Improper limitation of a pathname to a restricted directory ('path traversal') in Application...
CVE-2026-49163
Improper limitation of a pathname to a restricted directory ('path traversal') in Application Insights Profiler allows a
#severity:high
共收录 5387 条相关情报。
← 返回所有主题A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds...
CVE-2026-8325
A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Write vulnerability. A ma
Improper verification of cryptographic signature in Microsoft Teams allows an unauthorized...
CVE-2026-62918
Improper verification of cryptographic signature in Microsoft Teams allows an unauthorized attacker to perform spoofing
A maliciously crafted BMP file, when parsed through certain Autodesk products, can force a...
CVE-2026-7406
A maliciously crafted BMP file, when parsed through certain Autodesk products, can force a Untrusted Pointer Dereference
Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance...
CVE-2026-62836
Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized
llama.cpp builds b1886 through b7445 contain a race condition use-after-free vulnerability in the...
CVE-2026-70640
llama.cpp builds b1886 through b7445 contain a race condition use-after-free vulnerability in the LLaMA-Android JNI wrap
llama.cpp builds b1886 through b7445 contain an integer overflow vulnerability in the LLaMA...
CVE-2026-70638
llama.cpp builds b1886 through b7445 contain an integer overflow vulnerability in the LLaMA-Android JNI wrapper where th
AIL Framework contained a reflected cross-site scripting vulnerability in the /tag/add_tags...
CVE-2026-71445
AIL Framework contained a reflected cross-site scripting vulnerability in the /tag/add_tags endpoint. When an error occu
Flowise through 3.1.4 contains an authentication bypass vulnerability that allows unauthenticated...
CVE-2026-70636
Flowise through 3.1.4 contains an authentication bypass vulnerability that allows unauthenticated attackers to access th
FFmpeg versions from 0.5 up to, but not including, 9.0 contain a signed integer overflow...
CVE-2026-70628
FFmpeg versions from 0.5 up to, but not including, 9.0 contain a signed integer overflow vulnerability in the DVB subtit
FFmpeg versions from 4.4 up to, but not including, 9.0 contain an out-of-bounds heap write...
CVE-2026-70632
FFmpeg versions from 4.4 up to, but not including, 9.0 contain an out-of-bounds heap write vulnerability in the native G
TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read in the...
CVE-2026-70634
TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read in the Dictionary compression revers
TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read vulnerability...
CVE-2026-70633
TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read vulnerability in the Gorilla compres
Dinky's SysConfigController.getAll() handler for GET /api/sysConfig/getAll carries a method-level...
CVE-2026-70559
Dinky's SysConfigController.getAll() handler for GET /api/sysConfig/getAll carries a method-level @SaIgnore annotation t
diboot-core's POST /common/load-related-data endpoint resolves caller-supplied field names to any...
CVE-2026-70557
diboot-core's POST /common/load-related-data endpoint resolves caller-supplied field names to any @TableField column of
TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read vulnerability...
CVE-2026-70635
TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read vulnerability that allows authentica
Flowise through 3.1.4 contains a missing authorization vulnerability that allows authenticated...
CVE-2026-67621
Flowise through 3.1.4 contains a missing authorization vulnerability that allows authenticated workspace members to perf
Flowise through 3.1.4 contains an insecure direct object reference vulnerability in the OpenAI...
CVE-2026-67622
Flowise through 3.1.4 contains an insecure direct object reference vulnerability in the OpenAI Assistants integration th
An authentication issue was addressed with improved state management. This issue is fixed in...
CVE-2026-65400
An authentication issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.9, macOS
sysPass's FileBackupService::doBackupFiles() in lib/SP/Services/Backup/FileBackupService.php...
CVE-2026-63725
sysPass's FileBackupService::doBackupFiles() in lib/SP/Services/Backup/FileBackupService.php around line 388 builds a ta