GitPython before 3.1.50 fails to validate newline characters in the section parameter of...
CVE-2026-67326
GitPython before 3.1.50 fails to validate newline characters in the section parameter of config_writer(), allowing attac
#severity:high
共收录 5408 条相关情报。
← 返回所有主题better-auth versions >= 1.1.3 and < 1.6.22 (and pre-release versions >= 1.7.0-beta.0 and < 1.7.0...
CVE-2026-67327
better-auth versions >= 1.1.3 and = 1.7.0-beta.0 and < 1.7.0-beta.10) are vulnerable to account takeover via pre-account
GitPython before 3.1.51 contains an incomplete command injection blocklist that fails to account...
CVE-2026-67325
GitPython before 3.1.51 contains an incomplete command injection blocklist that fails to account for git's long-option p
GitPython before 3.1.51 fails to guard against dangerous Git options passed as keyword arguments...
CVE-2026-67323
GitPython before 3.1.51 fails to guard against dangerous Git options passed as keyword arguments in Repo.archive() and g
Traefik versions >= v3.7.0 and <= v3.7.7 contain a path traversal vulnerability in the Kubernetes...
CVE-2026-67309
Traefik versions >= v3.7.0 and <= v3.7.7 contain a path traversal vulnerability in the Kubernetes Ingress NGINX provider
Wazuh 5.0.0-beta1 (fixed in 5.0.0-beta3) does not validate or override the cluster_name and...
CVE-2026-67307
Wazuh 5.0.0-beta1 (fixed in 5.0.0-beta3) does not validate or override the cluster_name and cluster_node fields in inven
Budibase before 3.38.1 contains a server-side request forgery vulnerability in the REST...
CVE-2026-67311
Budibase before 3.38.1 contains a server-side request forgery vulnerability in the REST datasource integration that fail
FreeRDP before 3.29.0 fails to enforce the RESPONSE_SIZE_LIMIT when processing Transfer-Encoding:...
CVE-2026-67297
FreeRDP before 3.29.0 fails to enforce the RESPONSE_SIZE_LIMIT when processing Transfer-Encoding: chunked HTTP responses
FreeRDP before 3.29.0 contains a denial of service vulnerability in the RDPEI server channel...
CVE-2026-67296
FreeRDP before 3.29.0 contains a denial of service vulnerability in the RDPEI server channel handler that fails to valid
FreeRDP versions 3.28.0 and earlier contain a heap buffer overflow in the server-side RAIL...
CVE-2026-67298
FreeRDP versions 3.28.0 and earlier contain a heap buffer overflow in the server-side RAIL channel handler (rail_server_
FreeRDP before 3.29.0 contains out-of-bounds read vulnerabilities in the async update message...
CVE-2026-67301
FreeRDP before 3.29.0 contains out-of-bounds read vulnerabilities in the async update message proxy for the PolygonSC an
FreeRDP before 3.29.0 contains a client-side heap use-after-free in the async update message...
CVE-2026-67299
FreeRDP before 3.29.0 contains a client-side heap use-after-free in the async update message proxy for WINDOW_ICON_ORDER
FreeRDP before 3.29.0 contains client-side heap use-after-free vulnerabilities in the async...
CVE-2026-67300
FreeRDP before 3.29.0 contains client-side heap use-after-free vulnerabilities in the async update message proxy for RAI
FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smartcard device...
CVE-2026-67304
FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smartcard device control request cleanup when
FreeRDP before 3.29.0 contains a heap out-of-bounds read vulnerability in the TSMF FFmpeg decoder...
CVE-2026-67290
FreeRDP before 3.29.0 contains a heap out-of-bounds read vulnerability in the TSMF FFmpeg decoder when parsing AVC1 MPEG
FreeRDP before 3.29.0 (affected versions <= 3.28.0) contains a heap out-of-bounds read in...
CVE-2026-67291
FreeRDP before 3.29.0 (affected versions <= 3.28.0) contains a heap out-of-bounds read in update_process_glyph_fragments
FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smartcard cache...
CVE-2026-67288
FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smartcard cache request decoders that accept
better-auth versions before 1.1.20 contain a bypass vulnerability in trustedOrigins validation...
CVE-2025-71403
better-auth versions before 1.1.20 contain a bypass vulnerability in trustedOrigins validation logic affecting absolute
The Kali Forms — Contact Form & Drag-and-Drop Builder plugin for WordPress is vulnerable to...
CVE-2026-16144
The Kali Forms — Contact Form & Drag-and-Drop Builder plugin for WordPress is vulnerable to Remote Code Execution in all
The Pronamic Pay plugin for WordPress is vulnerable to Privilege Escalation in all versions up to...
CVE-2026-16635
The Pronamic Pay plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 10.1.0