nimiq-blockchain: Validity store off by one error
CVE-2026-46369
### Impact The validity store treats a transaction with stored `block_number = X` as "in window" only when `X > last_bn
#severity:high
共收录 5387 条相关情报。
← 返回所有主题Winter: Authenticated backend users can bypass Users controller permission checks
CVE-2026-35445
### Impact Affected versions of Winter CMS did not validate the handler name submitted through the form postback mechan
Winter: Stored XSS through Editor Settings custom styles
CVE-2026-32258
### Impact
Winter: Stored XSS through Brand Settings custom styles
CVE-2026-32257
### Impact Users
The Mira Android companion app v4.5.15.4 identifies the paired Mira hormone analyzer by...
CVE-2026-67558
The Mira Android companion app v4.5.15.4 identifies the paired Mira hormone analyzer by performing a substring match aga
In the Mira hormone monitor device firmware v1.7.1.47 build 01070147, a remote unauthenticated...
CVE-2026-66875
In the Mira hormone monitor device firmware v1.7.1.47 build 01070147, a remote unauthenticated attacker within BLE range
cJSON versions 1.5.0 through 1.7.19 contain an incorrectly-resolved name or reference...
CVE-2026-29036
cJSON versions 1.5.0 through 1.7.19 contain an incorrectly-resolved name or reference vulnerability in the decode_pointe
The Mira hormone monitor device firmware accepts a 0x01 write from any BLE central without...
CVE-2026-66098
The Mira hormone monitor device firmware accepts a 0x01 write from any BLE central without authentication, causing the d
An insufficient certificate validation in a privileged communication workflow, was identified in...
CVE-2026-66154
An insufficient certificate validation in a privileged communication workflow, was identified in a GMS application 9.5.1
Improper Control of Generation of Code ('Code Injection') Vulnerability in the SonicWall Email...
CVE-2026-66150
Improper Control of Generation of Code ('Code Injection') Vulnerability in the SonicWall Email Security appliance allows
Improper Control of Generation of Code ('Code Injection') Vulnerability in the SonicWall Email...
CVE-2026-66149
Improper Control of Generation of Code ('Code Injection') Vulnerability in the SonicWall Email Security appliance allows
CivetWeb (commit 4a4f0c95) contains a heap and stack buffer overflow vulnerability in the...
CVE-2026-29035
CivetWeb (commit 4a4f0c95) contains a heap and stack buffer overflow vulnerability in the read_websocket() function that
The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to authorization bypass in...
CVE-2026-15606
The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to authorization bypass in all versions up to, and i
FileRun up to and including version 2026.2.0 contains an OS command injection vulnerability that...
CVE-2026-14863
FileRun up to and including version 2026.2.0 contains an OS command injection vulnerability that allows authenticated at
telegram-search contains a stored cross-site scripting vulnerability that allows remote attackers...
CVE-2026-73031
telegram-search contains a stored cross-site scripting vulnerability that allows remote attackers to execute arbitrary J
An unauthenticated remote code execution vulnerability was identified in GMS 9.5.1 (Build 9510...
CVE-2026-66145
An unauthenticated remote code execution vulnerability was identified in GMS 9.5.1 (Build 9510.1044) and earlier version
A flaw was found in search-v2-api. The authentication middleware in the affected component...
CVE-2026-71467
A flaw was found in search-v2-api. The authentication middleware in the affected component unconditionally skips authent
The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for...
CVE-2026-19091
The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to
The firmware of the Pulsetto Vagus Nerve Stimulator accepts several undisclosed commands over its...
CVE-2026-18844
The firmware of the Pulsetto Vagus Nerve Stimulator accepts several undisclosed commands over its Bluetooth Low Energy (
The InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress is vulnerable to Remote...
CVE-2026-13457
The InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress is vulnerable to Remote Code Execution in all