PHP_CodeSniffer gitblame report command injection via crafted filename
CVE-2026-67434
### Impact PHP_CodeSniffer versions before v3.13.6 and v4.0.2 contain a command injection vulnerability in the code cre
#severity:high
共收录 5387 条相关情报。
← 返回所有主题ngx-extended-pdf-viewer bundles a version of pdf.js vulnerable to CVE-2026-16633
ngx-extended-pdf-viewer embeds a fork of Mozilla's pdf.js rather than depending on pdfjs-dist, so this vulnerability is
PDF.js: Arbitrary JavaScript execution upon opening a malicious PDF
CVE-2026-16633
### Impact If PDF.js is used to load a malicious PDF, and PDF.js is configured with `enableScripting` set to true (whic
Craft CMS: Arbitrary user password reset leading to administrator account takeover
The vulnerability allows any authenticated user to change their own password without providing the current password or h
Craft CMS: Authenticated RCE through Twig sandbox escape
The Twig sandbox mechanism in Craft CMS is configured to allow dangerous functionality from the Yii framework, leading t
Craft CMS: Authenticated RCE via `condition.config` JSON cleanse bypass
Craft CMS has an authenticated remote code execution issue in the control panel element-search condition handling. Craf
league/commonmark: Denial of service via colliding heading slugs
### Impact `UniqueSlugNormalizer::normalize()` makes each slug document-unique by searching for an unused numeric suffi
league/commonmark: Denial of service via duplicate footnote definitions
### Impact The Footnote extension records one backref per footnote *reference* and then appends the **entire** backref
league/commonmark: Denial of service via adjacent inline attribute blocks
### Impact With the Attributes extension enabled, `AttributesListener::findTargetAndDirection()` resolves each attribut
league/commonmark: Quadratic-time denial of service when parsing crafted Markdown
CVE-2026-71488
### Impact Affected versions of `league/commonmark` can have quadratic time complexity when parsing specially crafted M
JS-YAML: Quadratic CPU consumption in !!omap resolution (3.x and 4.x) — CVE-2026-59870 fix not backported
# Quadratic CPU consumption in `!!omap` resolution (js-yaml 3.x and 4.x) ## Summary `resolveYamlOmap()` enforces key u
Nx: Zip-Slip in the self-hosted remote cache
CVE-2026-71476
## Summary The Nx **self-hosted HTTP remote cache** extracts downloaded cache artifacts without constraining where file
A vulnerability was identified in UTT HiPER 1250GW up to v3.2.7-210907-180535. The impacted...
CVE-2026-18897
A vulnerability was identified in UTT HiPER 1250GW up to v3.2.7-210907-180535. The impacted element is the function strc
A vulnerability was found in UTT HiPER 1250GW up to 3.2.7-210907-180535. Impacted is the function...
CVE-2026-18895
A vulnerability was found in UTT HiPER 1250GW up to 3.2.7-210907-180535. Impacted is the function strcpy of the file /go
Odysseus before commit bf325f6 contains a missing authorization vulnerability that allows...
CVE-2026-70619
Odysseus before commit bf325f6 contains a missing authorization vulnerability that allows authenticated non-admin users
Buffer Overflow vulnerability exists in open62541 1.5.5 when the Local Discovery Server (LDS) is...
CVE-2026-67858
Buffer Overflow vulnerability exists in open62541 1.5.5 when the Local Discovery Server (LDS) is built with multicast di
An issue in open62541 v.1.5.5 and before allows a remote attacker to cause a denial of service...
CVE-2026-67861
An issue in open62541 v.1.5.5 and before allows a remote attacker to cause a denial of service via the UA_Client_getRemo
Buffer Overflow vulnerability in open62541 v1.5.5 allows a remote attacker to cause a denial of...
CVE-2026-67859
Buffer Overflow vulnerability in open62541 v1.5.5 allows a remote attacker to cause a denial of service via the Discover
open62541 1.5.5 contains an out-of-bounds read in the client-side function...
CVE-2026-67857
open62541 1.5.5 contains an out-of-bounds read in the client-side function responseReadNamespacesArray() in src/client/u
A vulnerability was found in H3C NX15 V100R017. This impacts the function reload.reload_config of...
CVE-2026-18814
A vulnerability was found in H3C NX15 V100R017. This impacts the function reload.reload_config of the file /api/esps. Th