共收录 91 条相关情报。
← 返回所有主题CVE-2026-61730
SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. In affected depl
CVE-2026-119201
Nuxt is an open-source web development framework for Vue.js. From 4.6.0 until 4.6.3, nuxt dev stores a generated appSecr
CVE-2026-119199
Nuxt is an open-source web development framework for Vue.js. From 3.0.0 until 4.6.3, the Nuxt development server can exp
CVE-2026-67073
HCL BigFix AEX is affected by an Unrestricted File Upload and Improper Access Control vulnerability. This could allow an
CVE-2026-65210
This issue may allow an authenticated IPMI Administrator to read arbitrary files from the BMC filesystem, disclosing mat
CVE-2026-46651
The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From version 24.0
CVE-2026-76531
As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive int
CVE-2026-112948
### Summary In Vitest 5, Vite's `server.fs.deny` is not applied as intended on Vitest's dev servers. Depending on the s
CVE-2026-114400
Trudesk through 1.2.11 contains a missing authentication vulnerability that allows unauthenticated attackers to download
CVE-2026-112948
Vitest is a testing framework powered by Vite. From 5.0.0-beta.6 until 5.0.5, Vitest dev servers can misapply server.fs.
CVE-2026-88137
Files or directories accessible to external parties in WebDAV allows an authorized attacker to disclose information over
CVE-2026-85840
Files or directories accessible to external parties in Windows Event Viewer allows an authorized attacker to disclose in
CVE-2026-109162
Forms using FileUpload or ImageUpload elements with a custom saveToFileMount configured stored uploaded files in the def
CVE-2026-89118
SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to access restricted resources and retrieve non-criti
CVE-2026-89118
SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to access restricted resources and retrieve non-criti
CVE-2026-108938
A flaw has been found in code-projects Matrimonial System 1.0. This issue affects some unknown processing of the file db
CVE-2026-94375
The Order Export & Order Import for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in
CVE-2026-105750
### Summary When the HTML backend renders pages in a headless browser (`HTMLBackendOptions(render_page=True)`), the `en
CVE-2026-21589
This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Soft
CVE-2026-105750
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecos