共收录 70327 条相关情报。
← 返回所有主题CVE-2026-109620
A vulnerability has been found in SourceCodester Online Reviewer System 1.0. Affected by this vulnerability is the funct
CVE-2026-109607
A flaw has been found in SourceCodester Online Exam System 1.0. Affected is an unknown function of the file adminpanel/a
CVE-2026-109606
A vulnerability was detected in SourceCodester Art Gallery Management System 1.0. This impacts the function Action::save
CVE-2026-109412
An exposed dangerous endpoint in Ivanti Neurons Patch for Intune allows a remote authenticated attacker to leak sensitiv
CVE-2026-106047
A Path Traversal vulnerability in the template export functionality of Ivanti Xtraction before version 2026.4 allows a r
CVE-2026-106043
A Missing Authentication for Critical Function vulnerability in Ivanti Xtraction before version 2026.4 allows a remote u
CVE-2026-106042
An External Control of File Name or Path vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authent
CVE-2026-106035
An Information Exposure Through Log Files vulnerability in Ivanti Xtraction Cloud Sync before version 2026.4 allows a re
CVE-2026-106034
A Path Traversal vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to creat
CVE-2026-104250
The unstructured library provides open-source components for ingesting and pre-processing images and text documents, suc
CVE-2026-104126
JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to 4.10.17-lts,
CVE-2026-103030
Dio is a powerful HTTP client for Dart and Flutter. From 1.0.0 until 2.8.0, dio_http2_adapter follows redirects in Http2
CVE-2026-102989
TanStack Router is a client-first, server-capable, fully type-safe router and full-stack framework for the web. From 1.1
CVE-2026-96299
A security issue was discovered in MongoDB mongos (the sharded cluster router) where an authenticated user with readWrit
CVE-2026-96297
Use of freed memory in the aggregation feature of MongoDB Server can cause the server to read data from a memory area af
CVE-2026-88836
Rejected reason: Red Hat Product Security determined this is not a security vulnerability. BusyBox internal TLS is inten
CVE-2026-81507
ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. Prior to 5.2.8, 5.3.6, 5.5.5, 6.0.3, and 6.1-rc
CVE-2026-79611
For XSA-308 logic was introduced, as VMX VMEntry checks do not like the exact combination of state which occurs when #DB
CVE-2026-79610
XSA-501 was about issues with v1 -> v2 and v2 -> v1 changes racing certain other grant table operations. Sadly a v2 ->
CVE-2026-79609
XPTI (Xen Page Table Isolation) was introduced to mitigate Meltdown (CVE-2017-5754, one aspect of XSA-254). This involv