共收录 112 条相关情报。
← 返回所有主题CVE-2026-65626
The pure-Erlang RSAES-PKCS1-v1_5 decryption in the jose_jwa_pkcs1 module is a Bleichenbacher padding oracle. eme_pkcs1_d
CVE-2026-73630
### Summary `/api/filetree/authFilePublishAccess` is registered with `CheckAuth` only and is reachable anonymously. It
CVE-2026-76406
In Splunk SOAR versions below 8.7.0, an unauthenticated user with access to encrypted credential data from an affected S
CVE-2026-114064
Snipe-IT before 8.7.0 contains a server-side request forgery vulnerability in the webhook testing feature that allows su
CVE-2026-114064
Snipe-IT before 8.7.0 contains a server-side request forgery vulnerability in the webhook testing feature that allows su
CVE-2026-111933
Coder before 2.29.17, 2.30.0 before 2.32.7, 2.33.0 before 2.33.8, and 2.34.0 before 2.34.2 contains a user enumeration v
CVE-2026-18560
Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to validate user’s per
CVE-2026-110141
Observable discrepancy in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to leak cross-origin d
CVE-2026-97782
Observable discrepancy in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network.
CVE-2026-88834
A flaw was found in BusyBox's httpd web server. When configured with system password authentication, a user existence or
CVE-2026-109337
SurrealDB before 3.3.0 contains an authorization bypass vulnerability that allows record users to infer field values hid
CVE-2026-106506
Backstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolder-backend
CVE-2026-106351
Observable discrepancy in Safebrowsing in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker who h
CVE-2026-106336
Observable discrepancy in Paint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak cross-origin d
CVE-2026-106303
Observable discrepancy in Autofill AI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromi
CVE-2026-106210
Observable discrepancy in Scroll in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origi
CVE-2026-106180
Observable discrepancy in Animation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially obt
CVE-2026-105675
Ghost is a Node.js content management system. From 4.39.0 until 6.64.0, staff users with permission to view staff invite
CVE-2026-105652
Ghost is a Node.js content management system. From 0.7.2 until 6.64.0, any staff-level user was able to determine the re
CVE-2026-11795
Observable discrepancy vulnerability in Softtr Informatics Trading Limited Company E-Commerce Pack allows Account Footpr