共收录 69535 条相关情报。
← 返回所有主题CVE-2026-108062
Pre-authentication OIDC discovery and JWKS fetches run synchronously on the asyncio event loop, so one unauthenticated r
CVE-2026-107597
PIA's token verification (`verify_token` in `pia/oidc.py`) fetches the OIDC discovery document of an allowlisted issuer
CVE-2026-85267
A Cross-Site WebSocket Hijacking vulnerability in Cloud Shell prior to 2026-07-22 on Google Cloud Platform allows an una
CVE-2026-43858
A stack-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execut
CVE-2026-43857
A vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution with privileges on the s
CVE-2026-43856
A stack-based buffer overflow vulnerability in the FileProcess::CheckDir function could allow a remote authenticated att
CVE-2026-43855
A heap-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code executi
CVE-2026-43854
A vulnerability could allow an attacker with access to an encrypted project file to retrieve administrator credentials f
CVE-2026-43853
A vulnerability could allow an attacker to send a crafted message to trigger an assertion fault, causing the service to
CVE-2026-43852
A vulnerability could allow an authenticated attacker to write files to arbitrary locations on the system.
CVE-2026-43851
A path traversal vulnerability could allow an authenticated attacker to read arbitrary files on the system.
CVE-2026-43850
A command injection vulnerability could allow an authenticated attacker to achieve root-level code execution on the syst
CVE-2026-43849
A heap memory read vulnerability could allow an attacker to exfiltrate sensitive data.
CVE-2026-113468
The payment notification endpoint for PayPal accepts incoming data without verifying that it comes from the payment prov
CVE-2026-113459
In versions running on TYPO3 10 and 11, the configured OpenAI API key is embedded in every backend page, so that the edi
CVE-2026-113442
Values entered by visitors were placed into the HTML summary email without being escaped. An unauthenticated attacker co
CVE-2026-113381
A weakness has been identified in Osclass up to 8.3.1. Affected by this vulnerability is the function Item::findUserItem
CVE-2026-113378
A security flaw has been discovered in mcollina mcp-ripgrep up to 0.4.0. Affected is an unknown function of the file src
CVE-2026-112240
The download link for files uploaded through a form relied on a token that could be predicted. The file name in the requ
CVE-2026-112239
The extension provides a backend endpoint that writes a submitted value into a submitted field of a submitted page recor