Out of bounds write in Tint in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to...
CVE-2026-14392
Out of bounds write in Tint in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a s
#severity:critical
共收录 1468 条相关情报。
← 返回所有主题Ghost: Cache-poisoning XSS in Ghost frontend via x-ghost-preview header
CVE-2026-53943
### Impact When Ghost is behind a shared caching layer that results in cached content being shared between different vi
Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02) contains an unauthenticated OS command...
CVE-2026-58457
Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02) contains an unauthenticated OS command injection vulnerability
Rancher has Privilege Escalation from Project Owner to Host
CVE-2026-41052
### Impact A vulnerability has been identified in Rancher Manager that allows users assigned the Project Owner role to
Rancher Fleet vulnerable to cross namespace secret disclosure via unvalidated `valuesFrom` references in Helm Deployer
CVE-2026-44935
### Impact A vulnerability in Fleet for Rancher Manager affects multi-tenancy environments where different tenants share
Rancher vulnerable to command injection through unsanitized YAML parameter
CVE-2026-44939
### Impact A critical command injection vulnerability has been identified in the Rancher Manager cluster import endpoint
QUIC has Broken TLS verification
CVE-2026-49457
### Impact The QUIC client did not authenticate the server during the TLS 1.3 handshake. The CertificateVerify signatur
Storage Concentrator (SC & SCVM) contains a command injection vulnerability within the debug.pl...
CVE-2026-56415
Storage Concentrator (SC & SCVM) contains a command injection vulnerability within the debug.pl script that is reachable
Storage Concentrator (SC & SCVM) contains a command injection vulnerability in the ms_service.pl...
CVE-2026-56413
Storage Concentrator (SC & SCVM) contains a command injection vulnerability in the ms_service.pl service, which listens
Grav CMS before 2.0.0-beta.2 contains multiple code-execution vulnerabilities. Three unsafe...
CVE-2026-56700
Grav CMS before 2.0.0-beta.2 contains multiple code-execution vulnerabilities. Three unsafe unserialize() calls - in Sch
Flowise before 3.1.0 (affected versions 3.0.13 and earlier) uses a weak hardcoded default secret ...
CVE-2026-56278
Flowise before 3.1.0 (affected versions 3.0.13 and earlier) uses a weak hardcoded default secret ('flowise') for the exp
Crawl4AI before 0.8.7 contains an arbitrary JavaScript execution vulnerability in the Docker API...
CVE-2026-56264
Crawl4AI before 0.8.7 contains an arbitrary JavaScript execution vulnerability in the Docker API server's /execute_js en
Storage Concentrator (SC & SCVM) is vulnerable to SQL injection through cookie values processed...
CVE-2026-55721
Storage Concentrator (SC & SCVM) is vulnerable to SQL injection through cookie values processed by the login.pl and debu
Storage Concentrator (SC & SCVM) contains hardcoded credentials for numerous internal services...
CVE-2026-50110
Storage Concentrator (SC & SCVM) contains hardcoded credentials for numerous internal services embedded within a configu
Fission: Environment Runtime.Container and Builder.Container SecurityContext bypass allows privileged pod creation
CVE-2026-50566
### Summary A follow-up bypass of the round-4 PodSpec hardening (GHSA-gx55-f84r-v3r7, GHSA-wmgg-3p4h-48x7, GHSA-v455-mv
Fission Environment CRD podspec passthrough enables hostPID/hostNetwork/privileged pods, node escape
CVE-2026-50564
### Summary Fission's `Environment` CRD exposes `spec.runtime.podSpec` and `spec.builder.podSpec`, which are merged int
Fission Container Executor Function PodSpec Injection Leading to Node Escape
CVE-2026-50563
### Summary Fission's Container Executor path lets a tenant supply `Function.spec.podspec` directly; the executor merge
Fission Environment CRD PodSpec Injection Leading to Node Escape and Cluster Takeover
CVE-2026-50545
### Summary A stronger framing of the same root cause as GHSA-gx55-f84r-v3r7: the `Environment.spec.runtime.podSpec` /
An issue in Alexantr filemanager v.1.0 allows a remote attacker to execute arbitrary code via the...
CVE-2026-37637
An issue in Alexantr filemanager v.1.0 allows a remote attacker to execute arbitrary code via the filemanager.php compon
Gorse before 0.5.10 contains an authentication bypass vulnerability in the /api/dump and /api...
CVE-2026-56782
Gorse before 0.5.10 contains an authentication bypass vulnerability in the /api/dump and /api/restore endpoints that all