IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0...
CVE-2026-19646
IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 could allow a remote
#severity:critical
共收录 1461 条相关情报。
← 返回所有主题Traefik HTTP/3 Backend NTLM Connection Reuse
CVE-2026-88007
## Summary Traefik's HTTP/3 request path did not initialize the connection-scoped backend transport holder that isolate
rclone serve s3: --auth-proxy without --auth-key authenticates nobody - full SigV4 signature bypass
CVE-2026-88018
### Summary `rclone serve s3`'s handler chain, when `--auth-proxy` is configured, is (outermost first): `authPairMiddlew
rclone: RC per-server auth-proxy bypass
CVE-2026-88044
## Summary `serve/start` accepts protocol options in a per-server `proxyOpt` object. The FTP and S3 RC adapters parse t
Forgejo before 16.0.4 allows remote code execution via a crafted template repository because...
CVE-2026-89094
Forgejo before 16.0.4 allows remote code execution via a crafted template repository because template expansion on files
OmniRoute ACP Custom-Agent Remote Code Execution (RCE)
CVE-2026-88062
## 2. Summary `POST /api/acp/agents` registers a custom ACP agent. The endpoint accepts user-controlled `binary` and `v
Astro: Remote code execution through AVIF image optimization
A vulnerability in `libheif`, used by the default Sharp image service in Astro, can lead to remote code execution when a
Next.js: Unauthenticated Remote Code Execution in Image Optimization API when AVIF files are used
A vulnerability in the underlying `libheif` library used by `sharp` which Next.js uses for image optimization can lead t
@sap/cds-mtxs NPM library does not perform sufficient checks on certain functionality used in...
CVE-2026-76969
@sap/cds-mtxs NPM library does not perform sufficient checks on certain functionality used in multitenant CAP applicatio
SAP GUI for Java does not correctly enforce the trust level policy for certain functions invoked...
CVE-2026-66768
SAP GUI for Java does not correctly enforce the trust level policy for certain functions invoked from a connected backen
SAP NetWeaver Message Server does not sufficiently validate the authenticity of internal...
CVE-2026-58240
SAP NetWeaver Message Server does not sufficiently validate the authenticity of internal application server components d
A memory safety vulnerability exists in the Extended Passport Protocol (EPP) processing library....
CVE-2026-44756
A memory safety vulnerability exists in the Extended Passport Protocol (EPP) processing library. Under specific conditio
knowns versions before 0.30.0 serve the management API without authentication on all network...
CVE-2026-86543
knowns versions before 0.30.0 serve the management API without authentication on all network interfaces by default, with
Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template...
CVE-2026-75650
Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability tha
In JetBrains YouTrack before 2025.3.161254, 2026.1.14042 improper authentication in YouTrack...
CVE-2026-86478
In JetBrains YouTrack before 2025.3.161254, 2026.1.14042 improper authentication in YouTrack Helpdesk allowed unauthent
In JetBrains Hub before 2026.2.52442 an unauthenticated attacker could register a trusted service...
CVE-2026-86480
In JetBrains Hub before 2026.2.52442 an unauthenticated attacker could register a trusted service and gain superuser pri
A flaw has been found in Tenda CP3 27.5.57.101. The impacted element is the function CAutoAddWifi...
CVE-2026-86152
A flaw has been found in Tenda CP3 27.5.57.101. The impacted element is the function CAutoAddWifi::ThreadProc of the fil
The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Authentication Bypass to...
CVE-2026-75816
The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Authentication Bypass to Account Takeover in all
A vulnerability has been found in Tenda CP3 27.5.57.101. This affects the function CRedirServer:...
CVE-2026-86153
A vulnerability has been found in Tenda CP3 27.5.57.101. This affects the function CRedirServer::SetRedirectEnable of th
The MemberDash plugin for WordPress is vulnerable to Insecure Direct Object Reference in all...
CVE-2026-16310
The MemberDash plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and includi