Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Incorrect Default...
CVE-2026-63700
Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Incorrect Default Permission vulnerability. A l
#severity:high
共收录 5387 条相关情报。
← 返回所有主题Nozomi Networks Labs identified a CWE-787: Out-of-bounds Write vulnerability in the process-image...
CVE-2026-13196
Nozomi Networks Labs identified a CWE-787: Out-of-bounds Write vulnerability in the process-image management functionali
ZeroBrew version 0.3.1 and prior contains a missing integrity verification vulnerability in the...
CVE-2026-53970
ZeroBrew version 0.3.1 and prior contains a missing integrity verification vulnerability in the Ruby compatibility shim
Authorizer: Zero-click account takeover via OAuth identity linking to unverified email accounts
CVE-2026-35511
The OAuth callback handler links incoming OAuth identities (Google, GitHub, etc.) to existing accounts matched by email
Budibase before 3.40.0 fails to redact datasource credentials stored in STRING typed fields,...
CVE-2026-72857
Budibase before 3.40.0 fails to redact datasource credentials stored in STRING typed fields, allowing authenticated user
Budibase versions before 3.40.0 contain an authorization/authentication bypass in the PUT /api...
CVE-2026-72856
Budibase versions before 3.40.0 contain an authorization/authentication bypass in the PUT /api/global/users/tenant/owner
Budibase before 3.40.0 contains a cross-site request forgery vulnerability in the chat-link...
CVE-2026-72849
Budibase before 3.40.0 contains a cross-site request forgery vulnerability in the chat-link handoff endpoint that allows
Budibase before 3.40.0 contains a SQL injection vulnerability in the Oracle datasource connector...
CVE-2026-72853
Budibase before 3.40.0 contains a SQL injection vulnerability in the Oracle datasource connector's post-write row lookup
Budibase before 3.40.0 contains server-side request forgery vulnerabilities in OpenAPI query...
CVE-2026-72855
Budibase before 3.40.0 contains server-side request forgery vulnerabilities in OpenAPI query import and REST query execu
OpenWrt LuCI contains an overly permissive ACL definition in luci-mod-system-mounts that grants...
CVE-2026-72840
OpenWrt LuCI contains an overly permissive ACL definition in luci-mod-system-mounts that grants write access to /etc/cro
A flaw has been found in Tenda CH, CP and TX3 V21.x/V22.x/V25.x/V26.x/V27.x. Affected by this...
CVE-2026-19750
A flaw has been found in Tenda CH, CP and TX3 V21.x/V22.x/V25.x/V26.x/V27.x. Affected by this issue is some unknown func
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to gain privilege...
CVE-2026-18509
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to gain privilege escalation via the Navigator f
IBM Storage Scale 5.2.3.0 through 5.2.3.8, and 6.0.0.0 through 6.0.1.0 Secrets may be disclosed...
CVE-2026-19483
IBM Storage Scale 5.2.3.0 through 5.2.3.8, and 6.0.0.0 through 6.0.1.0 Secrets may be disclosed in log files in IBM Stor
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to generate a stack-based...
CVE-2026-18511
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to generate a stack-based buffer overflow in the
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an...
CVE-2026-17502
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an out-of-bounds write.
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to a...
CVE-2026-18077
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to a stack-based buffer over
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to gain elevated privileges due to...
CVE-2026-18101
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to gain elevated privileges due to improper management of thre
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to gain elevated...
CVE-2026-18249
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to gain elevated privileges due to improper val
IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to read arbitrary...
CVE-2026-17473
IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to read arbitrary files due to improper limi
IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to execute arbitrary...
CVE-2026-17481
IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to execute arbitrary code due to improper ou