Buffer overflow vulnerability in Open Vehicle Monitoring System 3 (OVMS3) 3.3.005. In...
CVE-2026-37541
Buffer overflow vulnerability in Open Vehicle Monitoring System 3 (OVMS3) 3.3.005. In canformat_gvret.cpp, the length fi
#severity:critical
共收录 1443 条相关情报。
← 返回所有主题Buffer overflow vulnerability in cannelloni v2.0.0 in CAN frame parsing in parser.cpp in function...
CVE-2026-37539
Buffer overflow vulnerability in cannelloni v2.0.0 in CAN frame parsing in parser.cpp in function parseCANFrame, and dec
AGL app-framework-main thru 17.1.12 contains a Zip Slip path traversal vulnerability (CWE-22)...
CVE-2026-37531
AGL app-framework-main thru 17.1.12 contains a Zip Slip path traversal vulnerability (CWE-22) combined with a TOCTOU rac
Unsafe deserialization vulnerability in MixPHP Framework 2.x thru 2.2.17. The session and cache...
CVE-2026-42472
Unsafe deserialization vulnerability in MixPHP Framework 2.x thru 2.2.17. The session and cache handlers use unserialize
Integer underflow vulnerability in Open-SAE-J1939 thru commit...
CVE-2026-37534
Integer underflow vulnerability in Open-SAE-J1939 thru commit b6caf884df46435e539b1ecbf92b6c29b345bdfe (2025-11-30) in S
Unsafe deserialization vulnerability in MixPHP Framework 2.x thru 2.2.17. The session and cache...
CVE-2026-42473
Unsafe deserialization vulnerability in MixPHP Framework 2.x thru 2.2.17. The session and cache handlers use unserialize
A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can...
CVE-2026-22166
A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can trigger write UAF crash
auth: Patreon provider assigns the same local user ID to every authenticated Patreon account, enabling cross‑user impersonation
CVE-2026-42560
### Summary The Patreon OAuth provider maps every authenticated Patreon account to the same local `user.ID`, instead of
Sentry's improper authentication on SAML SSO process allows user identity linking
CVE-2026-42354
### Impact A critical vulnerability was discovered in the SAML SSO implementation of Sentry. It was reported to us via S
Synway SMG Gateway Management Software contains an OS command injection vulnerability in the...
CVE-2025-71284
Synway SMG Gateway Management Software contains an OS command injection vulnerability in the RADIUS configuration endpoi
An issue in the fileMd5 parameter in the /a/file/upload endpoint of JeeSite v5.15.1 allows...
CVE-2026-36760
An issue in the fileMd5 parameter in the /a/file/upload endpoint of JeeSite v5.15.1 allows authenticated attackers with
Weaver (Fanwei) E-office versions prior to 10.0_20221201 contain an unauthenticated arbitrary...
CVE-2022-50993
Weaver (Fanwei) E-office versions prior to 10.0_20221201 contain an unauthenticated arbitrary file upload vulnerability
A path traversal vulnerability in the /content/images/add endpoint of shopizer v3.2.5 allows...
CVE-2026-36767
A path traversal vulnerability in the /content/images/add endpoint of shopizer v3.2.5 allows attackers write arbitrary f
Authentication bypass by primary weakness vulnerability in Progress Software MOVEit Automation...
CVE-2026-4670
Authentication bypass by primary weakness vulnerability in Progress Software MOVEit Automation allows Authentication Byp
Gotenberg has ExifTool stdin argument injection via metadata value newlines (bypass of key sanitization fix)
CVE-2026-40281
## Vulnerability Details **CWE**: CWE-20 - Improper Input Validation The metadata value sanitization introduced in v8.
Gotenberg has case-insensitive URL scheme that bypasses webhook and downloadFrom deny-list SSRF protection
CVE-2026-40280
## Vulnerability Details **CWE**: CWE-918 - Server-Side Request Forgery (SSRF) The default private-IP deny-lists for -
Tenda W3002R/A302/W309R wireless routers version V5.07.64_en contain a cookie session weakness...
CVE-2018-25317
Tenda W3002R/A302/W309R wireless routers version V5.07.64_en contain a cookie session weakness vulnerability that allows
n8n has XML Node Prototype Pollution that to RCE
CVE-2026-42232
## Impact An authenticated user with permission to create or modify workflows could achieve global prototype pollution v
n8n has Prototype Pollution in XML Webhook Body Parser that Leads to RCE
CVE-2026-42231
## Impact A flaw in the `xml2js` library used to parse XML request bodies in n8n's webhook handler allowed prototype pol
SQL injection (SQLi) in MegaCMS v12.0.0, specifically in the “id_territorio” parameter of the “...
CVE-2026-3325
SQL injection (SQLi) in MegaCMS v12.0.0, specifically in the “id_territorio” parameter of the “/web_comunications/cms/ge