In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user could trick an authenticated user into opening a crafted link to Monitoring Conso...

CVE-2026-76330

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user could trick an authentic

历史摘要 · 未重新核验 · NVD

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could bypass Search Processing Language (SPL...

CVE-2026-76323

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power"

历史摘要 · 未重新核验 · NVD

BuildKit: Custom frontend could bypass Seccomp/AppArmor

CVE-2026-61711

### Impact A custom frontend could send a crafted build request that disabled Seccomp and AppArmor protections for the b

历史摘要 · 未重新核验 · GitHub Advisory

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to 0.31.1, a custom frontend could place an invalid ...

CVE-2026-61711

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. P

历史摘要 · 未重新核验 · NVD

IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 Power Systems Firmware is affected by a vulnerability i...

CVE-2026-17414

IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H

历史摘要 · 未重新核验 · NVD

Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.6.0 until 4.14.6 and 5.0.0-beta3, DB::getFile() and DB::searchFile() in src/...

CVE-2026-49392

Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.6.0 until 4.14.6 an

历史摘要 · 未重新核验 · NVD

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security revie...

CVE-2026-20318

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering t

历史摘要 · 未重新核验 · NVD

An improper input validation vulnerability in the configuration service for processing encrypted...

CVE-2026-15316

An improper input validation vulnerability in the configuration service for processing encrypted credential data has bee

历史摘要 · 未重新核验 · GitHub Advisory

Streambert is a cross-platform Electron Desktop App to stream and download video content. Prior to version 2.6.0, the open-external IPC handler in src/ipc/downloads.js passes a ...

CVE-2026-52877

Streambert is a cross-platform Electron Desktop App to stream and download video content. Prior to version 2.6.0, the op

历史摘要 · 未重新核验 · NVD

Streambert is a cross-platform Electron Desktop App to stream and download video content. Prior to version 2.6.0, the open-path-at-time IPC handler in src/ipc/player.js accepts ...

CVE-2026-52876

Streambert is a cross-platform Electron Desktop App to stream and download video content. Prior to version 2.6.0, the op

历史摘要 · 未重新核验 · NVD

An improper input validation vulnerability in the configuration service for processing encrypted credential data has been identified in Tapo C200 v5.  An attacker can send overs...

CVE-2026-15316

An improper input validation vulnerability in the configuration service for processing encrypted credential data has bee

历史摘要 · 未重新核验 · NVD

Inappropriate implementation in CORS in Google Chrome prior to 151.0.7922.169 allowed a remote...

CVE-2026-76033

Inappropriate implementation in CORS in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who had compromi

历史摘要 · 未重新核验 · GitHub Advisory

Inappropriate implementation in Media in Google Chrome on on Mac prior to 151.0.7922.169 allowed...

CVE-2026-76035

Inappropriate implementation in Media in Google Chrome on on Mac prior to 151.0.7922.169 allowed a remote attacker to ex

历史摘要 · 未重新核验 · GitHub Advisory

Inappropriate implementation in Media in Google Chrome on on Mac prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HT...

CVE-2026-76035

Inappropriate implementation in Media in Google Chrome on on Mac prior to 151.0.7922.169 allowed a remote attacker to ex

历史摘要 · 未重新核验 · NVD

Inappropriate implementation in CORS in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a c...

CVE-2026-76033

Inappropriate implementation in CORS in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who had compromi

历史摘要 · 未重新核验 · NVD

fastify is a fast and low overhead web framework for Node.js. Versions of fastify before 5.12.1 are affected by a schema validation bypass when a request body schema targets a r...

CVE-2026-18504

fastify is a fast and low overhead web framework for Node.js. Versions of fastify before 5.12.1 are affected by a schema

历史摘要 · 未重新核验 · NVD

Froxlor DomainZones.add allows DNS zone-file RR injection via record/type fields

CVE-2026-54543

Froxlor's DomainZones.add API command accepts user-controlled DNS record and type values and later writes them into gene

历史摘要 · 未重新核验 · GitHub Advisory

jmespath.php has CompilerRuntime code injection via unescaped function names

CVE-2026-54133

## Impact `mtdowling/jmespath.php` can generate and execute attacker-controlled PHP code when `JmesPath\CompilerRuntime

历史摘要 · 未重新核验 · GitHub Advisory

MeshCentral has unsanitized data fields

### Description A rogue or compromised MeshAgent can inject arbitrary HTML/JavaScript via the osdesc (OS description) f

历史摘要 · 未重新核验 · GitHub Advisory

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause improper input validation. A successful exploit might lead to denial of service.

CVE-2026-47629

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause improper input validatio

历史摘要 · 未重新核验 · NVD