UAC (Unix-like Artifacts Collector) versions prior to 3.3.0 contain a command injection...
CVE-2026-41450
UAC (Unix-like Artifacts Collector) versions prior to 3.3.0 contain a command injection vulnerability in the _command_co
#severity:high
共收录 5383 条相关情报。
← 返回所有主题A stack-based out-of-bounds write vulnerability exists in the login request handling...
CVE-2026-17252
A stack-based out-of-bounds write vulnerability exists in the login request handling functionality of the administrative
UAC (Unix-like Artifacts Collector) versions prior to 3.3.0 contain a command injection...
CVE-2026-41449
UAC (Unix-like Artifacts Collector) versions prior to 3.3.0 contain a command injection vulnerability in the _run_comman
A NULL pointer dereference vulnerability exists in the HTTP request parsing functionality of TL...
CVE-2026-17251
A NULL pointer dereference vulnerability exists in the HTTP request parsing functionality of TL-MR6400 v7. An unauthent
A stack-based buffer overflow vulnerability exists in the firmware update functionality of TL...
CVE-2026-17250
A stack-based buffer overflow vulnerability exists in the firmware update functionality of TL-MR6400 v7 due to unsafe pr
Jet Admin allows an authenticated attacker to inject JavaScript via the sign-in page's scripts...
CVE-2026-75933
Jet Admin allows an authenticated attacker to inject JavaScript via the sign-in page's scripts and styles option. Inject
OpenViking before 0.3.4 contains a server-side request forgery vulnerability that allows...
CVE-2026-22681
OpenViking before 0.3.4 contains a server-side request forgery vulnerability that allows authenticated low-privilege att
to_abs_path in scripts/iib/tool.py normalised the requested path with os.path.normpath, which...
CVE-2026-77815
to_abs_path in scripts/iib/tool.py normalised the requested path with os.path.normpath, which collapses dot segments but
is_path_trusted in scripts/iib/api.py compares the requested path against each allowed parent...
CVE-2026-77814
is_path_trusted in scripts/iib/api.py compares the requested path against each allowed parent directory with path.starts
Improper input validation and Exposure of sensitive information through data queries...
CVE-2026-16520
Improper input validation and Exposure of sensitive information through data queries vulnerability in Genians Genian NAC
A Server-Side Request Forgery (SSRF) vulnerability has been reported in PTC Windchill PDMLink and...
CVE-2026-77646
A Server-Side Request Forgery (SSRF) vulnerability has been reported in PTC Windchill PDMLink and PTC FlexPLM. The vulne
SitemapLoader.parse_sitemap in langchain_community/document_loaders/sitemap.py applies the...
CVE-2026-72848
SitemapLoader.parse_sitemap in langchain_community/document_loaders/sitemap.py applies the documented restrict_to_same_d
The URLS regular expression in nltk/tokenize/casual.py, compiled into TweetTokenizer.WORD_RE and...
CVE-2026-72818
The URLS regular expression in nltk/tokenize/casual.py, compiled into TweetTokenizer.WORD_RE and applied by TweetTokeniz
Authorization bypass through user-controlled key in Microsoft Partner Center allows an...
CVE-2026-69558
Authorization bypass through user-controlled key in Microsoft Partner Center allows an unauthorized attacker to disclose
Server-side request forgery (ssrf) in Microsoft Copilot in Azure allows an authorized attacker to...
CVE-2026-69855
Server-side request forgery (ssrf) in Microsoft Copilot in Azure allows an authorized attacker to disclose information o
tor before 0.4.9.9 was prone to an out-of-bounds write when parsing a consensus or detached...
CVE-2026-77642
tor before 0.4.9.9 was prone to an out-of-bounds write when parsing a consensus or detached signature with unexpected s
Server-side request forgery (ssrf) in Azure Virtual Machines allows an authorized attacker to...
CVE-2026-69543
Server-side request forgery (ssrf) in Azure Virtual Machines allows an authorized attacker to elevate privileges over a
Observable response discrepancy in Azure Stack HCI allows an unauthorized attacker to disclose...
CVE-2026-69519
Observable response discrepancy in Azure Stack HCI allows an unauthorized attacker to disclose information over a networ
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary...
CVE-2026-18840
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to improper val
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 has a pointer validation flaw exists in the AIX...
CVE-2026-19442
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 has a pointer validation flaw exists in the AIX Virtual SCSI (vSCSI) initi