Summary Before version 0.9.0, Pingora accepted HTTP/2 requests whose Host header differed from...
CVE-2026-105298
Summary Before version 0.9.0, Pingora accepted HTTP/2 requests whose Host header differed from the :authority pseudo-
#advisory
共收录 22969 条相关情报。
← 返回所有主题Ning compress-lzf before 1.2.0 contains an out-of-bounds memory access vulnerability in the sun...
CVE-2026-109395
Ning compress-lzf before 1.2.0 contains an out-of-bounds memory access vulnerability in the sun.misc.Unsafe based Unsafe
LangAlpha through 2026.09.07 contains an improper isolation vulnerability that places all tenants...
CVE-2026-109441
LangAlpha through 2026.09.07 contains an improper isolation vulnerability that places all tenants' sandbox containers on
LangAlpha through 2026.09.07 contains an indirect prompt injection vulnerability that allows...
CVE-2026-109440
LangAlpha through 2026.09.07 contains an indirect prompt injection vulnerability that allows remote attackers to execute
IBM Sterling Connect Direct for Unix 6.3.0.0 through 6.3.0.7 and 6.4.0.0 through 6.4.0.6 could...
CVE-2026-105453
IBM Sterling Connect Direct for Unix 6.3.0.0 through 6.3.0.7 and 6.4.0.0 through 6.4.0.6 could allow a local attacker to
IBM ContextForge MCP Gateway 0.1.0 through 1.0.5 is vulnerable to a server-side request Forgery ...
CVE-2026-8355
IBM ContextForge MCP Gateway 0.1.0 through 1.0.5 is vulnerable to a server-side request Forgery (SSRF) that allows authe
IBM Verify Identity Access 11.0.3.1 and IBM Security Verify Access 10.0.9.3 Appliance could allow...
CVE-2026-109126
IBM Verify Identity Access 11.0.3.1 and IBM Security Verify Access 10.0.9.3 Appliance could allow a physically proximate
IBM Langflow OSS 1.0.0 through 1.12.4 contains three message endpoints that perform no ownership...
CVE-2026-107366
IBM Langflow OSS 1.0.0 through 1.12.4 contains three message endpoints that perform no ownership verification. Any authe
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker...
CVE-2026-107400
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary co
A security vulnerability has been detected in H3C Magic NX15 NX15V100R017. This impacts the...
CVE-2026-112373
A security vulnerability has been detected in H3C Magic NX15 NX15V100R017. This impacts the function sub_416874 of the f
A vulnerability was determined in H3C Magic NX15 NX15V100R017. Impacted is the function write of...
CVE-2026-112371
A vulnerability was determined in H3C Magic NX15 NX15V100R017. Impacted is the function write of the file /api/esps of t
A vulnerability was found in H3C Magic NX15 100R017. This issue affects the function sub_416874...
CVE-2026-112370
A vulnerability was found in H3C Magic NX15 100R017. This issue affects the function sub_416874 of the file /usr/bin/usr
The html_to_markdown expansion module in MISP Modules contains a server-side request forgery ...
CVE-2026-112991
The html_to_markdown expansion module in MISP Modules contains a server-side request forgery (SSRF) vulnerability in its
A weakness has been identified in H3C Magic NX15 V100R017. This affects the function...
CVE-2026-112372
A weakness has been identified in H3C Magic NX15 V100R017. This affects the function importprofile of the file /api/uplo
IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM TS4500 Tape Library/Diamondback Tape...
CVE-2025-36252
IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM TS4500 Tape Library/Diamondback Tape Library does not invalidate
IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM Diamondback Tape Library and IBM Storage...
CVE-2025-36061
IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM Diamondback Tape Library and IBM Storage TS4500 Library could al
IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker...
CVE-2026-19178
IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to gain unauthorized adm
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-57529
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 does not invalidate session after a logout...
CVE-2025-36069
IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 does not invalidate session after a logout which could allow an auth
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-57514
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.