共收录 57397 条相关情报。
← 返回所有主题CVE-2026-107046
A Server-Side Request Forgery (SSRF) in the url/title/author/coverUrl component of FocusPodcast versionCode 70allows att
CVE-2026-107045
Insecure permissions in the CitrineContentProvider component of Citrine v3.1.0 (versionCode 62) allows unauthorized atta
CVE-2026-107044
Insecure permissions in ProjectMAXS MAXS Main v0.5.19 (versionCode 19) allows unauthorized attackers to arbitrarily mani
CVE-2026-107043
Insecure permissions in Code Catcher versionCode 131 allow unauthorized attackers to arbitrarily manipulate the app's SM
CVE-2025-12523
Broken Object Level Authorization in Users Configuration Endpoint allows Information Disclosure to authenticated user
CVE-2023-7357
A remote code execution (RCE) vulnerability was identified in the FlexNet Publisher lmadmin web user interface. This vul
CVE-2026-96203
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-96199
Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a net
CVE-2026-96198
Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a net
CVE-2026-96196
Incomplete list of disallowed inputs in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a secu
CVE-2026-96192
Use after free in Microsoft Edge for iOS allows an unauthorized attacker to execute code over a network.
CVE-2026-96187
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized
CVE-2026-93680
IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to bypass security restrictions due to improper auth
CVE-2026-93571
Szafir is vulnerable to Path Traversal in the uploaded filename. A man-in-the-middle attacker who can reroute update req
CVE-2026-93570
Szafir and Szafir Weryfikująca are vulnerable to XML External Entity (XXE) injection. When a user signs or verify a craf
CVE-2026-90991
IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to cause a denial of service due to al
CVE-2026-90872
Improper neutralization of directives in dynamically evaluated code in the Manager web console of Progress Software WS_F
CVE-2026-90871
Improper limitation of a pathname to a restricted directory in Progress Software WS_FTP Server versions prior to 2024.0.
CVE-2026-90870
A missing release of backend receiver sessions in the Ad Hoc Transfer component of Progress Software WS_FTP Server versi
CVE-2026-90869
A remote attacker who knows a valid account's enrolled SSH public key can terminate the shared SSH service in Progress S