Capgo before 12.128.2 uses ILIKE pattern matching instead of exact matching for app_id lookup in...
CVE-2026-56325
Capgo before 12.128.2 uses ILIKE pattern matching instead of exact matching for app_id lookup in the preview subdomain r
#cwe-20
共收录 1738 条相关情报。
← 返回所有主题Capgo before 12.128.2 fails to enforce a maximum value on the minimum password length field in...
CVE-2026-56228
Capgo before 12.128.2 fails to enforce a maximum value on the minimum password length field in its password policy confi
Capgo before 12.128.2 uses ILIKE pattern matching instead of exact matching for app_id lookup in the preview subdomain resolver, allowing underscore characters in app_id to act ...
CVE-2026-56325
Capgo 在 12.128.2 之前的版本中，预览子域名解析器使用 ILIKE 模式匹配而非精确匹配来查找 app_id，导致下划线字符在 app_id 中充当 SQL 通配符。攻击者可以创建 app_id 与合法应用仅在下划线位置相差一
Capgo before 12.128.2 fails to enforce a maximum value on the minimum password length field in its password policy configuration. An authenticated organization administrator can...
CVE-2026-56228
Capgo before 12.128.2 fails to enforce a maximum value on the minimum password length field in its password policy confi
Craft Commerce: Partial Payment Amount Without Lower Bound Validation
### Summary The `Order::setPaymentAmount()` method accepts any float value without enforcing a minimum positive amount.
ProxySQL is a proxy for MySQL and its forks, as well as PostgreSQL. In versions 3.0.0 through 3.0.8, ProxySQL's GenAI/MCP `run_sql_readonly` tool violates its documented read-on...
CVE-2026-48774
ProxySQL is a proxy for MySQL and its forks, as well as PostgreSQL. In versions 3.0.0 through 3.0.8, ProxySQL's GenAI/MC
The compose-rich-editor library (v1.0.0-rc14) used in HCL Verse for Android's rich text email composition fails to properly validate all HTML input thereby allowing malicious co...
CVE-2026-21768
The compose-rich-editor library (v1.0.0-rc14) used in HCL Verse for Android's rich text email composition fails to prope
Improper Input Validation vulnerability in Apache APISIX. The attacker can take advantage of certain configuration in forward-auth plugin to spoof identity headers. This issue ...
CVE-2026-39998
Improper Input Validation vulnerability in Apache APISIX. The attacker can take advantage of certain configuration in f
OpenClaw: Hostname checks could treat trailing-dot hosts inconsistently
CVE-2026-53859
### Summary Hostname checks could treat trailing-dot hosts inconsistently. In affected versions, a request path that ac
Daytona: Path traversal in sandbox volume id mounts arbitrary host paths into the sandbox — cross-tenant data access and host escape
CVE-2026-54319
## Summary A sandbox volume reference (`volumeId`, which may also be a volume name) was forwarded to the runner and used
GeoServer is an open source server that allows users to share and edit geospatial data. Prior to versions 2.26.4 and 2.27.3, a GeoServer that uses `ENTITY_RESOLUTION_ALLOWLIST` ...
CVE-2025-58175
GeoServer is an open source server that allows users to share and edit geospatial data. Prior to versions 2.26.4 and 2.2
A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill PDMlink...
CVE-2026-12569
A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill PDMlink and PTC FlexPLM. The vul
A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill PDMlink and PTC FlexPLM. The vulnerability may be exploited through the deserialization o...
CVE-2026-12569
A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill PDMlink and PTC FlexPLM. The vul
Steeltoe is an open source project that provides a collection of libraries that helps users build cloud-native applications. In Steeltoe.Discovery.Eureka prior to versions 4.2.0...
CVE-2026-50196
Steeltoe is an open source project that provides a collection of libraries that helps users build cloud-native applicati
Starlette: Unvalidated request path concatenated into authority poisons request.url.hostname
CVE-2026-54282
### Summary In affected versions, the HTTP request path is not validated before being used to reconstruct `request.url`
python-multipart: Content-Disposition parameter smuggling via RFC 2231/5987 extended parameters
CVE-2026-53537
### Summary `parse_options_header` parsed `Content-Disposition` (and `Content-Type`) headers with [`email.message.Messa
A vulnerability was found in Comma AI Openpilot 0.11. This issue affects the function pickle.load/pickle.loads of the file selfdrive/modeld/modeld.py of the component Pickle Mod...
CVE-2026-12191
A vulnerability was found in Comma AI Openpilot 0.11. This issue affects the function pickle.load/pickle.loads of the fi
ApostropheCMS is an open-source Node.js content management system. Versions up to and including 4.29.0 have a password reset flow that constructs the reset URL using `req.hostna...
CVE-2026-45013
ApostropheCMS is an open-source Node.js content management system. Versions up to and including 4.29.0 have a password r
ConnectBot SSH Client Library: Unbounded SSH field lengths can cause excessive memory allocation
## Summary The SSH protocol parser trusted attacker-controlled length and count fields without first checking that the
Radius Controller May Delete a Container Resource via an Injected Deployment Annotation (Multi-Tenant Installs)
CVE-2026-53999
# Radius Controller May Delete a Container Resource via an Injected Deployment Annotation (Multi-Tenant Installs) ## Su