A security vulnerability has been detected in Tenda AC19 16.03.10.07. The impacted element is the...
CVE-2026-113744
A security vulnerability has been detected in Tenda AC19 16.03.10.07. The impacted element is the function formSetFirewa
#advisory
共收录 22948 条相关情报。
← 返回所有主题A weakness has been identified in Tenstorrent tt-metal up to 0.80.0. The affected element is the...
CVE-2026-113743
A weakness has been identified in Tenstorrent tt-metal up to 0.80.0. The affected element is the function load_hf_state_
The Duplicator and Duplicator Pro plugins for WordPress are vulnerable to PHP Object Injection in...
CVE-2026-82814
The Duplicator and Duplicator Pro plugins for WordPress are vulnerable to PHP Object Injection in all versions up to, an
Best Practice Software Bp Premier before 1.14.1.1128 uses a hardcoded Microsoft SQL Server...
CVE-2026-114119
Best Practice Software Bp Premier before 1.14.1.1128 uses a hardcoded Microsoft SQL Server administrative password that
Vyper 0.3.8 through 0.5.0b1 contains an optimizer miscompilation in which (msg.value | K) or (len...
CVE-2026-114117
Vyper 0.3.8 through 0.5.0b1 contains an optimizer miscompilation in which (msg.value | K) or (len(msg.data) | K), where
Deserialization of untrusted data in Mandiant FLARE capa releases before 10.0.0 allows arbitrary...
CVE-2026-114197
Deserialization of untrusted data in Mandiant FLARE capa releases before 10.0.0 allows arbitrary code execution when a c
Vyper 0.1.0b1 before 0.1.0b12, 0.1.0b14, and 0.4.1 through 0.5.0b1 mix character-based line...
CVE-2026-114114
Vyper 0.1.0b1 before 0.1.0b12, 0.1.0b14, and 0.4.1 through 0.5.0b1 mix character-based line offsets with Python's UTF-8
Vyper 0.3.4 through 0.5.0b1 computes the remaining blueprint size in create_from_blueprint by...
CVE-2026-114118
Vyper 0.3.4 through 0.5.0b1 computes the remaining blueprint size in create_from_blueprint by uint256 subtraction withou
Vyper 0.3.8 through 0.5.0b1 contains a compiler miscompilation vulnerability in parse_IfExp that...
CVE-2026-114115
Vyper 0.3.8 through 0.5.0b1 contains a compiler miscompilation vulnerability in parse_IfExp that reads nested arrays wit
Deserialization of untrusted data in Mandiant FLARE floss releases before 3.2.0 allows arbitrary...
CVE-2026-114198
Deserialization of untrusted data in Mandiant FLARE floss releases before 3.2.0 allows arbitrary code execution when a c
Vyper 0.1.0b1 before 0.1.0b17 and 0.4.1 through 0.5.0b1 builds its source-line table with str...
CVE-2026-114116
Vyper 0.1.0b1 before 0.1.0b17 and 0.4.1 through 0.5.0b1 builds its source-line table with str.splitlines(), which treats
HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains a missing authentication vulnerability that...
CVE-2026-114108
HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains a missing authentication vulnerability that allows unauthenticated a
uv before 0.11.15 contains a path traversal vulnerability that allows malicious wheels to write...
CVE-2026-114109
uv before 0.11.15 contains a path traversal vulnerability that allows malicious wheels to write files outside the script
Astral uv before 0.11.6 contains a path traversal vulnerability that allows attackers to delete...
CVE-2026-114110
Astral uv before 0.11.6 contains a path traversal vulnerability that allows attackers to delete arbitrary files by suppl
sharp before 0.35.5 bundles a librsvg dependency affected by a memory-related vulnerability (CVE...
CVE-2026-114111
sharp before 0.35.5 bundles a librsvg dependency affected by a memory-related vulnerability (CVE-2026-96889) that, under
Sharp before 0.35.4 bundles a vulnerable libheif dependency that allows attackers to achieve...
CVE-2026-114112
Sharp before 0.35.4 bundles a vulnerable libheif dependency that allows attackers to achieve possible remote code execut
Sharp before 0.35.0 bundles a version of libvips affected by multiple vulnerabilities (CVE-2026...
CVE-2026-114113
Sharp before 0.35.0 bundles a version of libvips affected by multiple vulnerabilities (CVE-2026-33327, CVE-2026-33328, C
HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains an indirect prompt injection vulnerability...
CVE-2026-114107
HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains an indirect prompt injection vulnerability that allows remote attack
Coraza from 3.0.0 before 3.8.1 has a JSON body processor that flattens nested properties into dot...
CVE-2026-114099
Coraza from 3.0.0 before 3.8.1 has a JSON body processor that flattens nested properties into dot-separated ARGS_POST na
Coraza from 3.0.4 before 3.8.1 contains a request body inspection bypass because request-body...
CVE-2026-114100
Coraza from 3.0.4 before 3.8.1 contains a request body inspection bypass because request-body processor selection compar