共收录 91 条相关情报。
← 返回所有主题CVE-2026-73705
An arbitrary file write vulnerability in the API of HPE Networking Fabric Composer could allow an authenticated low priv
CVE-2026-82020
Hermes Agent 0.16.0 prior to 0.17.0 contains an improper path restriction vulnerability that allows attackers who can in
CVE-2026-75889
Grafana Alloy’s prometheus.operator.servicemonitors component allows a user who can create or modify ServiceMonitor reso
CVE-2026-53580
Trilium is an open-source hierarchical note-taking application. In versions prior to 0.104.0, the automatic image-downlo
CVE-2026-53580
Trilium is an open-source hierarchical note-taking application. In versions prior to 0.104.0, the automatic image-downlo
CVE-2026-75464
OneNav 1.2.4 contains an authenticated arbitrary file deletion vulnerability via import_link().
CVE-2026-78051
CVE-2026-78051 是 alexta69 MeTube 项目（版本至 2026.06.10）中存在的一个信息泄露漏洞。该漏洞位于 /download/.metube/cookies.txt 文件的 Cookie 文件处理组件中，攻
CVE-2026-54457
TensorZero is an open-source LLMOps platform that unifies an LLM gateway, observability, evaluation, optimization, and e
CVE-2026-63042
Files or Directories Accessible to External Parties vulnerability in Apache InLong. Any user who can authenticate to the
CVE-2026-63040
Files or Directories Accessible to External Parties vulnerability in Apache InLong. StreamSource performs no authorizati
CVE-2026-63490
Handlebars.java provides logic-less and semantic Mustache templates with Java. Prior to 4.5.3, com.github.jknack.handleb
CVE-2026-76799
A weakness has been identified in code-projects Login Registration System 1.0. This affects an unknown function of the f
CVE-2026-19987
CVE-2026-19987 是 SourceCodester Best Employee Management System 1.0 中存在的一个信息泄露漏洞。该漏洞影响路径 /assets/uploadImage/Profile/ 下的
CVE-2026-19903
A vulnerability has been found in SourceCodester Online Clothing Store 1.0. This affects an unknown part of the file /db
CVE-2026-8715
Vault Secrets Operator 1.3.0 up to 1.4.1 is vulnerable to an arbitrary file read and credential exfiltration issue in th
CVE-2026-8715
Vault Secrets Operator 1.3.0 up to 1.4.1 is vulnerable to an arbitrary file read and credential exfiltration issue in th
CVE-2026-8715
Vault Secrets Operator 1.3.0 up to 1.4.1 is vulnerable to an arbitrary file read and credential exfiltration issue in th
CVE-2026-73653
Vitest is a testing framework powered by Vite. Prior to versions 3.2.7, 4.1.10, and 5.0.0-beta.6, Browser Mode provider
CVE-2026-14849
The Paid Membership Subscriptions WordPress plugin before 3.0.7 does not protect the member and payment export files it
CVE-2026-11841
An attacker may perform unauthenticated read and write operations on sensitive filesystem areas via the AppEngine Fileac