stigmem-node's federation insecure transport settings may allow non-loopback cleartext federation
### Impact Stigmem nodes with federation enabled could be configured to run without mTLS outside loopback-only local dev
#severity:critical
共收录 1443 条相关情报。
← 返回所有主题stigmem-node: Auth-disabled deployments may grant broad anonymous access outside loopback
### Impact Stigmem nodes configured with authentication disabled could grant the anonymous identity broad read/write/fed
There is an authentication bypass vulnerability in the NI SystemLink Enterprise Dashboard...
CVE-2026-9051
There is an authentication bypass vulnerability in the NI SystemLink Enterprise Dashboard application that may allow an
amazon-redshift-python-driver vulnerable to Remote Code Execution via eval() Injection
CVE-2026-8838
### Summary amazon-redshift-python-driver is the official Python connector for Amazon Redshift. In versions 2.1.13 and e
The affected KMW CCTV Security Cameras are vulnerable to a critical unauthenticated password...
CVE-2026-5386
The affected KMW CCTV Security Cameras are vulnerable to a critical unauthenticated password reset. This flaw allows an
Jinan USR IOT Technology Limited (PUSR) USR-W610 RS232/485 to Wi-Fi/Ethernet Converter device...
CVE-2026-7786
Jinan USR IOT Technology Limited (PUSR) USR-W610 RS232/485 to Wi-Fi/Ethernet Converter device firmware contains plaintex
Vulnerable to DNS rebinding attacks when using SSE (http://b/499408790). During the beta phase,...
CVE-2026-9739
Vulnerable to DNS rebinding attacks when using SSE (http://b/499408790). During the beta phase, we implemented `allowed-
Yamcs Vulnerable to Authenticated Remote Code Execution (RCE) via Jython Algorithm Code Injection
CVE-2026-46621
### Summary A Server-Side Code Injection vulnerability exists in the Yamcs script evaluation engine for Python algorithm
Yamcs Vulnerable to Remote Code Execution via Mission Database algorithm override
CVE-2026-46562
# Remote Code Execution via Mission Database algorithm override ## Summary The Nashorn `ScriptEngine` used to evaluate
Gladinet Triofox Cloud Server Agent Access Service (GladServerAgentService.exe) listens on TCP...
CVE-2026-8364
Gladinet Triofox Cloud Server Agent Access Service (GladServerAgentService.exe) listens on TCP port 7878 and processes r
A stack-based buffer overflow condition exists in WOSDefaultHttpModule.dll when processing a long...
CVE-2026-8362
A stack-based buffer overflow condition exists in WOSDefaultHttpModule.dll when processing a long URL path starting with
A stack-based buffer overflow condition exists in WOSDeviceDropFolder.dll when processing a long...
CVE-2026-8363
A stack-based buffer overflow condition exists in WOSDeviceDropFolder.dll when processing a long URL path starting with
Langroid has Prompt to SQL Injection, Leading to RCE
CVE-2026-25879
# Security Vulnerability Report: Prompt to SQL Injection leading to RCE in latest Langroid ## Affected Scope langroid @
LiquidJS is Vulnerable to Remote Code Execution
CVE-2026-45618
### Summary It is possible to execute arbitrary code with crafted templates ### Details `1|valueOf` -> `this` when
Webmin before 2.640 does not safely construct a filename for saving of an attachment within the...
CVE-2026-49103
Webmin before 2.640 does not safely construct a filename for saving of an attachment within the mailboxes component. Thi
A server-side request forgery (SSRF) vulnerability was identified in GitHub Enterprise Server...
CVE-2026-9312
A server-side request forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed an unauthenti
Yamcs Vulnerable to Server-Side Code Injection (RCE) via Janino Expression Engine in `JavaExprAlgorithmExecutionFactory`
CVE-2026-44632
### Summary A Server-Side Code Injection vulnerability exists in the Yamcs algorithm evaluation engine (`org.yamcs.algor
There is a mitigation bypass / (incomplete fix) for CVE-2025-62582 (Unauthenticated Remote...
CVE-2026-9642
There is a mitigation bypass / (incomplete fix) for CVE-2025-62582 (Unauthenticated Remote Database Access) An unauthe
IBM Engineering Lifecycle Management 7.0.3, 7.1.0, and 7.2.0 could allow an unauthenticated...
CVE-2026-3660
IBM Engineering Lifecycle Management 7.0.3, 7.1.0, and 7.2.0 could allow an unauthenticated remote attacker to update se
FastNetMon Community Edition through 1.2.9 contains an off-by-one heap-based buffer overflow in...
CVE-2026-48689
FastNetMon Community Edition through 1.2.9 contains an off-by-one heap-based buffer overflow in the dynamic_binary_buffe