共收录 137 条相关情报。
← 返回所有主题CVE-2026-104908
MISP contains an improper input validation vulnerability in the decaying model import functionality. The import endpoint
CVE-2026-83557
### Summary `DefaultBaseTypeLimitingValidator` — the `PolymorphicTypeValidator` used automatically whenever `@JsonTypeIn
CVE-2026-61834
## Summary Incomplete Prototype Pollution Fix Allows Mutation of Inherited Built-in Method Objects `scim-patch` blocks
CVE-2026-55736
### Summary Ash fails to consistently strip private action arguments (those declared with `public?: false`) when a chan
CVE-2026-76086
Formie is a Craft CMS plugin for creating forms. Prior to 2.2.23 and 3.1.31, Formie's formie/integrations/form-settings
CVE-2026-76086
### Impact The control panel action `formie/integrations/form-settings` (`IntegrationsController::actionFormSettings`)
CVE-2026-76086
Formie is a Craft CMS plugin for creating forms. Prior to 2.2.23 and 3.1.31, Formie's formie/integrations/form-settings
CVE-2026-56679
### Summary The `PATCH /api/settings` endpoint writes the entire request body to persistent settings without a field whi
CVE-2026-61834
scim-patch is a library for applying SCIM patch operations. Prior to 0.9.2, navigate() reads inherited properties and as
CVE-2026-61834
scim-patch is a library for applying SCIM patch operations. Prior to 0.9.2, navigate() reads inherited properties and as
CVE-2026-93752
CSSOM through 0.5.0 contains a denial of service vulnerability in CSSStyleDeclaration.setProperty() that fails to valida
CVE-2026-61591
djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to
CVE-2026-61591
### Impact For views that opt into state snapshots, the snapshot `state_json` embedded in the client page was restored o
CVE-2026-61598
### Impact `djust.mixins.model_binding.ModelBindingMixin` provides a default `update_model` event handler and is part of
CVE-2026-92217
A vulnerability was determined in a2ui-project a2ui up to 0.10.6. This affects the function processMessages of the file
CVE-2026-72710
SPIP before 4.4.18 contains a remote code execution vulnerability in the editer_objet action where the arg parameter res
CVE-2026-85408
A vulnerability was determined in Eleveo Quality Management 9.7.0. Impacted is an unknown function of the file /enc-fwk-
CVE-2026-84645
In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, objects of types marked as storing their configuration in indepen
CVE-2026-84430
A security vulnerability has been detected in gouguoa up to 5.10.0/6.0.1. This vulnerability affects the function update
CVE-2026-83557
DefaultBaseTypeLimitingValidator is the PolymorphicTypeValidator applied automatically whenever @JsonTypeInfo is used wi