impacts an unknown function of the compone
geex-arts django-jet Dashboard views.py authorization
CVE-2026-16214
A vulnerability was identified in geex-arts django-jet up to 1.0.8. This affects an unknown function of the file jet/das
Fantomas42 django-blog-zinnia Protected Entry Password entry_protection.py cleartext storage
CVE-2026-16213
A security flaw has been discovered in Fantomas42 django-blog-zinnia up to 0.20. Affected by this vulnerability is an un
awesto django-shop Purchase Stock inventory.py race condition
CVE-2026-16212
A vulnerability was identified in awesto django-shop up to 1.2.4. Affected is an unknown function of the file shop/model
Authentication bypass using an alternate path or channel in Microsoft Edge (Chromium-based)...
CVE-2026-57980
Authentication bypass using an alternate path or channel in Microsoft Edge (Chromium-based) allows an unauthorized attac
Exposure of private personal information to an unauthorized actor in Windows RDP allows an...
CVE-2026-56171
Exposure of private personal information to an unauthorized actor in Windows RDP allows an unauthorized attacker to disc
Skipper: Incomplete fix for CVE-2026-50197: an oversized body can bypass OPA deny-on-presence Rego policies
### Summary A wrong policy can be an open door. You have to check `input.attributes.request.http.truncated_body` in yo
Skipper's routesrv-no-auth component: All routesrv API Endpoints Lack Authentication
CVE-2026-54246
## Description The `routesrv` component exposes the full cluster route topology (Ingress/RouteGroup configurations, bac
CloudTAK: Authenticated full-read SSRF in the /api/esri* routes — user-controlled URL fetched with no IP-classification guard
CVE-2026-55177
# Authenticated full-read SSRF in CloudTAK `/api/esri*` routes — user-controlled URL fetched with no IP-classification g
cool-admin-java 8.0.0 has a SQL injection vulnerability in the order() method of CrudOption.java.
CVE-2026-52348
cool-admin-java 8.0.0 has a SQL injection vulnerability in the order() method of CrudOption.java.
An issue in MCMS v.6.1.1 allows a remote attacker to obtain sensitive information via the source...
CVE-2026-52203
An issue in MCMS v.6.1.1 allows a remote attacker to obtain sensitive information via the source parameter.
Buffer Overflow vulnerability in libjxl v.0.11.2 and before allows a local attacker to obtain...
CVE-2026-52584
Buffer Overflow vulnerability in libjxl v.0.11.2 and before allows a local attacker to obtain sensitive information via
IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to escalate privileges to...
CVE-2026-8635
IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to escalate privileges to superuser by directly manipul
IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability in...
CVE-2026-8476
IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability in the disk-based caching m
IBM Security Verify could allow a remote attacker to obtain sensitive information when a detailed...
CVE-2026-8861
IBM Security Verify could allow a remote attacker to obtain sensitive information when a detailed technical error messag
IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow an attacker to write arbitrary files...
CVE-2026-8859
IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow an attacker to write arbitrary files to unintended locations