共收录 63886 条相关情报。
← 返回所有主题CVE-2026-57845
Hugging Face Datasets through 5.1.0 contains an insecure deserialization vulnerability that allows attackers to execute
CVE-2026-52356
An OS command injection vulnerability in the /htdocs/web/diagnostic.php endpoint of D-Link DAP1160L A1_FW101WWb04 allows
CVE-2025-45528
An issue in Nitro Software, Inc Nitro PDF Pro for macOS v.14.7 allows a local attacker to execute arbitrary code via a c
CVE-2026-55486
The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From version 25.0
CVE-2026-55465
The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From version 22.0
CVE-2026-55463
The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From version 4.11
CVE-2026-55457
The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. Prior to version
CVE-2026-55444
The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. Prior to version
CVE-2026-55442
The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From version 23.0
CVE-2026-54668
Kitodo.Production is a workflow management tool for mass digitization and is part of the Kitodo Digital Library Suite. P
CVE-2026-49442
Cacti is an open source performance and fault management framework. Prior to version 1.2.31, a User Enumeration vulnerab
CVE-2026-46652
The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From version 24.0
CVE-2026-46651
The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From version 24.0
CVE-2026-46531
Cacti is an open source performance and fault management framework. From version 1.2.27 to before version 1.2.31, Cacti
CVE-2026-46347
The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. Prior to version
CVE-2026-39902
Cacti is an open source performance and fault management framework. Prior to version 1.2.31, the prior blocklist ([;&| `
CVE-2026-115478
obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. From 1.0.1 until 1.31.4, `crea
CVE-2026-115477
obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. From 1.13.0 until 1.31.4, on a
CVE-2026-112333
GFI Archiver before 15.14 contains a stored cross-site scripting vulnerability in the MailInsights scheduled report conf
CVE-2026-106765
An issue in @rog0x/mcp-docker-tools 1.0.1 allows a remote attacker to execute arbitrary code via the handleImageList fun