共收录 69142 条相关情报。
← 返回所有主题CVE-2026-115824
Starman versions before 0.4019 for Perl allow memory exhaustion via unbounded buffering of chunked request bodies. The
CVE-2026-115823
Starman versions before 0.4019 for Perl send response bodies for HEAD requests, desynchronizing responses on keep-alive
CVE-2026-115822
Starman versions before 0.4019 for Perl allow CPU exhaustion via quadratic regex backtracking when parsing chunked reque
CVE-2026-115817
Starman versions before 0.4019 for Perl allow a stalled request body to hold a worker indefinitely, as read_timeout cove
CVE-2026-116058
A vulnerability was found in Alfresco Activiti up to 7.21.0-rc.692. Affected by this issue is the function JuelScriptEng
CVE-2026-116057
A vulnerability has been found in KodCloud KodExplorer up to 4.55. Affected by this vulnerability is an unknown function
CVE-2026-116055
A vulnerability was detected in SourceCodester Performance Indicator System 1.0. This impacts an unknown function of the
CVE-2026-116054
A security vulnerability has been detected in SH3. This affects an unknown function of the component Módulo de Gestão/Mó
CVE-2026-116211
YesWiki 4.5.0 before 4.7.0 contains an SQL injection vulnerability in PageManager::save(), where the date_maj_fiche fiel
CVE-2026-116208
YesWiki from 4.6.2 before 4.7.0 contains a missing authorization vulnerability in ActivityPubService::syncActorPosts tha
CVE-2026-116206
YesWiki from 4.2.0 before 4.7.0 contains a stored cross-site scripting vulnerability that allows authenticated users to
CVE-2026-116205
YesWiki before 4.7.0 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers
CVE-2026-116204
YesWiki before 4.7.0 contains a cross-site request forgery vulnerability in the despam action (tools/security/actions/de
CVE-2026-116202
YesWiki before 4.7.0 contains a stored cross-site scripting vulnerability that allows low-privilege authenticated users
CVE-2026-116201
Snipe-IT before 8.5.0 contains a SAML assertion replay vulnerability that allows attackers to reuse captured assertions
CVE-2026-116200
Snipe-IT before 8.6.3 ignores the ldap_start_tls() return value in Ldap::connectToLdap(), allowing on-path attackers to
CVE-2026-116198
Snipe-IT before 8.7.0 contains a missing encryption vulnerability in Api\AssetsController::store that writes plaintext i
CVE-2026-116197
Edgeless Systems Contrast from 1.21.0 before 1.25.0 contains a non-deterministic registry selection flaw in imagepuller
CVE-2026-116196
Rclone before v1.75.2 contains a credential exposure vulnerability in the b2 backend that leaks the live account Authori
CVE-2026-116194
Rclone from 1.52.0 before 1.75.2 contains a cross-site request forgery vulnerability in the pCloud backend's localhost O