共收录 63078 条相关情报。
← 返回所有主题CVE-2026-116802
DOMPurify before 3.4.17 contains a cross-site scripting vulnerability that allows attackers to bypass the SMIL attribute
CVE-2026-116801
Parse Server before 8.6.105 and 9.0.0 before 9.10.5-alpha.6 does not validate the owning object reference in $relatedTo
CVE-2026-116800
WWBN AVideo before 29.5.0 contains a local file inclusion vulnerability that allows unauthenticated attackers to include
CVE-2026-116604
A vulnerability has been found in SourceCodester Online Food Ordering System 1.0. The affected element is an unknown fun
CVE-2026-116603
A flaw has been found in SourceCodester Online Food Ordering System 1.0. Impacted is an unknown function of the file adm
CVE-2026-111422
In apache-airflow-providers-ssh before 7.0.1, SSHRemoteJobOperator quoted the values of its templated `environment` para
CVE-2026-76654
An NTLM coercion vulnerability exists on Windows nodes when the subPath supplied in a pod's volumeMounts is set to a sym
CVE-2026-2270
A confused deputy attack exists in the StatefulSet controller that allows a user with namespace-scoped write permissions
CVE-2026-116602
A vulnerability was detected in SourceCodester Online Food Ordering System 1.0. This issue affects the function unlink o
CVE-2026-116556
A vulnerability was found in Argilla up to 2.8.0. This affects an unknown function of the file argilla-frontend/componen
CVE-2026-116555
A vulnerability has been found in Argilla up to 2.8.0. The impacted element is an unknown function of the file argilla-f
CVE-2026-116554
A flaw has been found in Argilla up to 2.8.0. The affected element is the function Dataset.from_disk of the file argilla
CVE-2026-116748
Transmission 4.0.0 before 4.1.3 contains a permissive CORS vulnerability in handle_request() in rpc-server.cc that expos
CVE-2026-116747
Kener 3.0.0 before 4.1.10 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge
CVE-2026-116746
QloApps 1.6.0 through 1.7.0 contains a missing authorization vulnerability in the qlohotelreview module's AddReview AJAX
CVE-2026-116745
QloApps through 1.7.0 contains an information disclosure vulnerability in OrderConfirmationController::init() that allow
CVE-2026-116744
ntop nDPI through 6.0 contains an out-of-bounds read vulnerability in dissect_softether_host_fqdn() in softether.c that
CVE-2026-116743
libyal libmsiecf through 20260525 contains a double free vulnerability in libmsiecf_url_values_read_data() that allows a
CVE-2026-116742
HTSlib through 1.24 contains a heap out-of-bounds write and read vulnerability in bgzf_index_load_hfile() in bgzf.c that
CVE-2026-116741
Speex (libspeex) through 1.2.1 contains an out-of-bounds write vulnerability in speex_bits_read_whole_bytes() in libspee