共收录 69142 条相关情报。
← 返回所有主题CVE-2024-5139
The Authentication Endpoint accepts user-supplied input without sufficient encoding, allowing for the injection of malic
CVE-2024-4989
The callback URL parameter in WSO2 API Manager fails to validate user-supplied input, allowing it to be controlled by ma
CVE-2026-86249
On a brpc::Server that sets both ServerOptions.auth and ServerOptions.internal_port, the HTTP built-in service exemption
CVE-2026-86147
External control of file name or path and uncontrolled resource consumption in Apache bRPC (version < 1.18.0) on all pla
CVE-2026-86146
Inconsistent interpretation of HTTP requests (HTTP request/response smuggling) in the bundled HTTP/1.1 parser of Apache
CVE-2026-84748
Improper authorization in Apache bRPC (versions < 1.18.0) on all platforms allows remote attackers to access builtin ser
CVE-2026-84747
Interpretation conflict in the HTTP protocol implementation in Apache bRPC (version < 1.18.0) on all platforms allows re
CVE-2026-82942
A data race in the RDMA transport of Apache bRPC (versions < 1.18.0) allows a remote client to crash the server process
CVE-2026-82425
A reachable assertion in Apache bRPC (version < 1.18.0) on all platforms allows a malicious remote peer to crash the pro
CVE-2026-82231
A Thrift client in Apache bRPC (version < 1.18.0, built with WITH_THRIFT which is off by default) can be crashed by the
CVE-2026-82210
Enforceable assertion in the streaming feature of Apache bRPC (version 0) and unconditionally asserts CHECK(buf.IsEmpty
CVE-2026-114403
PHPOffice PHPPresentation through 1.2.0 contains an insecure deserialization vulnerability that allows attackers to inst
CVE-2026-114402
Trudesk through 1.2.11 contains a path traversal and authorization bypass vulnerability in accountsController.uploadImag
CVE-2026-114401
Trudesk through 1.2.11 contains a regular expression injection vulnerability that allows unauthenticated attackers to en
CVE-2026-114400
Trudesk through 1.2.11 contains a missing authentication vulnerability that allows unauthenticated attackers to download
CVE-2026-114399
Trudesk through 1.2.11 contains a path traversal vulnerability that allows administrators to delete arbitrary files by s
CVE-2026-114398
Trudesk through 1.2.11 contains an unrestricted file upload vulnerability that allows any authenticated user to place HT
CVE-2026-114397
Trudesk through 1.2.11 contains a missing authentication vulnerability in debug routes enabled whenever NODE_ENV is unse
CVE-2026-114396
Trudesk through 1.2.11 contains a server-side JavaScript injection vulnerability that allows authenticated users to inje
CVE-2026-114395
Trudesk through 1.2.11 contains an authorization bypass vulnerability in apiMessages.send that allows authenticated user