共收录 63 条相关情报。
← 返回所有主题CVE-2026-119148
Incomplete string validation in AWS aws-nitro-enclaves-sdk-c before 0.4.6 may allow a third party to impersonate the AWS
CVE-2026-116016
yudao-cloud through 2026.09 contains an authorization bypass vulnerability that allows authenticated users to evade row-
CVE-2026-114617
Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.0, OpenIDMixin.parse_id_token()
CVE-2026-50106
When NLnet Labs Unbound up to and including version 1.26.1 is configured with both a root trust anchor and an additional
CVE-2026-111748
### Summary An attacker sending an absolute-form request can spoof the scheme used. ### Impact If user code depends o
CVE-2026-83522
Reliance on untrusted inputs in a security decision in Windows IKE Extension allows an unauthorized attacker to perform
CVE-2026-105458
GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4
CVE-2026-105458
GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4
CVE-2026-108903
pH7Builder (pH7 Social Dating CMS) before 19.3.0 contains a CAPTCHA bypass vulnerability that allows unauthenticated att
CVE-2026-108903
pH7Builder (pH7 Social Dating CMS) before 19.3.0 contains a CAPTCHA bypass vulnerability that allows unauthenticated att
CVE-2026-108903
pH7Builder (pH7 Social Dating CMS) before 19.3.0 contains a CAPTCHA bypass vulnerability that allows unauthenticated att
CVE-2026-103923
### Impact KaTeX can act as a read-side prototype pollution gadget in applications where `Object.prototype` has already
CVE-2026-103923
KaTeX is a fast, easy-to-use JavaScript library for TeX math rendering on the web. From 0.11.0 until 0.18.2, KaTeX uses
CVE-2026-103923
KaTeX is a fast, easy-to-use JavaScript library for TeX math rendering on the web. From 0.11.0 until 0.18.2, KaTeX uses
CVE-2026-103267
Ghost versions before 6.62.0 contain an authentication bypass vulnerability in staff invite acceptance that allows users
CVE-2026-103267
Ghost versions before 6.62.0 contain an authentication bypass vulnerability in staff invite acceptance that allows users
CVE-2026-76147
A path traversal (ZIP Slip) vulnerability caused by insufficient authorization and integrity verification in the agent u
CVE-2026-102117
On deployments where the remote-support capability is licensed and enabled, an authenticated System Administrator who al
CVE-2026-101131
A vulnerability was identified in deepseek-ai deepseek-harness up to 0.1.5-rc.3. Impacted is an unknown function of the
CVE-2026-101079
A vulnerability was found in agentverus agentverus-scanner up to 0.8.1. Affected by this vulnerability is the function i