NVIDIA Spatial Intelligence Lab's (SIL) GEN3C contains an unauthenticated remote code execution...
CVE-2026-53805
NVIDIA Spatial Intelligence Lab's (SIL) GEN3C contains an unauthenticated remote code execution vulnerability in the inf
#severity:critical
共收录 1441 条相关情报。
← 返回所有主题Out-of-bounds Read vulnerability in RTI Connext Professional (Core Libraries) allows Overread...
CVE-2026-3894
Out-of-bounds Read vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers.This issue affects
In Splunk AI Toolkit versions below 5.7.4, a user who holds the "admin" Splunk role could execute...
CVE-2026-20266
In Splunk AI Toolkit versions below 5.7.4, a user who holds the "admin" Splunk role could execute arbitrary OS commands
JimuReport versions 2.3.4 and below are vulnerable to remote code execution due to improper...
CVE-2026-36418
JimuReport versions 2.3.4 and below are vulnerable to remote code execution due to improper handling of Aviator expressi
picklescan before 1.0.1 contains an unsafe deserialization vulnerability allowing unauthenticated...
CVE-2026-53874
picklescan before 1.0.1 contains an unsafe deserialization vulnerability allowing unauthenticated users to execute arbit
picklescan before 1.0.4 fails to block pkgutil.resolve_name, allowing attackers to bypass the...
CVE-2026-3490
picklescan before 1.0.4 fails to block pkgutil.resolve_name, allowing attackers to bypass the entire blocklist by resolv
picklescan before 1.0.4 contains an incomplete blocklist for the profile module that fails to...
CVE-2026-53873
picklescan before 1.0.4 contains an incomplete blocklist for the profile module that fails to block the module-level pro
Heap-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows...
CVE-2026-2467
Heap-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and Tags
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...
CVE-2026-54812
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in StylemixThemes Mot
picklescan before 0.0.33 contains an arbitrary file writing vulnerability that allows attackers...
CVE-2025-71321
picklescan before 0.0.33 contains an arbitrary file writing vulnerability that allows attackers to bypass the dangerous
A vulnerability in Cisco ISE and ISE-PIC could allow an authenticated, remote attacker to execute...
CVE-2026-20181
A vulnerability in Cisco ISE and ISE-PIC could allow an authenticated, remote attacker to execute arbitrary commands on
picklescan before 0.0.33 fails to block the ctypes module, allowing attackers to achieve remote...
CVE-2025-71323
picklescan before 0.0.33 fails to block the ctypes module, allowing attackers to achieve remote code execution by invoki
picklescan before 0.0.33 contains an incomplete deny-list that fails to block pydoc.locate and...
CVE-2025-71320
picklescan before 0.0.33 contains an incomplete deny-list that fails to block pydoc.locate and operator.methodcaller fun
picklescan before 0.0.27 contains a parsing logic error in the _list_globals function when...
CVE-2025-71325
picklescan before 0.0.27 contains a parsing logic error in the _list_globals function when handling STACK_GLOBAL opcodes
The shell tool command allowlist in the SecurityPolicy of OpenHuman desktop agent through 0.54.0 ...
CVE-2026-55743
The shell tool command allowlist in the SecurityPolicy of OpenHuman desktop agent through 0.54.0 (default Supervised sec
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_proxy_v2_module and...
CVE-2026-42055
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_proxy_v2_module and ngx_http_grpc_module modules.
NGINX Open Source has a vulnerability in the ngx_http_v3_module module. When NGINX Open Source is...
CVE-2026-42530
NGINX Open Source has a vulnerability in the ngx_http_v3_module module. When NGINX Open Source is configured to use the
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...
CVE-2026-54815
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Cargo RD Cargo Shi
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...
CVE-2026-54808
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Travel WP Trave
Unauthenticated PHP Object Injection in Moderno < 1.43 versions.
CVE-2026-49108
Unauthenticated PHP Object Injection in Moderno < 1.43 versions.