共收录 223 条相关情报。
← 返回所有主题CVE-2026-77353
Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 5.0.0, Wallos allows authenticat
CVE-2026-82681
Improper Encoding or Escaping of Output vulnerability in ash-project ash_admin lets an attacker who controls a record's
CVE-2026-82681
Improper Encoding or Escaping of Output vulnerability in ash-project ash_admin lets an attacker who controls a record's
CVE-2026-55859
MariaDB Connector/R2DBC is a non-blocking MariaDB and MySQL client implemented in Java. Prior to 1.4.1, org.mariadb:r2db
CVE-2026-55855
MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases. Prior to
CVE-2026-55855
### Summary A SQL injection is possible when the connector escapes Buffer parameters client-side under a multi-byte cli
CVE-2026-55859
### Summary The connector encodes and decodes all character data assuming the connection character set is UTF-8. A serv
CVE-2026-55891
PrivateBin is an online pastebin where the server has zero knowledge of pasted data. Prior to 2.0.5, Request::getRequest
CVE-2026-55891
## Vulnerability Details A reflected JSON injection allows an attacker to return arbitrary data in the JSON endpoints (
CVE-2026-82249
gitoxide before 0.38.2 fails to validate carriage return characters in URL values passed to credential helpers. Attacker
CVE-2026-82249
gitoxide before 0.38.2 fails to validate carriage return characters in URL values passed to credential helpers. Attacker
CVE-2026-81522
A weakness in the MongoDB C++ Driver's handling of caller-supplied namespace identifiers allows special characters embed
CVE-2026-81522
A weakness in the MongoDB C++ Driver's handling of caller-supplied namespace identifiers allows special characters embed
CVE-2026-81685
openssl_encrypt versions before 1.4.9 fail to sanitize recovery-slot metadata in the desktop GUI, allowing attackers to
CVE-2026-81685
openssl_encrypt versions before 1.4.9 fail to sanitize recovery-slot metadata in the desktop GUI, allowing attackers to
CVE-2026-65085
NVIDIA OpenShell for Linux contains a vulnerability in its inference proxy, where an attacker could cause an improper en
CVE-2026-55618
eml_parser serves as a python module for parsing eml files and returning various information found in the e-mail as well
CVE-2026-55618
## Summary `eml_parser` performs certain validations on potential URL strings to discard bogus values. In versions prio
CVE-2026-61824
Defuddle cleans up HTML pages. Prior to 0.19.1, site extractors interpolate page-derived image alt and src values, og:im
CVE-2026-61824
## Summary An Improper Neutralization of Input During Web Page Generation issue in the site extractor component allows