A flaw was found in multicluster-global-hub. The manager component improperly validates the...
CVE-2026-71576
A flaw was found in multicluster-global-hub. The manager component improperly validates the source identity of incoming
#severity:high
共收录 5387 条相关情报。
← 返回所有主题A security flaw has been discovered in Shenzhen Aitemi M300 Wi-Fi Repeater r0-ea7890a. Impacted...
CVE-2026-19348
A security flaw has been discovered in Shenzhen Aitemi M300 Wi-Fi Repeater r0-ea7890a. Impacted is the function sprintf
A vulnerability was determined in Tenda CH22 1.0.0.1. This vulnerability affects the function...
CVE-2026-19346
A vulnerability was determined in Tenda CH22 1.0.0.1. This vulnerability affects the function formCertListInfo of the fi
A security vulnerability has been detected in UTT HiPER 1200GW up to 2.5.3-170306. This impacts...
CVE-2026-19341
A security vulnerability has been detected in UTT HiPER 1200GW up to 2.5.3-170306. This impacts the function strcpy of t
A path traversal vulnerability exists in parisneo/lollms version 2.1.0, specifically in the SPA...
CVE-2026-10595
A path traversal vulnerability exists in parisneo/lollms version 2.1.0, specifically in the SPA catch-all route implemen
A heap-based buffer overflow vulnerability exists in the GIMP DDS (DirectDraw Surface) file...
CVE-2026-42170
A heap-based buffer overflow vulnerability exists in the GIMP DDS (DirectDraw Surface) file parser. When a crafted DDS f
In Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 2.1.3, the native entropy source used on...
CVE-2026-8798
In Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 2.1.3, the native entropy source used on Intel platforms retried
In Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X...
CVE-2026-13505
In Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X ser
TestLink 1.9.20 and prior contains an insecure direct object reference vulnerability that allows...
CVE-2026-70561
TestLink 1.9.20 and prior contains an insecure direct object reference vulnerability that allows any authenticated user,
Injection of false emergency or status messages over CPDLC may lead to misallocation of resources...
CVE-2025-71412
Injection of false emergency or status messages over CPDLC may lead to misallocation of resources, operational confusion
Lack of authentication for Very High Frequency Data Link messages allows rogue ground stations to...
CVE-2025-71409
Lack of authentication for Very High Frequency Data Link messages allows rogue ground stations to inject CPDLC messages
Consul Community Edition and Consul Enterprise 1.13.0 through 2.0.2 are vulnerable to an...
CVE-2026-15972
Consul Community Edition and Consul Enterprise 1.13.0 through 2.0.2 are vulnerable to an unauthenticated denial of servi
In sol commit 373d848 (2024-12-12), the broker does not fully release resources when handling...
CVE-2025-63235
In sol commit 373d848 (2024-12-12), the broker does not fully release resources when handling malformed or duplicate CON
An SQL injection vulnerability in Plesk Obsidian up to 18.0.80 for Linux and Windows allows an...
CVE-2026-64636
An SQL injection vulnerability in Plesk Obsidian up to 18.0.80 for Linux and Windows allows an authenticated user to rea
ZenML 0.94.6 contains a remote code execution vulnerability in the CloudpickleMaterializer...
CVE-2026-68772
ZenML 0.94.6 contains a remote code execution vulnerability in the CloudpickleMaterializer component that allows attacke
A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote...
CVE-2026-20338
A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condi
A vulnerability in the XAR file format parser of ClamAV could allow an unauthenticated, remote...
CVE-2026-20348
A vulnerability in the XAR file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS c
A vulnerability in the Mach-O file format parser of ClamAV could allow an unauthenticated, remote...
CVE-2026-20347
A vulnerability in the Mach-O file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a Do
A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote...
CVE-2026-20339
A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a Do
A vulnerability in the PDF file format parser of ClamAV could allow an unauthenticated, remote...
CVE-2026-20346
A vulnerability in the PDF file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS c