cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. From 44.0.0 until 50.0.0, pkcs7_decrypt_der, pkcs7_decrypt_pem, and pkcs7...

CVE-2026-69247

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. From 44.0.0 unti

历史摘要 · 未重新核验 · NVD

cryptography: PKCS#7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing

CVE-2026-69247

### Summary `pkcs7_decrypt_der`, `pkcs7_decrypt_pem`, and `pkcs7_decrypt_smime` reported the outcome of decrypting a `R

历史摘要 · 未重新核验 · GitHub Advisory

HCL iControl was affected by Information Exposure Through Verbose Client-Side API Error Messages...

CVE-2026-56568

HCL iControl was affected by Information Exposure Through Verbose Client-Side API Error Messages vulnerabilities. It inv

历史摘要 · 未重新核验 · GitHub Advisory

HCL iControl was affected by Improper Error Handling vulnerabilities. It involves Out of memory,...

CVE-2026-56571

HCL iControl was affected by Improper Error Handling vulnerabilities. It involves Out of memory, null pointer exceptions

历史摘要 · 未重新核验 · GitHub Advisory

HCL iControl was affected by Improper Error Handling vulnerabilities. It involves Out of memory, null pointer exceptions, system call failure, database unavailable, network time...

CVE-2026-56571

HCL iControl was affected by Improper Error Handling vulnerabilities. It involves Out of memory, null pointer exceptions

历史摘要 · 未重新核验 · NVD

HCL iControl was affected by Information Exposure Through Verbose Client-Side API Error Messages vulnerabilities. It involves application displays raw server/API error messages ...

CVE-2026-56568

HCL iControl was affected by Information Exposure Through Verbose Client-Side API Error Messages vulnerabilities. It inv

历史摘要 · 未重新核验 · NVD

Dompdf is an HTML to PDF converter for PHP. In versions 3.15 and prior, if a malicious actor can supply unrestricted content for rendering by Dompdf they can utilize the SVG ren...

CVE-2026-59943

Dompdf is an HTML to PDF converter for PHP. In versions 3.15 and prior, if a malicious actor can supply unrestricted con

历史摘要 · 未重新核验 · NVD

Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain a vulnerability in Configuration Management, allowing an attacker to execute specifically crafted commands t...

CVE-2025-59177

Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain a vulnerability in Configuration Management, allowi

历史摘要 · 未重新核验 · NVD

HCL Connections is vulnerable to information disclosure which could allow a user to obtain sensitive information they are not entitled to, caused by improper handling of request...

CVE-2026-56537

HCL Connections is vulnerable to information disclosure which could allow a user to obtain sensitive information they ar

历史摘要 · 未重新核验 · NVD

Budibase: Server Filesystem Existence/Read Oracle via Builder-Controlled MongoDB tlsCertificateKeyFile

## Summary When creating a MongoDB datasource, Budibase passes the `tlsCertificateKeyFile` and `tlsCAFile` fields straig

历史摘要 · 未重新核验 · GitHub Advisory

Dompdf: Embedded SVG images can leak existence of files and directories within the filesystem

CVE-2026-59943

### Summary If a malicious actor can supply unrestricted content for rendering by Dompdf they can utilize the SVG render

历史摘要 · 未重新核验 · GitHub Advisory

In Progress® Telerik® UI for AJAX prior to v2026.2.708, RadAsyncUpload client-state processing can distinguish decrypt failures from invalid-JSON parse failures, creating an ora...

CVE-2026-13182

In Progress® Telerik® UI for AJAX prior to v2026.2.708, RadAsyncUpload client-state processing can distinguish decrypt f

历史摘要 · 未重新核验 · NVD

Parse Server versions >= 9.0.0 before 9.10.0-alpha.4 and versions before 8.6.85 contain a schema disclosure vulnerability. When the GraphQL API is mounted with public introspect...

CVE-2026-64627

Parse Server versions >= 9.0.0 before 9.10.0-alpha.4 and versions before 8.6.85 contain a schema disclosure vulnerabilit

历史摘要 · 未重新核验 · NVD

SurrealDB versions before 3.1.0 contain an information disclosure vulnerability where authenticated users with UPDATE access can read field values hidden by field-level SELECT p...

CVE-2026-63748

SurrealDB versions before 3.1.0 contain an information disclosure vulnerability where authenticated users with UPDATE ac

历史摘要 · 未重新核验 · NVD

IBM Security Verify could allow a remote attacker to obtain sensitive information when a detailed...

CVE-2026-8861

IBM Security Verify could allow a remote attacker to obtain sensitive information when a detailed technical error messag

历史摘要 · 未重新核验 · GitHub Advisory

IBM Security Verify could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser.  This information could be ...

CVE-2026-8861

IBM Security Verify could allow a remote attacker to obtain sensitive information when a detailed technical error messag

历史摘要 · 未重新核验 · NVD

mcp-memory-keeper: Arbitrary local file read in context_import via unvalidated filePath

CVE-2026-54561

### Impact `context_import` passed the caller-supplied `filePath` directly to `fs.readFileSync` with no path confinemen

历史摘要 · 未重新核验 · GitHub Advisory

HCL Aftermarket EPC is vulnerable to attack since the application returns detailed error messages that leak information about the processing on the server. An attacker may use t...

CVE-2024-23575

HCL Aftermarket EPC is vulnerable to attack since the application returns detailed error messages that leak information

历史摘要 · 未重新核验 · NVD

Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel Undertow Component. The camel-undertow HTTP server consumer exposes a muteException o...

CVE-2026-56139

Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel Undertow Component. The came

历史摘要 · 未重新核验 · NVD

Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel Netty HTTP component. The camel-netty-http HTTP server consumer exposes a muteExcepti...

CVE-2026-49365

Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel Netty HTTP component. The ca

历史摘要 · 未重新核验 · NVD