共收录 35 条相关情报。
← 返回所有主题CVE-2026-116870
In affected versions of Octopus Server, OIDC token issuer validation was performed inconsistently. This could result in
CVE-2026-116197
Edgeless Systems Contrast from 1.21.0 before 1.25.0 contains a non-deterministic registry selection flaw in imagepuller
CVE-2026-116197
Edgeless Systems Contrast from 1.21.0 before 1.25.0 contains a non-deterministic registry selection flaw in imagepuller
CVE-2026-114348
webpack-dev-server is a development server that provides live reloading for webpack projects. In versions from 5.1.0 bef
CVE-2026-102478
In affected versions of Octopus Server, an authenticated user with permission to modify roles could bypass the protectio
CVE-2026-102478
In affected versions of Octopus Server, an authenticated user with permission to modify roles could bypass the protectio
CVE-2026-106445
Handlebars provides the power necessary to let users build semantic templates. From 4.0.0 until 4.7.10, Handlebars looku
CVE-2026-105048
The Playground feature of Zilliz Attu before 3.0.0 allows SSRF (proxying of requests to private IP addresses).
CVE-2026-105048
The Playground feature of Zilliz Attu before 3.0.0 allows SSRF (proxying of requests to private IP addresses).
CVE-2026-101015
A flaw has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this issue is some unknown functional
CVE-2026-100837
Contrast (Edgeless Systems) through 1.20.0 performs unanchored suffix matching when selecting per-registry configuration
CVE-2026-100837
Contrast (Edgeless Systems) through 1.20.0 performs unanchored suffix matching when selecting per-registry configuration
CVE-2026-86831
Improper validation of pod identifier uniqueness in aws-network-policy-agent in Amazon EKS Network Policy Agent before v
CVE-2026-88255
Improper Validation of Unsafe Equivalence in Input in ZenHive mpp allows an unauthenticated remote client to pass the Te
CVE-2026-88255
Improper Validation of Unsafe Equivalence in Input in ZenHive mpp allows an unauthenticated remote client to pass the Te
CVE-2026-89049
A server-side request forgery issue due to improper validation of equivalent address representations in the port forward
CVE-2026-89049
A server-side request forgery issue due to improper validation of equivalent address representations in the port forward
CVE-2026-76977
SAP UI5 does not sufficiently validate the parent frame's origin against the configured allowlist. An unauthenticated at
CVE-2026-76977
SAP UI5 does not sufficiently validate the parent frame's origin against the configured allowlist. An unauthenticated at
CVE-2026-74994
The mod_auth module in OTP's inets httpd server, when configured with dets or mnesia authentication backends and multipl