共收录 138 条相关情报。
← 返回所有主题CVE-2026-100706
kyverno before 1.19.1 fails to properly validate URL-encoded path segments in Policy apiCall urlPath, allowing namespace
CVE-2026-100625
Capgo (capgo.app) exposes a native build TUS upload proxy (supabase/functions/_backend/public/build/upload.ts) that auth
CVE-2026-100706
kyverno before 1.19.1 fails to properly validate URL-encoded path segments in Policy apiCall urlPath, allowing namespace
CVE-2026-75886
A flaw was found in openshift/console. An unauthenticated remote attacker can exploit a misconfiguration in the Catalogd
CVE-2026-75886
A flaw was found in openshift/console. An unauthenticated remote attacker can exploit a misconfiguration in the Catalogd
CVE-2026-56675
## Summary 9router treats local loopback requests as trusted and allows access to `/v1/*` without an API key. In a docu
CVE-2026-77255
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, th
CVE-2026-77246
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, an
CVE-2026-77246
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, an
CVE-2026-77255
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, th
CVE-2026-69399
Azure Arc Elevation of Privilege Vulnerability
CVE-2026-69399
Unintended proxy or intermediary in Azure Arc allows an authorized attacker to elevate privileges over a network.
CVE-2026-50022
Metacat is data repository software that helps researchers preserve, share, and discover data. Prior to 3.4.2, MetacatSo
CVE-2026-86003
### Summary CoreDNS accepted [RFC 2136](https://datatracker.ietf.org/doc/html/rfc2136) UPDATE messages over DoH, DoH3,
CVE-2026-45723
Omni manages Kubernetes on bare metal, virtual machines, or in a cloud. Prior to 1.6.6 and 1.7.3, managementServer.Creat
CVE-2026-61793
Nuxt OG Image generates OG Images with Vue templates in Nuxt. From 6.0.2 until 6.7.0, nuxt-og-image exposes the unauthen
CVE-2026-86003
CoreDNS is a DNS server written in Go. Prior to 1.14.7, the DNS-over-HTTPS, DNS-over-HTTP/3, DNS-over-QUIC, and DNS-over
CVE-2026-91742
Confused deputy in PriceTracking in Google Chrome on on iOS prior to 153.0.8010.47 allowed a remote attacker leveraging
CVE-2026-91742
Confused deputy in PriceTracking in Google Chrome on on iOS prior to 153.0.8010.47 allowed a remote attacker leveraging
CVE-2026-58739
In platform_msg_handler_init of default_msg_handlers.c, there is a possible confused deputy due to a confused deputy. Th