共收录 70309 条相关情报。
← 返回所有主题CVE-2026-108088
** UNSUPPORTED WHEN ASSIGNED ** Use of cache containing sensitive information vulnerability in Apache Cocoon. When using
CVE-2026-108087
** UNSUPPORTED WHEN ASSIGNED ** Improper neutralization of special elements used in an SQL command ('SQL injection') vul
CVE-2026-108086
** UNSUPPORTED WHEN ASSIGNED ** Improper restriction of recursive entity references in DTDs ('XML entity expansion') vul
CVE-2026-108062
Pre-authentication OIDC discovery and JWKS fetches run synchronously on the asyncio event loop, so one unauthenticated r
CVE-2026-107597
PIA's token verification (`verify_token` in `pia/oidc.py`) fetches the OIDC discovery document of an allowlisted issuer
CVE-2026-85267
A Cross-Site WebSocket Hijacking vulnerability in Cloud Shell prior to 2026-07-22 on Google Cloud Platform allows an una
CVE-2026-43858
A stack-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execut
CVE-2026-43857
A vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution with privileges on the s
CVE-2026-43856
A stack-based buffer overflow vulnerability in the FileProcess::CheckDir function could allow a remote authenticated att
CVE-2026-43855
A heap-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code executi
CVE-2026-43854
A vulnerability could allow an attacker with access to an encrypted project file to retrieve administrator credentials f
CVE-2026-43853
A vulnerability could allow an attacker to send a crafted message to trigger an assertion fault, causing the service to
CVE-2026-43852
A vulnerability could allow an authenticated attacker to write files to arbitrary locations on the system.
CVE-2026-43851
A path traversal vulnerability could allow an authenticated attacker to read arbitrary files on the system.
CVE-2026-43850
A command injection vulnerability could allow an authenticated attacker to achieve root-level code execution on the syst
CVE-2026-43849
A heap memory read vulnerability could allow an attacker to exfiltrate sensitive data.
CVE-2026-113468
The payment notification endpoint for PayPal accepts incoming data without verifying that it comes from the payment prov
CVE-2026-113459
In versions running on TYPO3 10 and 11, the configured OpenAI API key is embedded in every backend page, so that the edi
CVE-2026-113442
Values entered by visitors were placed into the HTML summary email without being escaped. An unauthenticated attacker co
CVE-2026-113381
A weakness has been identified in Osclass up to 8.3.1. Affected by this vulnerability is the function Item::findUserItem