共收录 1721 条相关情报。
← 返回所有主题CVE-2026-18911
ManageEngine DataSecurity Plus versions before 6310 are vulnerable to an agent authentication bypass, allowing unenrolle
CVE-2026-54501
Browsertrix is a high-fidelity, browser-based crawling service for web archiving that can be self-hosted or used through
CVE-2026-81876
### Summary A malformed Smart Health Card (SHC) JWT with `zip: "DEF"` and an empty or truncated DEFLATE payload causes `
CVE-2026-81875
### Summary `SHCParser` inflates compressed Smart Health Card JWT payloads into memory without a decompressed-size limit
CVE-2026-45723
Omni manages Kubernetes on bare metal, virtual machines, or in a cloud. Prior to 1.6.6 and 1.7.3, managementServer.Creat
CVE-2026-93295
MISP contains a vulnerability in its background job dispatch mechanism that allows remote code execution as the web user
CVE-2026-54577
mport is the MidnightBSD Package Manager. Prior to 2.7.8, the audit command in mport/mport.c computed option-adjusted lo
CVE-2026-61793
Nuxt OG Image generates OG Images with Vue templates in Nuxt. From 6.0.2 until 6.7.0, nuxt-og-image exposes the unauthen
CVE-2026-92860
A security flaw has been discovered in rcourtman Pulse up to 6.0.4/6.1.0-rc.4. Affected by this issue is the function fm
CVE-2026-92581
In AVideo through 29.0, Like::__construct() performs counter arithmetic on raw request values before validation, allowin
CVE-2026-92581
In AVideo through 29.0, Like::__construct() performs counter arithmetic on raw request values before validation, allowin
CVE-2026-20237
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE
CVE-2026-81876
HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to versio
CVE-2026-81875
HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to versio
CVE-2026-77190
On affected platforms running Arista EOS, an unauthenticated attacker who is network-adjacent to the switch and able to
CVE-2026-73445
On affected platforms running Arista EOS, an issue with the gRPC Network Security Interface (gNSI) Authz Rotate RPC may
CVE-2026-86475
The Appointment Hour Booking WordPress plugin before 1.5.95 does not check every appointment in a booking submission aga
CVE-2026-91738
Improper input validation in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially exec
CVE-2026-91738
Improper input validation in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially exec
CVE-2026-19655
On affected platforms running Arista EOS with Dynamic Host Configuration Protocol (DHCP) relay/snooping configured with