NVIDIA Dynamo for Linux contains a vulnerability in the multimodal media fetcher where an...
CVE-2026-47617
NVIDIA Dynamo for Linux contains a vulnerability in the multimodal media fetcher where an attacker may cause server-side
#severity:high
共收录 5387 条相关情报。
← 返回所有主题A vulnerability allowing local privilege escalation to the Reporter service context.
CVE-2026-64634
A vulnerability allowing local privilege escalation to the Reporter service context.
NVIDIA Dynamo for Linux contains a vulnerability in the Rust multimodal media fetcher where an...
CVE-2026-47618
NVIDIA Dynamo for Linux contains a vulnerability in the Rust multimodal media fetcher where an attacker could cause serv
A flaw in Node.js HTTP/2 handling can cause HTTP/2 retained header blocks evade maxSessionMemory...
CVE-2026-56846
A flaw in Node.js HTTP/2 handling can cause HTTP/2 retained header blocks evade maxSessionMemory and enable remote memor
A post-authentication command injection vulnerability in the "export-cgi" CGI program in Zyxel...
CVE-2026-6837
A post-authentication command injection vulnerability in the "export-cgi" CGI program in Zyxel WAX650S firmware versions
An unauthenticated path traversal (LFI) vulnerability exists under /custom-sounds/ when...
CVE-2026-56845
An unauthenticated path traversal (LFI) vulnerability exists under /custom-sounds/ when CustomSounds storage is configur
Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to...
CVE-2026-66318
Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based)...
CVE-2026-66321
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized
Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to...
CVE-2026-66322
Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a ne
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code...
CVE-2026-66315
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
External control of file name or path in Microsoft Edge for Android allows an unauthorized...
CVE-2026-65802
External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclose informat
External control of file name or path in Microsoft Edge for Android allows an unauthorized...
CVE-2026-66310
External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclose informat
A security vulnerability has been detected in GL.iNet GL-MT3000 up to 4.4.5. Impacted is the...
CVE-2026-18685
A security vulnerability has been detected in GL.iNet GL-MT3000 up to 4.4.5. Impacted is the function set_upgrade of the
A vulnerability was detected in GL.iNet GL-MT3000 up to 4.4.5. The affected element is the...
CVE-2026-18686
A vulnerability was detected in GL.iNet GL-MT3000 up to 4.4.5. The affected element is the function nas-web.add_user of
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a...
CVE-2026-62870
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
Adobe Campaign Classic (ACC) is affected by a Violation of Secure Design Principles vulnerability...
CVE-2026-48399
Adobe Campaign Classic (ACC) is affected by a Violation of Secure Design Principles vulnerability that could result in a
A weakness has been identified in GL.iNet GL-MT3000 up to 4.4.5. This issue affects the function...
CVE-2026-18684
A weakness has been identified in GL.iNet GL-MT3000 up to 4.4.5. This issue affects the function remove_profile of the f
FirmaCheck for Windows before 1.3.16 contains a dll hijacking vulnerability that allows local...
CVE-2026-41447
FirmaCheck for Windows before 1.3.16 contains a dll hijacking vulnerability that allows local attackers to execute arbit
Shlink contains a blind SQL injection vulnerability that allows any authenticated API key holder...
CVE-2026-18737
Shlink contains a blind SQL injection vulnerability that allows any authenticated API key holder to inject arbitrary SQL
Apache NiFi 1.5.0 through 2.10.0 support gzip-encoded HTTP requests for the application REST API...
CVE-2026-68981
Apache NiFi 1.5.0 through 2.10.0 support gzip-encoded HTTP requests for the application REST API using a Jersey encoding