A flaw was found in the Ansible Automation Platform automation-controller. When a...
CVE-2026-84719
A flaw was found in the Ansible Automation Platform automation-controller. When a WorkflowJobTemplate is copied, the dee
#severity:critical
共收录 1449 条相关情报。
← 返回所有主题A flaw was found in AWX. The container group pod_spec_override field uses an incomplete blocklist...
CVE-2026-75884
A flaw was found in AWX. The container group pod_spec_override field uses an incomplete blocklist that only restricts au
All published s2s-proxy versions through 0.2.2 are affected. In versions 0.1.16 through 0.2.2,...
CVE-2026-96770
All published s2s-proxy versions through 0.2.2 are affected. In versions 0.1.16 through 0.2.2, TLS server listeners use
OpenC3 COSMOS: Authenticated remote code execution via the user-writable config overlay (table definitions, cmd/tlm definitions, and script suites)
CVE-2026-77602
### Summary COSMOS reads configuration from a user-writable overlay (`targets_modified/`) before the read-only plugin-i
Moquette: Pattern-ACL wildcard injection (cross-tenant authorization bypass) plus a remote-unauthenticated DoS cluster, a Will-message authorization bypass, and a cross-session ...
CVE-2026-85724
moquette is reachable by untrusted MQTT clients (anonymous by default), so every byte from any client, including pre-aut
A flaw has been found in Fast FAC1203R Gigabit Edition 2.0.4. Affected by this issue is the...
CVE-2026-96257
A flaw has been found in Fast FAC1203R Gigabit Edition 2.0.4. Affected by this issue is the function copy_msg_element of
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to...
CVE-2026-18162
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to execute arbitrary code due
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated...
CVE-2026-18169
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to obtain sensi
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to...
CVE-2026-18163
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to execute arbitrary code due
A caching flaw in the toolbox-core package of the mcp-toolbox-sdk-python SDK causes the same...
CVE-2026-19202
A caching flaw in the toolbox-core package of the mcp-toolbox-sdk-python SDK causes the same Google ID token to be cache
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to...
CVE-2026-16346
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands du
IBM Concert 1.0.0 through 3.0.0 could allow a remote authenticated attacker to access or modify...
CVE-2026-17472
IBM Concert 1.0.0 through 3.0.0 could allow a remote authenticated attacker to access or modify unauthorized resources d
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated...
CVE-2026-17645
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to gain elevate
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to...
CVE-2026-17635
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to perform unauthorized actio
A server-side request forgery (SSRF) vulnerability was identified in the notebook viewer of...
CVE-2026-77987
A server-side request forgery (SSRF) vulnerability was identified in the notebook viewer of GitHub Enterprise Server. Th
A vulnerability exists in the internal administrative component of Analytics and Location Engine ...
CVE-2026-76709
A vulnerability exists in the internal administrative component of Analytics and Location Engine (ALE). Successful explo
lwIP TCP/IP Stack MQTT is vulnerable to an out-of-bounds write, which may allow an attacker to...
CVE-2026-87121
lwIP TCP/IP Stack MQTT is vulnerable to an out-of-bounds write, which may allow an attacker to gain full code execution
Home Assistant: XSS in Statistics Graph Card
CVE-2026-91130
### Summary An authenticated party can add a malicious name to any statistics-capable entity, allowing for Cross-Site Sc
lightrag-hku: No Rate Limiting on /login Endpoint Allows Brute-Force Attacks
CVE-2026-85734
### Summary The POST /login endpoint has no rate limiting, account lockout, or delay on failed attempts. An attacker can
A vulnerability was determined in Netcore NBR200V2 1.3.241127.071246. This affects an unknown...
CVE-2026-94097
A vulnerability was determined in Netcore NBR200V2 1.3.241127.071246. This affects an unknown part of the file /www/cgi-