共收录 103 条相关情报。
← 返回所有主题CVE-2026-102094
Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Unsafe Reflection and does not sufficiently res
CVE-2026-100308
Deserialization of untrusted data in the model loading component in Amazon GluonTS before 0.17.0 might allow context-dep
CVE-2026-100308
Deserialization of untrusted data in the model loading component in Amazon GluonTS before 0.17.0 might allow context-dep
CVE-2026-19032
### Summary A `java.nio.file.Path` field bound from untrusted JSON reaches `JDKFromStringDeserializer.NioPathHelper.des
CVE-2026-96740
A flaw was found in the StreamsHub Console for Apache Kafka. Tenant-supplied Kafka client properties from the Console cu
CVE-2026-96740
A flaw was found in the StreamsHub Console for Apache Kafka. Tenant-supplied Kafka client properties from the Console cu
CVE-2026-101292
Apache ActiveMQ Artemis before 2.34.0 contains an unsafe reflection vulnerability in FederationStreamConnectMessage.getF
CVE-2026-96672
Frappe ERPNext versions before 16.34.1 fail to validate that Financial Report Template calculation_formula values refere
CVE-2026-96672
Frappe ERPNext versions before 16.34.1 fail to validate that Financial Report Template calculation_formula values refere
CVE-2026-18123
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to cause a denial of service
CVE-2026-18123
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to cause a denial of service
CVE-2026-70410
Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Apache Calcite Avati
CVE-2026-78030
DBI versions before 1.653 for Perl load arbitrary modules via unvalidated dbm_type and dbm_mldbm attributes in DBD::DBM.
CVE-2026-78030
DBI versions before 1.653 for Perl load arbitrary modules via unvalidated dbm_type and dbm_mldbm attributes in DBD::DBM.
CVE-2026-93762
Mongoid contains an unsafe reflection weakness in the query path used for embedded documents. An application that passes
CVE-2026-93765
Mongoid contains an unsafe reflection weakness in the document persistence layer of its object-document mapping code. In
CVE-2026-10853
IBM MQ could allow an authenticated attacker with cluster access to cause a denial of service or potentially execute arb
CVE-2026-66269
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Externally-Controlled Input to Selec
CVE-2026-61599
djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to
CVE-2026-61599
### Impact The djust live transport resolves the LiveView to mount from a **client-supplied dotted path** by calling `__