Authorization Bypass vulnerability in Creartia's ICMS software could allow an attacker to gain...
CVE-2026-4320
Authorization Bypass vulnerability in Creartia's ICMS software could allow an attacker to gain unauthorized access to pr
#severity:critical
共收录 1443 条相关情报。
← 返回所有主题WordPress Plugin Peugeot Music 1.0 contains an arbitrary file upload vulnerability that allows...
CVE-2018-25335
WordPress Plugin Peugeot Music 1.0 contains an arbitrary file upload vulnerability that allows unauthenticated attackers
GitBucket 4.23.1 contains an unauthenticated remote code execution vulnerability that allows...
CVE-2018-25332
GitBucket 4.23.1 contains an unauthenticated remote code execution vulnerability that allows attackers to execute arbitr
ACL Analytics versions 11.x through 13.0.0.579 contain an arbitrary code execution vulnerability...
CVE-2018-25320
ACL Analytics versions 11.x through 13.0.0.579 contain an arbitrary code execution vulnerability that allows attackers t
python jsonpickle 2.0.0 contains a remote code execution vulnerability that allows attackers to...
CVE-2021-47952
python jsonpickle 2.0.0 contains a remote code execution vulnerability that allows attackers to execute arbitrary Python
libbabl 0.1.62 contains a broken double free detection vulnerability that allows attackers to...
CVE-2020-37239
libbabl 0.1.62 contains a broken double free detection vulnerability that allows attackers to bypass memory safety check
iDS6 DSSPro Digital Signage System 6.2 contains a CAPTCHA security bypass vulnerability that...
CVE-2020-37228
iDS6 DSSPro Digital Signage System 6.2 contains a CAPTCHA security bypass vulnerability that allows attackers to bypass
phpMyFAQ before 4.1.2 contains an unauthenticated SQL injection vulnerability in BuiltinCaptcha:...
CVE-2026-46364
phpMyFAQ before 4.1.2 contains an unauthenticated SQL injection vulnerability in BuiltinCaptcha::garbageCollector() and
WordPress Plugin WP Super Edit 2.5.4 and earlier contains an unrestricted file upload...
CVE-2021-47965
WordPress Plugin WP Super Edit 2.5.4 and earlier contains an unrestricted file upload vulnerability in the FCKeditor com
phpMyFAQ before 4.1.2 contains an improper restriction of excessive authentication attempts...
CVE-2026-45010
phpMyFAQ before 4.1.2 contains an improper restriction of excessive authentication attempts vulnerability in the /admin/
An Improper Access Control vulnerability in several internal API endpoints for Google Cloud...
CVE-2026-2031
An Improper Access Control vulnerability in several internal API endpoints for Google Cloud Application Integration prio
PDF Export Module used in DHTMLX's products Gantt and Scheduler is vulnerable to Remote Code...
CVE-2026-41553
PDF Export Module used in DHTMLX's products Gantt and Scheduler is vulnerable to Remote Code Execution due to lack of "d
Diagram's export module is vulnerable to Path Traversal in src attribute due to lack of HTML...
CVE-2026-7182
Diagram's export module is vulnerable to Path Traversal in src attribute due to lack of HTML sanitization. An unauthenti
PDF Export Module used in DHTMLX's products Gantt and Scheduler is vulnerable to Path Traversal...
CVE-2026-41552
PDF Export Module used in DHTMLX's products Gantt and Scheduler is vulnerable to Path Traversal due to lack of HTML sani
The Form Notify plugin for WordPress is vulnerable to Authentication Bypass in versions up to and...
CVE-2026-5229
The Form Notify plugin for WordPress is vulnerable to Authentication Bypass in versions up to and including 1.1.10. This
A supply chain attack compromised the official installation packages of DAEMON Tools Lite ...
CVE-2026-8398
A supply chain attack compromised the official installation packages of DAEMON Tools Lite (Windows versions 12.5.0.2421
Unrestricted IP address binding in the AMD Device Metrics Exporter (ROCm ecosystem) could allow a...
CVE-2026-0481
Unrestricted IP address binding in the AMD Device Metrics Exporter (ROCm ecosystem) could allow a remote attacker to per
Crabbox prior to v0.12.0 contains an environment variable exposure vulnerability that allows...
CVE-2026-8634
Crabbox prior to v0.12.0 contains an environment variable exposure vulnerability that allows attackers with access to a
Use after free in Mojo in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to...
CVE-2026-8580
Use after free in Mojo in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to potentially perform a sandb
vm2 Has a Sandbox Breakout Using Async Generator
CVE-2026-45411
### Summary VM2 suffers from a sandbox breakout vulnerability. This allows attackers to write code which can escape fro