IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code due to a...
CVE-2026-17083
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflo
#severity:critical
共收录 1468 条相关情报。
← 返回所有主题ScadaLTS 2.7.8.1 exposes a server-side method that lacks authorization checks, allowing any...
CVE-2026-19656
ScadaLTS 2.7.8.1 exposes a server-side method that lacks authorization checks, allowing any authenticated user (includin
The login endpoint on the Mira cloud API accepts any format-valid string in the password field...
CVE-2026-68067
The login endpoint on the Mira cloud API accepts any format-valid string in the password field and returns a live active
The distributed Mira Android APK v4.5.15.4 allows an attacker read/write access to reproductive...
CVE-2026-67568
The distributed Mira Android APK v4.5.15.4 allows an attacker read/write access to reproductive health profiles from int
libgit2 versions v0.27.0 through v1.9.0 built with the libssh2 SSH backend (USE_SSH=libssh2)...
CVE-2026-5917
libgit2 versions v0.27.0 through v1.9.0 built with the libssh2 SSH backend (USE_SSH=libssh2) contain a shell command inj
An unauthenticated command injection vulnerability was identified in the GMS Dispatcher Service...
CVE-2026-66147
An unauthenticated command injection vulnerability was identified in the GMS Dispatcher Service in GMS 9.5.1 and earlier
DB-GPT v0.8.1 contains an unauthenticated path traversal vulnerability that allows remote...
CVE-2026-73034
DB-GPT v0.8.1 contains an unauthenticated path traversal vulnerability that allows remote attackers to write arbitrary f
PapersGPT for Zotero 0.6.1 contains a remote code execution vulnerability that allows attackers...
CVE-2026-73032
PapersGPT for Zotero 0.6.1 contains a remote code execution vulnerability that allows attackers to execute arbitrary Jav
The Formidable Digital Signatures plugin for WordPress is vulnerable to file deletion due to...
CVE-2026-16230
The Formidable Digital Signatures plugin for WordPress is vulnerable to file deletion due to insufficient file path vali
DSPy 3.3.0b1 contains a file exfiltration vulnerability in the Image and Audio output field...
CVE-2026-72742
DSPy 3.3.0b1 contains a file exfiltration vulnerability in the Image and Audio output field adapters that allows attacke
An issue in MongoDB Server's intra-cluster connection setup could allow a party with suitable...
CVE-2026-18691
An issue in MongoDB Server's intra-cluster connection setup could allow a party with suitable network access to influenc
SeaweedFS: Unauthenticated SSRF with response read-back via VolumeServer.FetchAndWriteNeedle
CVE-2026-73080
### Impact `VolumeServer.FetchAndWriteNeedle` fetches a caller-supplied remote endpoint and writes the response into a n
A flaw was found in Feast. The system improperly deserializes user-defined functions (UDFs)...
CVE-2026-18948
A flaw was found in Feast. The system improperly deserializes user-defined functions (UDFs) stored in its registry, whic
A flaw was found in the MaaS API. This vulnerability allows any pod within the cluster to bypass...
CVE-2026-14450
A flaw was found in the MaaS API. This vulnerability allows any pod within the cluster to bypass the Kuadrant AuthPolicy
An unauthenticated SQL injection vulnerability exists in the web server of TBEA TLogger V2.1.0...
CVE-2025-13294
An unauthenticated SQL injection vulnerability exists in the web server of TBEA TLogger V2.1.0.0B0.0.0.0. Multiple HTTP
TBEA TLogger V2.1.0.0B0.0.0.0 contains an authentication bypass in its web server. After a user...
CVE-2025-15681
TBEA TLogger V2.1.0.0B0.0.0.0 contains an authentication bypass in its web server. After a user has previously authentic
A hard-coded or default root account credential in TBEA TLogger V2.1.0.0B0.0.0.0 allows an...
CVE-2025-13293
A hard-coded or default root account credential in TBEA TLogger V2.1.0.0B0.0.0.0 allows an unauthenticated remote attack
Improper restriction of XML external entity reference vulnerability (unauthenticated) in...
CVE-2026-16626
Improper restriction of XML external entity reference vulnerability (unauthenticated) in Jaspersoft JasperReports Server
MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in...
CVE-2026-71993
MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the openvpn function tha
MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in...
CVE-2026-71989
MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the porTrigger function