YAFNET has Unauthenticated Stored Second-Order XSS in Admin Event Log via Reflected `User-Agent` Header
CVE-2026-43938
**Description:** Stored (second-order) Cross-Site Scripting (XSS) occurs when attacker-controlled input is persisted thr
#cwe-116
共收录 223 条相关情报。
← 返回所有主题Axios: Null Byte Injection via Reverse-Encoding in AxiosURLSearchParams
CVE-2026-42040
# Vulnerability Disclosure: Null Byte Injection via Reverse-Encoding in AxiosURLSearchParams ## Summary The `encode()`
Apache Polaris accepts literal `*` characters in namespace and table names. When it later builds temporary S3 access policies for delegated table access, those same characters a...
CVE-2026-42810
Apache Polaris accepts literal `*` characters in namespace and table names. When it later builds temporary S3 access pol