Backstage is an open framework for building developer portals. Prior to 0.17.8, the @backstage/backend-defaults package is affected by improper access control in backend action ...

CVE-2026-106495

Backstage is an open framework for building developer portals. Prior to 0.17.8, the @backstage/backend-defaults package

历史摘要 · 未重新核验 · NVD

A vulnerability was determined in 1024-lab smart-admin up to 3.30.0. Affected by this vulnerability is an unknown functionality of the file /support/config/queryByKey of the com...

CVE-2026-108923

A vulnerability was determined in 1024-lab smart-admin up to 3.30.0. Affected by this vulnerability is an unknown functi

历史摘要 · 未重新核验 · NVD

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a remote authenticated attacker to obtain sensitiv...

CVE-2026-18166

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could

历史摘要 · 未重新核验 · NVD

A flaw has been found in KusalkaSilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. Affected is the function getimagesize of the file upload_save.ph...

CVE-2026-108922

A flaw has been found in KusalkaSilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. Affecte

历史摘要 · 未重新核验 · NVD

A weakness has been identified in WMCMS 4.446.1257. The affected element is an unknown function of the file /index.php. This manipulation of the argument path/file causes inform...

CVE-2026-108811

A weakness has been identified in WMCMS 4.446.1257. The affected element is an unknown function of the file /index.php.

历史摘要 · 未重新核验 · NVD

A security flaw has been discovered in tsi-coop tsi-dpdp-cms 0.5.0/0.5.1/0.5.2. Impacted is an unknown function of the component JSON Schema Validation. The manipulation of the ...

CVE-2026-108810

A security flaw has been discovered in tsi-coop tsi-dpdp-cms 0.5.0/0.5.1/0.5.2. Impacted is an unknown function of the c

历史摘要 · 未重新核验 · NVD

A security flaw has been discovered in prasathmani TinyFileManager up to 2.6. The impacted element is the function move_uploaded_file of the file tinyfilemanager.php. Performing...

CVE-2026-108801

A security flaw has been discovered in prasathmani TinyFileManager up to 2.6. The impacted element is the function move_

历史摘要 · 未重新核验 · NVD

A vulnerability was detected in ZKTeco BioTime 9.5.6 Build 20260130.3206. Affected by this issue is some unknown functionality of the file /base/api/systemSettings of the compon...

CVE-2026-108795

A vulnerability was detected in ZKTeco BioTime 9.5.6 Build 20260130.3206. Affected by this issue is some unknown functio

历史摘要 · 未重新核验 · NVD

A vulnerability was identified in Neterbit NW-431F 20250715. Impacted is an unknown function of the file /sms.json of the component Embedded Web Server. Such manipulation leads ...

CVE-2026-108578

A vulnerability was identified in Neterbit NW-431F 20250715. Impacted is an unknown function of the file /sms.json of th

历史摘要 · 未重新核验 · NVD

Vikunja: Explicit lower-permission share on a sub-project is silently overridden by an inherited parent permission (broken access control / privilege-management regression in v2...

## Description ### Summary In Vikunja v2.6.0 the project-permission engine resolves a user's effective permission on a

历史摘要 · 未重新核验 · GitHub Advisory

The ARM64 MMU back-end allocated address space identifiers (ASIDs) for memory domains with a bare round-robin counter in arch_mem_domain_init() (arch/arm64/core/mmu.c). VM_ASID_...

CVE-2026-19574

The ARM64 MMU back-end allocated address space identifiers (ASIDs) for memory domains with a bare round-robin counter in

历史摘要 · 未重新核验 · NVD

The SendPress Newsletters WordPress plugin through 1.26.1.20 does not check the user's capability on several newsletter-management actions, allowing any authenticated subscriber...

CVE-2026-92989

The SendPress Newsletters WordPress plugin through 1.26.1.20 does not check the user's capability on several newsletter-

历史摘要 · 未重新核验 · NVD

ARM64 MMU can assign an in-use ASID to a new memory domain, breaking user-mode memory isolation

CVE-2026-19574

The ARM64 MMU back-end allocated address space identifiers (ASIDs) for memory domains with a bare round-robin counter in

历史摘要 · 未重新核验 · OSV.dev

PraisonAI: AgentOS defaults to network-exposed no-auth mode, allowing unauthenticated agent invocation and instruction disclosure

CVE-2026-61426

## Summary The AgentOS server in the `praisonai` TypeScript/npm package ships an insecure default: it binds `0.0.0.0`,

历史摘要 · 未重新核验 · GitHub Advisory

Improper Access Control. Splunk addressed multiple internally identified vulnerabilities in...

CVE-2026-76281

Improper Access Control. Splunk addressed multiple internally identified vulnerabilities in Splunk Enterprise versions 1

历史摘要 · 未重新核验 · GitHub Advisory

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain...

CVE-2026-97680

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information or inj

历史摘要 · 未重新核验 · GitHub Advisory

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain...

CVE-2026-101329

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to

历史摘要 · 未重新核验 · GitHub Advisory

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information or inject malicious data due to improper access control in the ...

CVE-2026-97680

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information or inj

历史摘要 · 未重新核验 · NVD

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper access control.

CVE-2026-101329

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to

历史摘要 · 未重新核验 · NVD

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute...

CVE-2026-104335

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to impro

历史摘要 · 未重新核验 · GitHub Advisory