AzuraCast exposes the Liquidsoap custom configuration fields through an endpoint that does not...
CVE-2026-76836
AzuraCast exposes the Liquidsoap custom configuration fields through an endpoint that does not require the permission gu
#cwe-94
共收录 1468 条相关情报。
← 返回所有主题AzuraCast exposes the Liquidsoap custom configuration fields through an endpoint that does not require the permission guarding them. The backend_config property in backend/src/E...
CVE-2026-76836
AzuraCast exposes the Liquidsoap custom configuration fields through an endpoint that does not require the permission gu
A vulnerability was found in RPM's rpmbuild tarball processing. When processing a crafted source archive, the getTarSpec() function in tools/rpmbuild.cc passes an attacker-contr...
CVE-2026-78367
A vulnerability was found in RPM's rpmbuild tarball processing. When processing a crafted source archive, the getTarSpec
Xinference loads models with Hugging Face remote code execution unconditionally enabled, and before version 2.12.0 exposes no setting to disable it. Six loader call sites pass t...
CVE-2026-76841
Xinference loads models with Hugging Face remote code execution unconditionally enabled, and before version 2.12.0 expos
A vulnerability has been found in Piwigo 16.3.0. This impacts an unknown function of the component Public Authentication Page. Such manipulation of the argument lang leads to cr...
CVE-2026-78187
A vulnerability has been found in Piwigo 16.3.0. This impacts an unknown function of the component Public Authentication
A weakness has been identified in ractivejs ractive up to 1.4.4. Impacted is the function Ractive#set of the component Keypath Handler. Executing a manipulation can lead to impr...
CVE-2026-78181
A weakness has been identified in ractivejs ractive up to 1.4.4. Impacted is the function Ractive#set of the component K
A security flaw has been discovered in alibaba-fusion next up to 1.27.34. This issue affects the function ConfigProvider.getContextProps of the file components/dialog/index.tsx ...
CVE-2026-78180
A security flaw has been discovered in alibaba-fusion next up to 1.27.34. This issue affects the function ConfigProvider
A vulnerability was identified in rexrainbow phaser3-rex-notes up to 1.80.17. This vulnerability affects the function SetValue of the file plugins/utils/object/SetValue.js of th...
CVE-2026-78179
A vulnerability was identified in rexrainbow phaser3-rex-notes up to 1.80.17. This vulnerability affects the function Se
The Velociraptor verify() VQL function allows a user to verify an artifact for syntatic and other issues. Due to an implementation fault in this VQL function, the global artifac...
CVE-2026-19200
The Velociraptor verify() VQL function allows a user to verify an artifact for syntatic and other issues. Due to an impl
Velociraptor Analyst overwrites live built-in artifacts through verify()
CVE-2026-19200
The Velociraptor verify() VQL function allows a user to verify an artifact for syntatic and other issues. Due to an impl
A vulnerability was determined in jQWidgets up to 24.0.1. This affects the function JQXLite.extend/jqxBaseFramework.extend of the file jqwidgets/jqx-all.js. This manipulation ca...
CVE-2026-78178
A vulnerability was determined in jQWidgets up to 24.0.1. This affects the function JQXLite.extend/jqxBaseFramework.exte
alibaba-fusion next deepMerge index.tsx ConfigProvider.getContextProps prototype pollution
CVE-2026-78180
A security flaw has been discovered in alibaba-fusion next up to 1.27.34. This issue affects the function ConfigProvider
A security flaw has been discovered in provectus kafka-ui up to 0.7.2. The affected element is the function executeSmartFilterTest of the file kafka-ui-api/src/main/java/com/pro...
CVE-2026-78166
A security flaw has been discovered in provectus kafka-ui up to 0.7.2. The affected element is the function executeSmart
provectus kafka-ui Groovy Code MessagesController.java executeSmartFilterTest code injection
CVE-2026-78166
A security flaw has been discovered in provectus kafka-ui up to 0.7.2. The affected element is the function executeSmart
A vulnerability was found in SourceCodester Stock Management System 1.0. This issue affects some unknown processing of the file /php_action/getOrderReport.php. Performing a mani...
CVE-2026-78060
A vulnerability was found in SourceCodester Stock Management System 1.0. This issue affects some unknown processing of t
A vulnerability has been found in SourceCodester Stock Management System 1.0. This vulnerability affects unknown code of the file /php_action/printOrder.php. Such manipulation o...
CVE-2026-78059
A vulnerability has been found in SourceCodester Stock Management System 1.0. This vulnerability affects unknown code of
A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality of the file /BSIT2...
CVE-2026-78055
A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vul
A weakness has been identified in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function of the file /BSIS1.php. Executing a manipulation of the a...
CVE-2026-78054
该漏洞影响 SourceCodester Class and Exam Timetabling System 1.0。问题存在于 /BSIS1.php 文件中一个未明确命名的函数，通过对 course 参数进行特定操作可触发跨站脚本（XSS
Joomla Extension - fabrikar.com - heredoc terminator breakout in the calc element in Fabrik < 4.7.2 - The onUpdateComment endpoint did not perform any access checks.
CVE-2026-77992
Joomla Extension - fabrikar.com - heredoc terminator breakout in the calc element in Fabrik < 4.7.2 - The onUpdateCommen
Joomla Extension - fabrikar.com - Remote code execution via image element in Fabrik < 4.7.2.
CVE-2026-76605
Joomla Extension - fabrikar.com - Remote code execution via image element in Fabrik < 4.7.2.