共收录 63886 条相关情报。
← 返回所有主题CVE-2026-92171
A flaw was found in the Infinispan Operator for Red Hat Data Grid. When cross-site (xsite) TLS is enabled, the operator
CVE-2026-77057
boneIO Black does not limit authentication attempts on its web interface (POST /api/login) or SSH service, and does not
CVE-2026-77055
boneIO black_debian_images gives the boneio service account excessive privileges, including full passwordless sudo acces
CVE-2026-77053
boneIO Black firmware ships with authentication disabled by default. Its management web API listens on all network inter
CVE-2026-77052
boneIO Black exposes a Node-RED instance without authentication at the /nodered/ path through a Caddy reverse proxy. The
CVE-2026-36698
Xovis AG APS-R-POE, APS-R-POE-PP, APS-R, APS-R-POE-USB, and APS-B 2.10.1.1 and earlier contains an OS command injection
CVE-2026-31158
SQL Injection vulnerability in CRM SOFTTRADE Infotech (aka softtradeindia) 1.0 allows a remote attacker to execute arbit
CVE-2026-116497
A NULL pointer dereference vulnerability was found in gssproxy. When a GSSX_INIT_SEC_CONTEXT request is received with th
CVE-2026-116340
A vulnerability was identified in iFlytek astron-agent up to 1.1.2. This impacts the function FileInfoV2Service.listKnow
CVE-2026-116284
A security vulnerability has been detected in Kameleo up to 5.3.1. This vulnerability affects unknown code of the file /
CVE-2026-115930
The MongoDB Shell (mongosh) relies on Node.js as a third-party runtime that carries its own TLS root certificate store.
CVE-2026-110748
This issue affects Apache SIS from version 0.7 through 1.6 inclusive. When a data file contains links to other files, Ap
CVE-2026-106781
An issue in WCH CH340/CH341 USB-to-Serial Windows Driver setup package CH341SER.EXE version 4.0 allows a local attacker
CVE-2026-59107
A security vulnerability has been identified in the vSolution Matrix file sharing feature. A shared cryptographic trust
CVE-2026-116492
Frappe CRM app before 1.89.1 contains a missing authorization vulnerability that allows authenticated low-privileged use
CVE-2026-116488
NXP MCUXpresso SDK USB middleware (mcuxsdk-middleware-usb) before 2.13.0 contains a heap buffer overflow in host audio,
CVE-2026-116487
NXP MCUXpresso SDK USB middleware (mcuxsdk-middleware-usb) before 2.13.0 contains an out-of-bounds read vulnerability in
CVE-2026-116485
danmu_api before 1.21.7 contains an authentication bypass vulnerability that allows unauthenticated attackers to modify
CVE-2026-116283
A weakness has been identified in Kameleo up to 5.0.1.26. This affects an unknown part of the file /profiles of the comp
CVE-2026-116281
A vulnerability was identified in Kameleo up to 5.0.1.26. Affected by this vulnerability is the function ListProfiles of