共收录 65074 条相关情报。
← 返回所有主题CVE-2026-111497
A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on
CVE-2026-107079
An issue in Systrome Validation & Certification 1.0 allows an attacker to cause a denial of service via the t URL parame
CVE-2026-115246
A weakness has been identified in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a2
CVE-2026-13411
Mattermost versions 11.7.x <= 11.7.11 fail to validate null elements when decoding playbook import conditions which allo
CVE-2026-115334
Lotus through 0.10.2 contains an authorization bypass vulnerability in ChangeUserOrganizationView.post that allows authe
CVE-2026-115332
Lotus through 0.10.2 contains an sql injection vulnerability that allows authenticated organization users to inject SQL
CVE-2026-115331
Lotus through 0.10.2 contains an sql injection vulnerability that allows authenticated organization users to inject SQL
CVE-2026-115330
Lotus through 0.10.2 contains an sql injection vulnerability that allows authenticated organization users to execute arb
CVE-2026-115328
JSON-SCADA before 0.65-alpha contains an sql injection vulnerability in opcApi() in src/server_realtime_auth/index.js th
CVE-2026-115327
libyang through 6.4.13 contains an uninitialized pointer free vulnerability in lydxml_env_netconf_rpc() in src/parser_xm
CVE-2026-115326
QloApps through 1.7.0 contains an insecure direct object reference vulnerability in OrderDetailController::displayAjaxSu
CVE-2026-115324
mem0 0.1.117 before 1.0.8 contains an sql injection vulnerability in mem0/vector_stores/databricks.py that allows attack
CVE-2026-115323
EverShop 1.2.2 before 2.2.1 contains a missing authorization vulnerability in the customer address API that allows unaut
CVE-2026-115322
Bytebase before 3.16.0 contains an authorization bypass vulnerability in GetTaskRunLog, GetTaskRunSession and PreviewTas
CVE-2026-115319
fzf 0.36.0 through 0.74.5 contains an inefficient algorithmic complexity vulnerability in maskActionContents that allows
CVE-2026-115207
A flaw was found in GNU patch. An attacker can achieve arbitrary file creation outside the intended working directory by
CVE-2026-114665
Goploy 1.18.0 before 1.18.1 contains a link following vulnerability in the /deploy/fileDiff and /deploy/fileCompare endp
CVE-2026-111079
A flaw was found in Goose. When the terminal integration feature is enabled, the application captures shell command hist
CVE-2025-71434
Weaver E-cology 8.0, 9.0, and 10.0 prior to 10.76 contains an unauthenticated SQL injection vulnerability in the /api/do
CVE-2024-58394
Retool before 3.88.0 contains a cross-site scripting vulnerability that allows unauthenticated attackers to execute scri