共收录 57397 条相关情报。
← 返回所有主题CVE-2025-68395
ARKETEAM Protectel modules PROTECTELMAJ and BDF contain a note editor module vulnerable to Stored XSS. A low privileged
CVE-2025-68394
ARKETEAM Protectel modules PROTECTELMAJ and BDF are vulnerable to SQL injection vulnerability. Improper neutralization o
CVE-2025-68393
ARKETEAM Protectel modules PROTECTELMAJ and BDF are vulnerable to SQL injection vulnerability. Improper neutralization o
CVE-2025-68392
ARKETEAM Protectel modules PROTECTELMAJ and BDF allow low privileged users to use some of the functionalities reserved f
CVE-2025-68391
ARKETEAM Protectel modules PROTECTELMAJ and BDF are vulnerable to arbitrary file upload. Any user is able to upload arbi
CVE-2026-85268
A Cross-Site Scripting (XSS) (CWE-79) vulnerability in the auth/handler in Google Cloud Identity Platform and Firebase A
CVE-2026-22114
HTTP basic auth enforces no retry limit or backoff. Combined with the default service password, the keyspace is exhausti
CVE-2026-22110
The web server does not check authentication on POST or PUT. An unauthenticated attacker can reboot the charger; by brut
CVE-2026-22109
The shipped WebUI template database retains the factory default passwords for all five account types in cleartext. Defau
CVE-2026-22105
Delta UFC500 charging stations derive the default credentials of the Service account from character positions of the dev
CVE-2026-116366
An issue has been discovered in ClickHouse Server that, under certain conditions, could allow an unauthenticated user wi
CVE-2025-31704
A vulnerability has been found in the Dahua Intelligent Connection Center. A remote attacker could send a specially craf
CVE-2026-14467
An information disclosure vulnerability in the Forocoches comments editor that allows an attacker to obtain unauthorised
CVE-2026-97209
Insecure Temporary File vulnerability in Mix deps.partition in Elixir allows a local user to execute code as another use
CVE-2026-65874
This issue affects Apache Fineract versions up to and including 1.15.0. The Center read endpoint (GET /api/v1/centers) a
CVE-2026-64618
Improper Neutralization of Special Elements used in an SQL Command ("SQL Injection") vulnerability exists in Apache Fine
CVE-2026-59396
A denial-of-service vulnerability exists in UAA's private_key_jwt client-authentication mechanism. When UAA retrieves a
CVE-2026-59388
Cloud Controller (CAPI) leaks sensitive data into audit logs in multiple instances: custom buildpack credentials are exp
CVE-2026-59387
The Nginx routing configuration for Cloud Controller blocks unauthenticated access to /internal/v4/ and /internal/v5/ en
CVE-2026-59386
A SpaceSupporter could improperly modify an application's start command and buildpack—actions requiring SpaceDeveloper p