The Continue CLI applies an incomplete denylist as its only barrier to destructive shell commands...
CVE-2026-76072
The Continue CLI applies an incomplete denylist as its only barrier to destructive shell commands when running unattende
#severity:high
共收录 5383 条相关情报。
← 返回所有主题Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the setDevNet...
CVE-2026-71943
Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the setDevNet function. The vulnerabili
Label Studio does not scope the annotation detail endpoint to the requesting user's organization....
CVE-2026-76073
Label Studio does not scope the annotation detail endpoint to the requesting user's organization. AnnotationAPI in label
AzuraCast exposes the Liquidsoap custom configuration fields through an endpoint that does not...
CVE-2026-76836
AzuraCast exposes the Liquidsoap custom configuration fields through an endpoint that does not require the permission gu
Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the mail_mailalert...
CVE-2026-71942
Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the mail_mailalert function. The vulnerab
Multiple DrayTek VigorSwitch models contain unauthorized operation vulnerabilities in multiple...
CVE-2026-71933
Multiple DrayTek VigorSwitch models contain unauthorized operation vulnerabilities in multiple syslog functions. The vul
Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the...
CVE-2026-71938
Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the switch_lan_gvrp function. The vulnera
Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the...
CVE-2026-71939
Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the acl_general_setup Add ACE function. T
Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the sysreboot...
CVE-2026-71936
Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the sysreboot function. The vulnerability
Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the...
CVE-2026-71940
Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the acl_general_setup Edit ACE function.
Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the...
CVE-2026-71935
Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the webBackupAction function. The vulnera
Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the...
CVE-2026-71937
Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the poe_schedule_profile function. The vu
Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the pingtrace...
CVE-2026-71934
Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the pingtrace function. The vulnerability
Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the diag_logmail...
CVE-2026-71941
Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the diag_logmail function. The vulnerabil
Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the fdftDevice...
CVE-2026-71928
Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the fdftDevice function. The vulnerabil
Multiple DrayTek VigorSwitch models contain a pre-authentication null pointer dereference...
CVE-2026-71922
Multiple DrayTek VigorSwitch models contain a pre-authentication null pointer dereference vulnerability in the setget.cg
Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the tftp_upgrade...
CVE-2026-71931
Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the tftp_upgrade function. The vulnerab
justhtml through 1.9.1 (fixed in 1.10.0) is vulnerable to uncontrolled recursion leading to...
CVE-2026-9769
justhtml through 1.9.1 (fixed in 1.10.0) is vulnerable to uncontrolled recursion leading to denial of service. During Ju
justhtml before 1.18.0 contains multiple low-severity denial-of-service issues in CSS selector...
CVE-2026-4671
justhtml before 1.18.0 contains multiple low-severity denial-of-service issues in CSS selector handling and linkificatio
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.8 before 19.0.6, 19...
CVE-2026-10053
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.8 before 19.0.6, 19.1 before 19.1.4, and 1