MOOS essential-moos pAntler through 10.0.1 contains a remote code execution vulnerability that...
CVE-2026-85427
MOOS essential-moos pAntler through 10.0.1 contains a remote code execution vulnerability that allows unauthenticated at
#severity:critical
共收录 1461 条相关情报。
← 返回所有主题Authentication bypass using an alternate path or channel in Microsoft Entra ID allows an...
CVE-2026-62916
Authentication bypass using an alternate path or channel in Microsoft Entra ID allows an unauthorized attacker to elevat
SiYuan: SQL injection in backlink/mention search via unescaped stored and client input (publish mode): first-order (client keyword) and second-order (stored document title) brea...
CVE-2026-72811
**CVE:** This vulnerability corresponds to [CVE-2026-72811](https://nvd.nist.gov/vuln/detail/CVE-2026-72811). ### Summa
Out of bounds write in WebGL in Google Chrome on on Android prior to 152.0.7977.82 allowed a...
CVE-2026-85050
Out of bounds write in WebGL in Google Chrome on on Android prior to 152.0.7977.82 allowed a remote attacker to execute
SiYuan: Unauthenticated SQL execution and REGEXP injection via fullTextSearchAssetContent (publish mode): reader-reachable raw SQL (method 2) and unescaped REGEXP (method 3) on ...
CVE-2026-69083
**CVE:** This vulnerability corresponds to [CVE-2026-69083](https://nvd.nist.gov/vuln/detail/CVE-2026-69083). ### Summa
SiYuan: Unauthenticated arbitrary SQL execution via searchEmbedBlock (publish mode) : reader-reachable raw statement on read-write handle, cross-notebook read/write
CVE-2026-69084
**CVE:** This vulnerability corresponds to [CVE-2026-69084](https://nvd.nist.gov/vuln/detail/CVE-2026-69084). ### Summa
OpenChoreo: Unauthenticated access to data-plane operations via OpenChoreo cluster-gateway management APIs
CVE-2026-73843
### Summary The OpenChoreo control-plane **cluster-gateway** served its caller-facing management APIs on the same networ
Omnigent: Shared Agent Bundle Overwrite Leads to Authenticated Runner RCE
CVE-2026-62674
### Summary An authenticated user with edit access to their own session can overwrite a shared/template agent by upload
Under specific conditions, an attacker can register an attacker-controlled FIDO2 credential...
CVE-2026-19117
Under specific conditions, an attacker can register an attacker-controlled FIDO2 credential against a target account and
A flaw was found in submariner. In cert-auth mode, the connection configuration is built using...
CVE-2026-66786
A flaw was found in submariner. In cert-auth mode, the connection configuration is built using free-form strings from th
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR...
CVE-2026-20279
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering t
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR...
CVE-2026-20274
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering t
A vulnerability in the Silicon One integration for Cisco Nexus 9000 Series Switches could allow...
CVE-2026-20212
A vulnerability in the Silicon One integration for Cisco Nexus 9000 Series Switches could allow an unauthenticated, remo
Description NGINX JavaScript (njs) has a vulnerability in the XML module's namespace prefix...
CVE-2026-78689
Description NGINX JavaScript (njs) has a vulnerability in the XML module's namespace prefix list parser, reachable thr
Team Password Manager before 14.184.308 fails to enforce authentication requirements in the local...
CVE-2026-84699
Team Password Manager before 14.184.308 fails to enforce authentication requirements in the local account password reset
BookStack before 26.05.4 contains a stored cross-site scripting vulnerability in the drawing...
CVE-2026-84695
BookStack before 26.05.4 contains a stored cross-site scripting vulnerability in the drawing upload endpoint that accept
Phison PS3111-S11 controller firmware versions through SBFQT1.3 expose privileged vendor unique...
CVE-2026-84696
Phison PS3111-S11 controller firmware versions through SBFQT1.3 expose privileged vendor unique commands over the ATA in
WWBN AVideo (current e01e41ecc and earlier) makes three login-time security controls depend...
CVE-2026-84479
WWBN AVideo (current e01e41ecc and earlier) makes three login-time security controls depend solely on the client-supplie
WWBN AVideo fails to validate password recovery token expiration in userRecoverPassSave.json.php,...
CVE-2026-84480
WWBN AVideo fails to validate password recovery token expiration in userRecoverPassSave.json.php, allowing attackers to
Proxmox Virtual Environment (VE) 7.0 through 8.0 contains an authentication bypass vulnerability...
CVE-2023-54391
Proxmox Virtual Environment (VE) 7.0 through 8.0 contains an authentication bypass vulnerability in libpve-access-contro