ImpressCMS contains an authenticated remote code execution vulnerability in the custom tag module...
CVE-2026-73679
ImpressCMS contains an authenticated remote code execution vulnerability in the custom tag module that allows authentica
#severity:high
共收录 5387 条相关情报。
← 返回所有主题IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain...
CVE-2026-17175
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due t
mchange-commons-java contains elements susceptible to abuse via JNDI injection and "deserialization gadgets"
CVE-2026-55153
### Impact Prior to version 0.6.0, mchange-commons-java includes a JNDI `ObjectFactory` implementation (`com.mchange.v2.
OpenAM Insecure SSO Cookie Initialization
CVE-2026-53660
## Summary **Description** An Insecure Default Initialization of Resource (CWE-1188) issue in the OpenAM default config
Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket
CVE-2026-53657
### Impact On an instance of Lima running with `qemu` driver, an arbitrary user in the VM could access `/run/lima-guesta
Grav: Unauthenticated denial of service via unbounded image derivative dimensions
CVE-2026-53653
### Summary An unauthenticated visitor exhausts server memory and CPU by requesting an image with oversized resize dimen
Budibase: SSRF in Automation Steps - Webhook, Zapier, N8N, Slack, Discord Bypass IP Blacklist
CVE-2026-35219
## Summary Budibase automation steps (outgoing webhook, Zapier, n8n, Slack, Discord, Make.com) make server-side HTTP re
A vulnerability was identified in TOTOLINK A800R 4.1.2cu.5137_B20200730. This impacts the...
CVE-2026-19846
A vulnerability was identified in TOTOLINK A800R 4.1.2cu.5137_B20200730. This impacts the function setUrlFilterRules of
Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to...
CVE-2026-72970
Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a net
LimeSurvey Community Edition 7.0.5 contains an authenticated reflected cross-site scripting...
CVE-2026-63361
LimeSurvey Community Edition 7.0.5 contains an authenticated reflected cross-site scripting vulnerability in the HTML ed
A security flaw has been discovered in TOTOLINK A800R 4.1.2cu.5137_B20200730. Affected is the...
CVE-2026-19847
A security flaw has been discovered in TOTOLINK A800R 4.1.2cu.5137_B20200730. Affected is the function setWiFiWpsConfig
A vulnerability was determined in TOTOLINK A800R 4.1.2cu.5137_B20200730. This affects the...
CVE-2026-19845
A vulnerability was determined in TOTOLINK A800R 4.1.2cu.5137_B20200730. This affects the function setStaticDhcpConfig o
A local privilege escalation vulnerability exists in Security Center. An attacker with write...
CVE-2026-19635
A local privilege escalation vulnerability exists in Security Center. An attacker with write access to a specific config
An input validation vulnerability exists in Security Center's file upload handling, where...
CVE-2026-19679
An input validation vulnerability exists in Security Center's file upload handling, where insufficient sanitization of u
A privilege escalation vulnerability exists in Tenable Security Center that allows a user with ...
CVE-2026-19629
A privilege escalation vulnerability exists in Tenable Security Center that allows a user with "Security Manager" role a
A SQL injection vulnerability exists in Security Center that could allow an attacker to access...
CVE-2026-19680
A SQL injection vulnerability exists in Security Center that could allow an attacker to access unauthorized data from th
Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Unrestricted Upload of...
CVE-2026-66271
Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Unrestricted Upload of File with Dangerous Type
A command injection vulnerability exists in Tenable Security Center. An authenticated...
CVE-2026-19628
A command injection vulnerability exists in Tenable Security Center. An authenticated administrator could modify applica
A vulnerability was found in TOTOLINK A800R 4.1.2cu.5137_B20200730. The impacted element is the...
CVE-2026-19844
A vulnerability was found in TOTOLINK A800R 4.1.2cu.5137_B20200730. The impacted element is the function setRadvdCfg of
Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Unrestricted Upload of...
CVE-2026-66270
Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Unrestricted Upload of File with Dangerous Type