Keysight IxChariot Endpoint before 9.5.102 contains a heap-based buffer overflow. An...
CVE-2017-20241
Keysight IxChariot Endpoint before 9.5.102 contains a heap-based buffer overflow. An unauthenticated remote attacker can
#severity:critical
共收录 1468 条相关情报。
← 返回所有主题In multiple functions of vpu_ioctl.c, there is a possible use after free due to a use after free....
CVE-2026-0163
In multiple functions of vpu_ioctl.c, there is a possible use after free due to a use after free. This could lead to rem
Flowise: Unauthenticated OAuth2 token refresh endpoint returns access tokens — enables token theft for any connected service
CVE-2026-70478
### Summary The OAuth2 token refresh endpoint (`POST /api/v1/oauth2-credential/refresh/:credentialId`) is in `WHITELIST
Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability
CVE-2026-70477
-- ABSTRACT ------------------------------------- Trend Micro's Zero Day Initiative has identified a vulnerability affe
NVIDIA Dynamo for Linux contains a vulnerability in the multimodal serving topology, where an...
CVE-2026-24254
NVIDIA Dynamo for Linux contains a vulnerability in the multimodal serving topology, where an attacker could cause an ou
Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could...
CVE-2026-48333
Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in privilege esca
Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability...
CVE-2026-48331
Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in priv
Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used...
CVE-2026-48326
Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL
Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements Used...
CVE-2026-48323
Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements Used in a Template Engine vul
Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Directives in...
CVE-2026-48317
Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Directives in Dynamically Evaluated Code ('Eva
Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used...
CVE-2026-48330
Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL
A vulnerability in Tenable Sensor Proxy allows a remote attacker to execute code with elevated...
CVE-2026-18667
A vulnerability in Tenable Sensor Proxy allows a remote attacker to execute code with elevated privileges by inducing an
Emlog Pro through 2.6.23 contains a disabled TLS certificate validation vulnerability in include...
CVE-2026-67598
Emlog Pro through 2.6.23 contains a disabled TLS certificate validation vulnerability in include/service/ai.php that all
osTicket 1.18.3 generates API keys using a predictable construction based on MD5 hashing. The use...
CVE-2026-38447
osTicket 1.18.3 generates API keys using a predictable construction based on MD5 hashing. The use of MD5, combined with
Sequelize: SQL Injection (Oracle DB)
CVE-2026-69240
### Summary SQL Injection is possible with strings only **if dialect is set to `oracle`**. The vulnerability was confirm
In Bouncy Castle for Java before 1.85, Stapled OCSP response accepted without binding to the...
CVE-2026-58062
In Bouncy Castle for Java before 1.85, Stapled OCSP response accepted without binding to the checked certificate. This i
In Bouncy Castle for Java before 1.85, MTI/A0 DH agreement exponentiates unvalidated peer value....
CVE-2026-59650
In Bouncy Castle for Java before 1.85, MTI/A0 DH agreement exponentiates unvalidated peer value. This issue also affects
In Bouncy Castle for Java before 1.85, Name Constraints bypass via trailing dot in rfc822Name and...
CVE-2026-8763
In Bouncy Castle for Java before 1.85, Name Constraints bypass via trailing dot in rfc822Name and URI. This issue also a
In Bouncy Castle for Java before 1.85, JSSE hostname verifier CN-fallback enabled by default...
CVE-2026-59638
In Bouncy Castle for Java before 1.85, JSSE hostname verifier CN-fallback enabled by default despite documented opt-in.
better-auth (npm) before 1.4.2 allows an external request to configure baseURL when it is not...
CVE-2025-71401
better-auth (npm) before 1.4.2 allows an external request to configure baseURL when it is not otherwise defined (e.g., B