共收录 135 条相关情报。
← 返回所有主题CVE-2026-73549
Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4,
CVE-2026-94105
NivoCart through 2.4.0 contains a destructive configuration write vulnerability in the admin password reset controller t
CVE-2026-94105
NivoCart through 2.4.0 contains a destructive configuration write vulnerability in the admin password reset controller t
CVE-2026-94105
NivoCart through 2.4.0 contains a destructive configuration write vulnerability in the admin password reset controller t
CVE-2026-93387
Improper state validation in Skia in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to obtain cross-orig
CVE-2026-93387
Improper state validation in Skia in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to obtain cross-orig
CVE-2026-91733
Improper state validation in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised
CVE-2026-91733
Improper state validation in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised
CVE-2026-65838
Skipper is an HTTP router and reverse proxy for service composition. Prior to 0.27.35, the opaAuthorizeRequestWithBody f
CVE-2026-87012
# Any authenticated user can suppress calendar alerts instance-wide via a non-numeric alert value ## Summary Calendar
CVE-2026-87012
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.0 until 0.11.1, backend/o
CVE-2026-87012
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.0 until 0.11.1, backend/o
CVE-2026-87656
Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass sy
CVE-2026-87645
Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass sy
CVE-2026-73314
XenForo before 2.3.13 contains a signature verification logic error in the PayPal REST webhook handler that allows unaut
CVE-2026-85014
undici's experimental WebSocketStream client crashes the whole Node.js process when a remote peer closes the TCP connect
CVE-2026-56812
### Summary The Phoenix JavaScript presence client (`assets/js/phoenix/presence.js`) tests whether a presence already e
CVE-2026-55484
ALOS HTTP is a Linux-first Go web framework and application server built around a custom networking stack. Prior to 0.0.
CVE-2026-55484
### Summary A single unauthenticated HTTP request to a path starting with `?` (e.g. `GET ? HTTP/1.1`) crashes the entire
CVE-2026-79073
Improper state validation in Parser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially exe