rust-iot-platform through commit 5df942ab stores user passwords in cleartext without hashing in...
CVE-2026-82453
rust-iot-platform through commit 5df942ab stores user passwords in cleartext without hashing in the user model. Attacker
#severity:high
共收录 5383 条相关情报。
← 返回所有主题BookStack before 26.05.4 contains a remote code execution vulnerability in the portable ZIP...
CVE-2026-82450
BookStack before 26.05.4 contains a remote code execution vulnerability in the portable ZIP import functionality that al
Skyvern before 1.0.45 contains a sandbox escape vulnerability in TextPromptBlock that renders...
CVE-2026-82447
Skyvern before 1.0.45 contains a sandbox escape vulnerability in TextPromptBlock that renders prompts twice, first throu
@better-auth/sso before 1.6.27 (and before 1.4.8 in the 1.4.x line and before 1.7.0-rc.5 in the 1...
CVE-2026-80192
@better-auth/sso before 1.6.27 (and before 1.4.8 in the 1.4.x line and before 1.7.0-rc.5 in the 1.7 prerelease line) con
The User Profile Builder WordPress plugin before 4.0.1 does not properly restrict its front-end...
CVE-2026-76548
The User Profile Builder WordPress plugin before 4.0.1 does not properly restrict its front-end file upload feature, gr
The HEL Online Classroom: AI-powered Online Classrooms WordPress plugin through 1.0.3 does not...
CVE-2026-77007
The HEL Online Classroom: AI-powered Online Classrooms WordPress plugin through 1.0.3 does not perform any authorisation
The Appointment Booking Calendar Plugin and Scheduling Plugin WordPress plugin before 1.6.3 does...
CVE-2026-76586
The Appointment Booking Calendar Plugin and Scheduling Plugin WordPress plugin before 1.6.3 does not verify the amount
The SmartAIPress WordPress plugin through 1.2.0 does not perform a capability check on one of its...
CVE-2026-16600
The SmartAIPress WordPress plugin through 1.2.0 does not perform a capability check on one of its AJAX actions and does
The Rest Routes WordPress plugin through 5.5.5 does not sanitize and validate a value taken from...
CVE-2026-16061
The Rest Routes WordPress plugin through 5.5.5 does not sanitize and validate a value taken from the URL of one of its
Traffic interception vulnerability in BOSH Director vCenter CPI allows attackers positioned...
CVE-2026-41012
Traffic interception vulnerability in BOSH Director vCenter CPI allows attackers positioned between BOSH Director and vC
A network-reachable client that has not yet authenticated can hold a MongoDB Connector for BI...
CVE-2026-81520
A network-reachable client that has not yet authenticated can hold a MongoDB Connector for BI authentication session ope
A pre-authentication stack-based buffer overflow vulnerability exists in the http_gdpr_decrypt...
CVE-2026-75118
A pre-authentication stack-based buffer overflow vulnerability exists in the http_gdpr_decrypt function of TL-MR100 V3.2
IGEL OS 12 before 12.7.6 and IGEL OS 11 before 11.11.150 contain a boot registry parameter...
CVE-2026-82017
IGEL OS 12 before 12.7.6 and IGEL OS 11 before 11.11.150 contain a boot registry parameter injection vulnerability that
A user able to submit SQL through an application using the MongoDB Connector for BI ODBC driver...
CVE-2026-81532
A user able to submit SQL through an application using the MongoDB Connector for BI ODBC driver can supply a positioned-
A database user able to create a view in a namespace that MongoDB Connector for BI samples can...
CVE-2026-81490
A database user able to create a view in a namespace that MongoDB Connector for BI samples can cause the schema-sampling
An unauthenticated party able to reach the port of a MongoDB Connector for BI (mongosqld)...
CVE-2026-81517
An unauthenticated party able to reach the port of a MongoDB Connector for BI (mongosqld) instance may generate enough r
When mongosqld is configured with a client certificate authority file, the listener requests a...
CVE-2026-81518
When mongosqld is configured with a client certificate authority file, the listener requests a client certificate during
IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote attacker to obtain sensitive...
CVE-2026-18904
IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote attacker to obtain sensitive information and inject unauthori
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated...
CVE-2026-16821
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to a format s
IBM Administration Runtime Expert for i 1R1M0 could allow a remote authenticated attacker to...
CVE-2026-17203
IBM Administration Runtime Expert for i 1R1M0 could allow a remote authenticated attacker to obtain sensitive informatio