GitPython from 3.1.30 before 3.2.0 contains a remote code execution vulnerability in Remote.pull(...
CVE-2026-110858
GitPython from 3.1.30 before 3.2.0 contains a remote code execution vulnerability in Remote.pull() whose unsafe-option g
#severity:critical
共收录 1449 条相关情报。
← 返回所有主题When the password reset functionality is enabled, and email is configured, an attacker could take...
CVE-2026-108335
When the password reset functionality is enabled, and email is configured, an attacker could take over any account using
When the default self-signed certificate is used, an attacker could gain administrative access to...
CVE-2026-108336
When the default self-signed certificate is used, an attacker could gain administrative access to the application. Th
Databasus 3.7.0 through 3.61.0 contains an authentication bypass vulnerability that allows...
CVE-2026-110770
Databasus 3.7.0 through 3.61.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to
The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to SQL Injection via...
CVE-2026-97668
The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the guest cart persistent
The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to Authentication...
CVE-2026-97657
The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to Authentication Bypass via Malleable Encrypt
The Printcart Store (PCDesigner / NB Designer) plugin for WooCommerce is vulnerable to...
CVE-2026-93388
The Printcart Store (PCDesigner / NB Designer) plugin for WooCommerce is vulnerable to unauthenticated arbitrary file up
Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app,...
CVE-2026-110447
Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution
The Snazzy Social Media Feed plugin for WordPress is vulnerable to Arbitrary File Upload in all...
CVE-2026-110002
The Snazzy Social Media Feed plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and incl
The Click to Chat for WhatsApp plugin for WordPress is vulnerable to Arbitrary Shortcode...
CVE-2026-92097
The Click to Chat for WhatsApp plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions up to, an
Improper neutralization of special elements used in an OS command ('OS command injection')...
CVE-2026-110392
Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in Samsung Open
Microsoft Security Advisory CVE-2026-88092 - ASP.NET Core Security Feature Bypass Vulnerability
CVE-2026-88092
## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Micr
Microsoft Security Advisory CVE-2026-70188 - ASP.NET Core Security Feature Bypass Vulnerability
CVE-2026-70188
## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Micr
Perforce Helix Authentication Service (HAS) deployments that retain the shipped default SCIM...
CVE-2026-109758
Perforce Helix Authentication Service (HAS) deployments that retain the shipped default SCIM bearer token are vulnerable
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19...
CVE-2026-97229
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 1
The SAP Cloud SDK for Python contains an OAuth2 SSRF vulnerability affecting multi-tenant BTP...
CVE-2026-89111
The SAP Cloud SDK for Python contains an OAuth2 SSRF vulnerability affecting multi-tenant BTP applications. An attacker
SAP Manufacturing Integration and Intelligence does not sufficiently enforce authorization...
CVE-2026-89108
SAP Manufacturing Integration and Intelligence does not sufficiently enforce authorization boundaries within certain adm
SAP S/4HANA (Manage Substitution/Validation Rules) does not sufficiently validate input processed...
CVE-2026-89107
SAP S/4HANA (Manage Substitution/Validation Rules) does not sufficiently validate input processed by rule definition fun
SAP NetWeaver Visual Composer does not perform sufficient authorization checks in certain portal...
CVE-2026-89110
SAP NetWeaver Visual Composer does not perform sufficient authorization checks in certain portal functionality. An attac
The Metasploit Framework Web Service REST API (msf-ws) exposes the credential store through Msf:...
CVE-2026-87689
The Metasploit Framework Web Service REST API (msf-ws) exposes the credential store through Msf::WebServices::Credential