共收录 63078 条相关情报。
← 返回所有主题CVE-2026-118171
The strapi/content-manager package is missing content-scope authorization in the content manager preview URL endpoint. T
CVE-2026-118170
The strapi/review-workflows package is vulnerable to a broken access control vulnerability allowing updates to be made w
CVE-2026-116683
CTFer.io's CTFd Terraform Provider manages CTFd resources as code. From 0.1.5 until 2.8.2, ctfd_team.password is stored
CVE-2026-115413
Missing token audience validation in the OAuth authentication mode of AWS API MCP Server before version 1.6.0 might allo
CVE-2026-88812
A double free in XKB SetGeometryin X.Org X Server before 21.1.25 and X Wayland before 24.1.14 could be used by attached
CVE-2026-87086
Tanium addressed a denial of service vulnerability in Provision.
CVE-2026-87085
Tanium addressed a SQL injection vulnerability in Provision.
CVE-2026-57202
Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2
CVE-2026-57188
Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2
CVE-2026-16491
Grafana’s RBAC service ignored the requested folder when checking whether a user was a folder administrator for deleted
CVE-2026-118132
NextChat version 2.16.1 contains a client‑side cross‑site scripting (XSS) vulnerability in the Plugin Editor due to unsa
CVE-2026-118131
GnuPG (version 2.5.21) for Windows contains a vulnerability where default Discretionary Access Control List (DACL) inher
CVE-2026-117526
A vulnerability was found in reduxjs redux-devtools 5.0.0. Affected by this vulnerability is the function evalAction of
CVE-2026-117516
A weakness has been identified in oretnom23 php-travel-agency-system. The affected element is an unknown function of the
CVE-2026-117515
A security flaw has been discovered in oretnom23 php-travel-agency-system 4e28b8f84d72420373dd15c3ae32900beb7e0635. Impa
CVE-2026-116682
FileBrowser Quantum is a free, self-hosted, web-based file manager. Prior to 1.5.2-stable and 2.0.1-beta, file read hand
CVE-2026-116680
HomeBox is a home inventory and organization system. Prior to version 0.27.0, Homebox validates generic notifier URLs wi
CVE-2026-116679
Neko is a a self-hosted virtual browser that runs in Docker and uses WebRTC. From version 3.0.0 until 3.1.5, Neko deploy
CVE-2026-116678
Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to version 1.37.0, the Vaultwarden icon downloader v
CVE-2026-116677
OpenWISP Controller is a network and WiFi controller for provisioning, configuration management, updates, and PKI manage