A double free and use-after-free vulnerability in the RdbLoadDeletedNodes function of the RDB...
CVE-2026-5759
A double free and use-after-free vulnerability in the RdbLoadDeletedNodes function of the RDB graph decoders (src/serial
#severity:critical
共收录 1449 条相关情报。
← 返回所有主题Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to...
CVE-2026-96207
Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a
Deserialization of untrusted data in Microsoft Dataverse allows an unauthorized attacker to...
CVE-2026-88131
Deserialization of untrusted data in Microsoft Dataverse allows an unauthorized attacker to execute code over a network.
Authorization bypass through user-controlled key in Microsoft Bookings allows an unauthorized...
CVE-2026-94510
Authorization bypass through user-controlled key in Microsoft Bookings allows an unauthorized attacker to elevate privil
Missing authentication for critical function in Azure App Service allows an unauthorized attacker...
CVE-2026-77900
Missing authentication for critical function in Azure App Service allows an unauthorized attacker to execute code over a
Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over...
CVE-2026-69435
Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network.
IBM Guardium Data Protection 12.2, and 12.2.2 could allow a remote attacker to execute arbitrary...
CVE-2026-84249
IBM Guardium Data Protection 12.2, and 12.2.2 could allow a remote attacker to execute arbitrary management operations d
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute...
CVE-2026-75875
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to path tr
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute...
CVE-2026-80381
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute unauthorized SQL statements d
Memory overflow vulnerability leading to Remote Code Execution or Denial of Service Vulnerability...
CVE-2026-107406
Memory overflow vulnerability leading to Remote Code Execution or Denial of Service Vulnerability in NetScaler ADC. Ne
Hazelcast allows arbitrary member memory access by low-privileged client
CVE-2026-107726
### Impact A flaw has been found in Hazelcast Enterprise Edition and Community Edition, which would allow a low-privile
fast-jwt: Incomplete patch of CVE-2026-34950: Non-whitespace key-prefix re-enables RSA→HS256 algorithm confusion
CVE-2026-107722
### Summary The fix for CVE-2026-34950 (CVSS 9.1, released in v6.2.0) is **incomplete**. It adds `key.trim()` to the PE
PraisonAI: AICoder Arbitrary File Write and Command Execution via LLM Tool Calls
CVE-2026-61445
### Summary The `AICoder` UI component exposes `write_to_file` and `execute_command` tools to the LLM with no path valid
The SecuShare Pro developed by Openfind has an OS Command Injection vulnerability....
CVE-2026-107459
The SecuShare Pro developed by Openfind has an OS Command Injection vulnerability. Unauthenticated remote attackers can
The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Arbitrary...
CVE-2026-17609
The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Arbitrary Directory Deletion in all ver
Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration
CVE-2026-105697
### Summary Before **Langflow 1.10.3**, the MCP stdio transport launched whatever `command` / `args` a user put in an M
A stack-based buffer overflow in the ASUS router modules allows an authenticated nearby user to...
CVE-2026-19386
A stack-based buffer overflow in the ASUS router modules allows an authenticated nearby user to execute arbitrary code v
Improper Neutralization of Input During Web Page Generation (“Cross-site Scripting”) in ASUS...
CVE-2026-14911
Improper Neutralization of Input During Web Page Generation (“Cross-site Scripting”) in ASUS router modules allows a rem
wolfSSH does not validate that the ECDSA curve identifier in a KEXDH_REPLY host key blob matches...
CVE-2026-16516
wolfSSH does not validate that the ECDSA curve identifier in a KEXDH_REPLY host key blob matches the algorithm negotiate
An HTTP header injection vulnerability in start-page-loader.cgi of ADM allows an unauthenticated...
CVE-2026-105324
An HTTP header injection vulnerability in start-page-loader.cgi of ADM allows an unauthenticated remote attacker to read