websocket-driver: Message corruption via abuse of protocol length headers
CVE-2026-54466
### Impact The frame format in draft versions of the WebSocket protocol includes a length header that allows an arbitra
#severity:critical
共收录 1468 条相关情报。
← 返回所有主题MantisBT: Reflected XSS in admin/install.php via unescaped printf
CVE-2026-52881
MantisBT 2.28.3 and earlier contains six reflected XSS injection points in `/admin/install.php`. User-supplied parameter
MantisBT: Reflected XSS in admin/install.php
CVE-2026-52847
MantisBT 2.28.3 and earlier contains six reflected XSS injection points in `/admin/install.php`. User-supplied parameter
An Improper Validation of Integrity Check Value and Improper Certificate Validation in certain...
CVE-2026-13385
An Improper Validation of Integrity Check Value and Improper Certificate Validation in certain ASUS router models allows
Illustrator is affected by an Improper Input Validation vulnerability that could result in...
CVE-2026-48334
Illustrator is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in t
ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path...
CVE-2026-48319
ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerabilit
ColdFusion is affected by an Improper Neutralization of Special Elements used in an SQL Command (...
CVE-2026-48324
ColdFusion is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulner
ColdFusion is affected by a Missing Authentication for Critical Function vulnerability that could...
CVE-2026-48325
ColdFusion is affected by a Missing Authentication for Critical Function vulnerability that could result in arbitrary co
ColdFusion is affected by an Improper Control of Generation of Code ('Code Injection')...
CVE-2026-48322
ColdFusion is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result i
ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary...
CVE-2026-48327
ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the
ColdFusion is affected by an Incorrect Authorization vulnerability that could result in privilege...
CVE-2026-48321
ColdFusion is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacke
ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path...
CVE-2026-48318
ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerabilit
ColdFusion is affected by an Improper Input Validation vulnerability that could result in...
CVE-2026-48284
ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in th
Use after free in Core in Google Chrome on Windows prior to 150.0.7871.125 allowed a remote...
CVE-2026-15773
Use after free in Core in Google Chrome on Windows prior to 150.0.7871.125 allowed a remote attacker to potentially perf
FacturaScripts: Path traversal in UploadedFile::move() via getClientOriginalName() — arbitrary file write outside MyFiles/ leading to RCE
## Summary `FacturaScripts\Core\UploadedFile::move($destiny, $destinyName)` concatenates `$destiny` and `$destinyName`
TidGi Desktop Remote Code Execution via Malicious TiddlyWiki Repository Import — Tiddler Startup Module Auto-Execution
## Description TidGi Desktop through 0.13.0 contains a critical remote code execution vulnerability exploitable via a s
n8n-MCP: Cross-tenant access to workflow version backups in multi-tenant HTTP deployments
CVE-2026-54052
## Impact In multi-tenant HTTP deployments — where a single n8n-mcp server serves several tenants — the locally stored
Anyquery: Arbitrary File Write (AFW) which could lead to Remote Code Execution (RCE) via Unrestricted ATTACH DATABASE in Server Mode
CVE-2026-50006
## Summary Anyquery's `server` mode does not disable or restrict native SQLite disk manipulation commands. Unauthenticat
SAP Commerce Cloud could retain a sample OAuth2 client with publicly documented sample...
CVE-2026-44761
SAP Commerce Cloud could retain a sample OAuth2 client with publicly documented sample credentials originating from samp
SAP NetWeaver Application Server ABAP allows an authenticated attacker to leverage logical errors...
CVE-2026-44747
SAP NetWeaver Application Server ABAP allows an authenticated attacker to leverage logical errors in memory management t