rsync before 3.5.0 contains an improper path handling vulnerability that allows a malicious sender to expand the scope of --delete operations beyond the intended destination sub...

CVE-2026-53789

rsync before 3.5.0 contains an improper path handling vulnerability that allows a malicious sender to expand the scope o

历史摘要 · 未重新核验 · NVD

The Mira cloud API accepts the firmware version reported by the companion app as authoritative...

CVE-2026-64934

The Mira cloud API accepts the firmware version reported by the companion app as authoritative for a given device, witho

历史摘要 · 未重新核验 · GitHub Advisory

The Mira cloud API accepts the firmware version reported by the companion app as authoritative for a given device, without independently attesting the version from the device it...

CVE-2026-64934

The Mira cloud API accepts the firmware version reported by the companion app as authoritative for a given device, witho

历史摘要 · 未重新核验 · NVD

An issue in MongoDB Server's Atlas Vector Search feature could allow an authenticated user with...

CVE-2026-18705

An issue in MongoDB Server's Atlas Vector Search feature could allow an authenticated user with read access to one view

历史摘要 · 未重新核验 · GitHub Advisory

Snipe-IT before 8.6.0 contains an authorization bypass (insecure direct object reference) in the asset checkout-request cancellation endpoint. The cancel_by_admin and requesting...

CVE-2026-19579

Snipe-IT before 8.6.0 contains an authorization bypass (insecure direct object reference) in the asset checkout-request

历史摘要 · 未重新核验 · NVD

An issue in MongoDB Server's Atlas Vector Search feature could allow an authenticated user with read access to one view to retrieve documents from a different, protected view ov...

CVE-2026-18705

An issue in MongoDB Server's Atlas Vector Search feature could allow an authenticated user with read access to one view

历史摘要 · 未重新核验 · NVD

SAP Approuter does not sufficiently validate tenant context in inbound requests. An unauthenticated attacker could send specially crafted requests to spoof the tenant context un...

CVE-2026-58239

SAP Approuter does not sufficiently validate tenant context in inbound requests. An unauthenticated attacker could send

历史摘要 · 未重新核验 · NVD

IBM Langflow OSS 1.0.0 through 1.10.3 Langflow allows remote authenticated attackers to bypass localhost-only restrictions and write arbitrary MCP server configurations to IDE c...

CVE-2026-9077

IBM Langflow OSS 1.0.0 through 1.10.3 Langflow allows remote authenticated attackers to bypass localhost-only restrictio

历史摘要 · 未重新核验 · NVD

Telenia Software TVox 26.5.3 and prior 26.x versions, and 24.9.21 and prior 24.x versions, contain an authentication bypass vulnerability in set_env.php where the redirectToLogi...

CVE-2026-64827

Telenia Software TVox 26.5.3 and prior 26.x versions, and 24.9.21 and prior 24.x versions, contain an authentication byp

历史摘要 · 未重新核验 · NVD

An authenticated user with low privileges may be able to perform unauthorized reads and writes on data protected by role-based query-level access controls, due to insufficient v...

CVE-2026-13059

An authenticated user with low privileges may be able to perform unauthorized reads and writes on data protected by role

历史摘要 · 未重新核验 · NVD

Keycloak provides a mechanism called Client Policies to enforce security requirements on clients,...

CVE-2026-16093

Keycloak provides a mechanism called Client Policies to enforce security requirements on clients, such as requiring them

历史摘要 · 未重新核验 · GitHub Advisory

Keycloak provides a mechanism called Client Policies to enforce security requirements on clients, such as requiring them to use signed JWTs for authentication. A flaw was discov...

CVE-2026-16093

Keycloak provides a mechanism called Client Policies to enforce security requirements on clients, such as requiring them

历史摘要 · 未重新核验 · NVD

Blocky DNSSEC validation bypass and validation-cache scope pollution

## Summary Blocky accepts and caches forged DNS answers while `dnssec.validate: true` is enabled. The issue has two rel

历史摘要 · 未重新核验 · GitHub Advisory

pam_usb provides hardware authentication for Linux using removable media. In versions prior to 0.9.2, getenv() environment variables XRDP_SESSION, DISPLAY and TMUX allow enviro...

CVE-2026-48980

pam_usb provides hardware authentication for Linux using removable media. In versions prior to 0.9.2, getenv() environm

历史摘要 · 未重新核验 · NVD

OpenClaw before 2026.5.7 contains a sender policy bypass vulnerability in BlueBubbles that allows...

CVE-2026-53860

OpenClaw before 2026.5.7 contains a sender policy bypass vulnerability in BlueBubbles that allows participants to match

历史摘要 · 未重新核验 · GitHub Advisory

OpenClaw before 2026.5.7 contains a sender policy bypass vulnerability in BlueBubbles that allows participants to match allowlist entries through conversation metadata rather th...

CVE-2026-53860

OpenClaw before 2026.5.7 contains a sender policy bypass vulnerability in BlueBubbles that allows participants to match

历史摘要 · 未重新核验 · NVD

The connection confirmation pop-up of a specific feature in the PcSuite can be bypassed.

CVE-2026-12058

The connection confirmation pop-up of a specific feature in the PcSuite can be bypassed.

历史摘要 · 未重新核验 · NVD

SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice mo...

CVE-2026-44649

SillyTavern is a locally installed user interface that allows users to interact with text generation large language mode

历史摘要 · 未重新核验 · NVD

e107 is a content management system (CMS). Prior to 2.3.4, a Host Header Injection vulnerability in the password reset page allows attackers to manipulate the Host header to gen...

CVE-2026-43935

e107 is a content management system (CMS). Prior to 2.3.4, a Host Header Injection vulnerability in the password reset p

历史摘要 · 未重新核验 · NVD

SillyTavern has Authentication Bypass via SSO Header Injection

CVE-2026-44649

## Resolution SillyTavern 1.18.0 now includes a configuration option to limit which IP addresses can authorize using SS

历史摘要 · 未重新核验 · GitHub Advisory