The asVereinbase WordPress plugin before 1.1.8 does not require a valid password or a genuine...
CVE-2026-110956
The asVereinbase WordPress plugin before 1.1.8 does not require a valid password or a genuine second factor before auth
#severity:critical
共收录 1449 条相关情报。
← 返回所有主题The Prime Mover – Backup and Migration plugin for WordPress is vulnerable to PHP Object Injection...
CVE-2026-115806
The Prime Mover – Backup and Migration plugin for WordPress is vulnerable to PHP Object Injection in all versions up to,
Postiz lets a signed-in user ask the backend to run a function on one of their connected channels...
CVE-2026-115931
Postiz lets a signed-in user ask the backend to run a function on one of their connected channels. The backend did not r
Wasmtime: Bit-packing in Cranelift compiler causes silent overflow and miscompilation
CVE-2026-115889
## Summary In Wasmtime prior to v43, the Cranelift compiler backend bit-packs its SSA value indices in a way that can r
Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution
CVE-2026-112398
### Credits **Researcher**: Alex Bouffard (mixbo@pebwalker.com) ### Summary A heap buffer overflow in Pillow's FlashP
Laravel TokenGuard authentication bypass through non-string API credentials
CVE-2026-114509
Laravel's built-in TokenGuard, **when configured with a standard token-based API guard**, may be bypassed to authenticat
Echo: Rejected WebSocket upgrades can bypass Echo route-level access controls
## Impact Echo's Proxy middleware selected a raw tunnel when the client requested a WebSocket upgrade, before validatin
Relative path traversal during model archive extraction in Amazon Web Services Multi Model Server...
CVE-2026-115812
Relative path traversal during model archive extraction in Amazon Web Services Multi Model Server 1.1.11 and earlier mig
An authentication bypass vulnerability in the public onPhase/ frevvo registration form version 11...
CVE-2026-19677
An authentication bypass vulnerability in the public onPhase/ frevvo registration form version 11.0.14 allows an unauthe
The network management service on affected Kiloview E3 NDI encoder firmware fails to validate the...
CVE-2026-110243
The network management service on affected Kiloview E3 NDI encoder firmware fails to validate the network interface name
The system control service on affected Kiloview E3 NDI encoder firmware fails to sanitize the...
CVE-2026-107861
The system control service on affected Kiloview E3 NDI encoder firmware fails to sanitize the hostname parameter accepte
Improper authentication in AAD App Proxy allows an unauthorized attacker to elevate privileges...
CVE-2026-97785
Improper authentication in AAD App Proxy allows an unauthorized attacker to elevate privileges over a network.
Improper neutralization of special elements used in a command ('command injection') in Azure...
CVE-2026-105014
Improper neutralization of special elements used in a command ('command injection') in Azure Pipelines allows an unautho
Improper link resolution before file access ('link following') in VM Inspector for Azure Virtual...
CVE-2026-110063
Improper link resolution before file access ('link following') in VM Inspector for Azure Virtual Machines allows an unau
The network management service on affected Kiloview E3 NDI encoder firmware fails to sanitize one...
CVE-2026-109122
The network management service on affected Kiloview E3 NDI encoder firmware fails to sanitize one field used when config
Missing authentication for critical function in Azure Kubernetes Configuration Service allows an...
CVE-2026-83938
Missing authentication for critical function in Azure Kubernetes Configuration Service allows an unauthorized attacker t
InterSystems IRIS for Health has TLS/SSL encryption turned off by default, which may enable an...
CVE-2026-111594
InterSystems IRIS for Health has TLS/SSL encryption turned off by default, which may enable an attacker to view transmit
VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote...
CVE-2026-114625
VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privile
No description provided
CVE-2026-79874
No description provided
No description provided
CVE-2026-79867
No description provided