共收录 50 条相关情报。
← 返回所有主题CVE-2026-52763
CVE-2026-52763 是 YesWiki（基于 PHP 的 wiki 系统）4.6.6 之前版本中存在的一个存储型 SQL 注入漏洞。该漏洞位于 recentchanges 动作（actions/recentchanges.php）
CVE-2026-59680
An OS command injection vulnerability was found in yast2-users. When displaying the "Password Settings" tab of a user, g
CVE-2026-82741
Improper Validation of Specified Type of Input vulnerability in ash-project ash lets an attacker confuse the stored type
CVE-2026-82741
Improper Validation of Specified Type of Input vulnerability in ash-project ash lets an attacker confuse the stored type
CVE-2026-80051
github.com/graphql-go/graphql (GraphQL for Go) through 0.8.1 does not validate that a scalar variable value matches its
CVE-2026-17113
A flaw was found in CRI-O's container-creation environment-variable handling (`mergeEnvs` in `server/utils.go`, consumed
CVE-2026-5304
An ACAP configuration file lacks input validation, which could potentially lead to privilege escalation. This vulnerabil
CVE-2026-9390
XML::Sig versions before 0.71 for Perl allow XPath injection in ID lookup. verify() and _get_signed_xml() in lib/XML/Si
CVE-2026-20498
In geniezone, there is a possible escalation of privilege due to a missing permission check. This could lead to local es
CVE-2026-20498
In geniezone, there is a possible escalation of privilege due to a missing permission check. This could lead to local es
CVE-2026-4773
Improper validation of specified type of input vulnerability in Magarsus Consulting Ltd. Co. IDM-MFA allows Authenticati
CVE-2026-50524
## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET
CVE-2026-50524
Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to deny service over a
CVE-2026-45069
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 6.4.40, 7.4.1
CVE-2026-52763
### Summary The `recentchanges` action (`actions/recentchanges.php`) accepts a `period` argument from two disjoint para
CVE-2026-2092
Keycloak's SAML broker endpoint does not properly validate encrypted assertions when the overall SAML response is not si
CVE-2026-54235
vLLM 是一个用于大语言模型 (LLM) 的推理和服务引擎。在版本 0.23.1rc0 之前，vLLM 的温度参数验证门控使用了 Python 的比较运算符 (<, >) 来检查温度值是否在有效范围内。由于 Python 遵循 IEEE
CVE-2026-10825
A denial-of-service vulnerability exists in the WebSocket API due to insufficient validation and handling of JSON-based
CVE-2026-9753
The $_internalApplyOplogUpdate aggregation pipeline stage can be used to execute a document diff containing a malformed
CVE-2026-9742
When OIDC authentication is enabled in configuration, clients may set specific values in the "mechanism" parameter of th