SiYuan versions before v3.7.4 fail to validate or escape annotation fields written to disk by the...
CVE-2026-73041
SiYuan versions before v3.7.4 fail to validate or escape annotation fields written to disk by the setFileAnnotation endp
#severity:critical
共收录 1468 条相关情报。
← 返回所有主题The Link Library plugin for WordPress is vulnerable to arbitrary file deletion due to...
CVE-2026-18855
The Link Library plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation
The Pods – Custom Content Types and Fields plugin for WordPress is vulnerable to Privilege...
CVE-2026-19598
The Pods – Custom Content Types and Fields plugin for WordPress is vulnerable to Privilege Escalation via Authorization
Laravel Socialite's Facebook provider contains an authentication bypass vulnerability that allows...
CVE-2026-73683
Laravel Socialite's Facebook provider contains an authentication bypass vulnerability that allows unauthenticated attack
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary CL...
CVE-2026-17186
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary CL commands due to improper ne
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to write files to arbitrary...
CVE-2026-17181
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to write files to arbitrary locations due to path t
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to bypass authentication and...
CVE-2026-17182
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to bypass authentication and obtain or alter sensit
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary code...
CVE-2026-17184
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary code due to external control o
Joomla Extension - icagenda.com - Unauthenticated SQL injection in iCagenda < 4.0.0-4.0.11 -...
CVE-2026-67365
Joomla Extension - icagenda.com - Unauthenticated SQL injection in iCagenda < 4.0.0-4.0.11 - Unauthenticated SQL injecti
MindsDB Minds Platform version 26.1.0 and earlier contains an unauthenticated remote code...
CVE-2026-73678
MindsDB Minds Platform version 26.1.0 and earlier contains an unauthenticated remote code execution vulnerability that a
A critical OS command injection vulnerability has been identified in the Haiwell IoT Cloud HMI...
CVE-2026-19188
A critical OS command injection vulnerability has been identified in the Haiwell IoT Cloud HMI Gateway product. The vul
The vulnerability, if exploited, could allow an authenticated miscreant with "DNA Authority -...
CVE-2025-7639
The vulnerability, if exploited, could allow an authenticated miscreant with "DNA Authority - Operator" privilege to ta
A command injection vulnerability exists in Security Center where a remote, unauthenticated...
CVE-2026-19682
A command injection vulnerability exists in Security Center where a remote, unauthenticated attacker could exploit this
An authenticated command injection vulnerability exists in Security Center related to file upload...
CVE-2026-19681
An authenticated command injection vulnerability exists in Security Center related to file upload processing. An attacke
A remote code execution vulnerability exists in Tenable Security Center's report generation...
CVE-2026-19626
A remote code execution vulnerability exists in Tenable Security Center's report generation functionality. An authentica
Budibase before 3.40.0 contains an unauthenticated SQL injection vulnerability in webhook...
CVE-2026-72851
Budibase before 3.40.0 contains an unauthenticated SQL injection vulnerability in webhook-triggered automations with EXE
luci-app-lxc contains an ACL inconsistency vulnerability that allows low-privileged authenticated...
CVE-2026-72842
luci-app-lxc contains an ACL inconsistency vulnerability that allows low-privileged authenticated LuCI users to access b
Budibase before 3.40.0 fails to properly sanitize S3 object keys, allowing authenticated builders...
CVE-2026-72850
Budibase before 3.40.0 fails to properly sanitize S3 object keys, allowing authenticated builders to upload files with t
luci-app-openvpn fails to properly validate the instance_name2 parameter during file upload,...
CVE-2026-72841
luci-app-openvpn fails to properly validate the instance_name2 parameter during file upload, allowing authenticated user
filebrowser through 2.63.16 fails to properly restrict scope and permissions when self-signup is...
CVE-2026-72839
filebrowser through 2.63.16 fails to properly restrict scope and permissions when self-signup is enabled with default Cr