D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1...
CVE-2026-71947
D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command inj
#severity:critical
共收录 1468 条相关情报。
← 返回所有主题D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1...
CVE-2026-71951
D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command inj
D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1...
CVE-2026-71946
D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command inj
D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1...
CVE-2026-71944
D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5_C1_202607071108 contain a command inj
The AI Copilot – Content Generator plugin for WordPress is vulnerable to authorization bypass in...
CVE-2026-14526
The AI Copilot – Content Generator plugin for WordPress is vulnerable to authorization bypass in all versions up to, and
crypto-js: Insufficient Entropy in Cryptographic Secret Generation via Vulnerable CryptoJS Dependency Chain
CVE-2026-71851
### Summary `CryptoJS.lib.WordArray.random()` in affected versions is not a cryptographically secure random number gene
Improper privilege management in the XML-RPC API of Plesk before 18.0.80, allows an authenticated...
CVE-2026-64637
Improper privilege management in the XML-RPC API of Plesk before 18.0.80, allows an authenticated reseller to obtain an
CodeIgniter: Uploaded file extension validation bypass in `is_image` and `mime_in` rules
CVE-2026-63223
### Impact This is an unsafe file upload validation vulnerability that can lead to remote code execution in vulnerable a
CodeIgniter: SQL injection in Query Builder deleteBatch() when used with where() conditions
CVE-2026-63221
### Impact A SQL injection vulnerability exists in the Query Builder's `deleteBatch()` method. When `deleteBatch()` is u
Weaver (Fanwei) E-cology 9.0 versions prior to 10.52 contain a file upload vulnerability that...
CVE-2022-4995
Weaver (Fanwei) E-cology 9.0 versions prior to 10.52 contain a file upload vulnerability that allows a remote, unauthent
Postiz is an open-source social media scheduling tool. The route that serves locally stored media...
CVE-2026-19264
Postiz is an open-source social media scheduling tool. The route that serves locally stored media joins URL-supplied pat
Joomla Extension - seblod.com - Unauthenticated path traversal in SEBLOD < 3.30.0, < 4.7.0, < 6.0...
CVE-2026-66914
Joomla Extension - seblod.com - Unauthenticated path traversal in SEBLOD < 3.30.0, < 4.7.0, < 6.0.1 - An unauthenticated
Craft CMS: Passkey login accepts replayed WebAuthn assertions
Craft CMS passkey login accepts WebAuthn requestOptions from the unauthenticated login request body and does not persist
Exposed dangerous method or function in Azure Confidential Ledger allows an authorized attacker...
CVE-2026-68823
Exposed dangerous method or function in Azure Confidential Ledger allows an authorized attacker to execute code over a n
Missing authorization in Microsoft Teams allows an unauthorized attacker to elevate privileges...
CVE-2026-65667
Missing authorization in Microsoft Teams allows an unauthorized attacker to elevate privileges over a network.
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an unauthorized attacker...
CVE-2026-70332
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing ov
Missing authentication for critical function in Microsoft Planetary Computer Pro allows an...
CVE-2026-63508
Missing authentication for critical function in Microsoft Planetary Computer Pro allows an unauthorized attacker to elev
Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over...
CVE-2026-62830
Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network.
Improper authentication in Microsoft Teams allows an authorized attacker to elevate privileges...
CVE-2026-62896
Improper authentication in Microsoft Teams allows an authorized attacker to elevate privileges over a network.
'.../...//' in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to...
CVE-2026-59115
'.../...//' in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges ove