A flaw was found in CRIU's handling of restartable sequences (rseq) during checkpoint/restore. A...
CVE-2026-18107
A flaw was found in CRIU's handling of restartable sequences (rseq) during checkpoint/restore. A malicious process insid
#severity:high
共收录 5411 条相关情报。
← 返回所有主题The terraform-mcp-server before version 1.1.0 is vulnerable to an authorization bypass in the...
CVE-2026-16496
The terraform-mcp-server before version 1.1.0 is vulnerable to an authorization bypass in the streamable-HTTP stateful t
The terraform-mcp-server before version 1.1.0 is vulnerable to a server-side request forgery...
CVE-2026-14869
The terraform-mcp-server before version 1.1.0 is vulnerable to a server-side request forgery issue in the streamable-HTT
datamodel-code-generator vulnerable to SSRF via --url: no host/IP validation, follows redirects
CVE-2026-54691
### Summary `datamodel-code-generator`'s built-in HTTP fetcher (`http.get_body`) issues an `httpx.GET` against any URL
datamodel-code-generator vulnerable to arbitrary local file read via XSD `schemaLocation` (`xs:include`/`xs:import`) path traversal, with no remote-ref gate
CVE-2026-55390
### Summary When generating models from an XML Schema (`--input-file-type xmlschema`), `datamodel-code-generator` resol
Microsoft Security Advisory CVE-2026-32203 – .NET and Visual Studio Denial of Service Vulnerability
CVE-2026-32203
## Executive Summary: Microsoft is releasing this security advisory to provide information about a vulnerability in Sy
Fission: Zip Slip in pkg/utils/zip.go:Unarchive allows fetcher to write outside the destination directory
CVE-2026-50567
`Unarchive` in `pkg/utils/zip.go` joined each archive entry name with the destination directory via `filepath.Join` and
Fission: Incomplete capability denylist in Environment/Function PodSpec validation allows tenant-added CAP_SYS_TIME and cross-tenant node wall-clock corruption
CVE-2026-50570
Fission v1.24.0 added PodSpec safety validation for tenant-facing Environment and Function CRDs (`ValidatePodSpecSafety`
TinyWeb through 0.0.8 contains a path traversal vulnerability that allows unauthenticated...
CVE-2026-67185
TinyWeb through 0.0.8 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary fi
In schreibfaul1 ESP32-audioI2S 3.4.5, a heap-based buffer overflow in the ID3v2 APIC frame...
CVE-2026-51275
In schreibfaul1 ESP32-audioI2S 3.4.5, a heap-based buffer overflow in the ID3v2 APIC frame parsing function in audiolib
TinyWeb through 0.0.8 contains a memory leak vulnerability that allows unauthenticated attackers...
CVE-2026-67183
TinyWeb through 0.0.8 contains a memory leak vulnerability that allows unauthenticated attackers to exhaust available me
Adobe Photoshop Installer was affected by an Uncontrolled Search Path Element vulnerability that...
CVE-2026-48388
Adobe Photoshop Installer was affected by an Uncontrolled Search Path Element vulnerability that could have resulted in
Format Plugins is affected by a Heap-based Buffer Overflow vulnerability that could result in...
CVE-2026-48372
Format Plugins is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution i
In schreibfaul1 ESP32-audioI2S 3.4.5, a heap-based buffer overflow in the ID3v2 SYLT synchronized...
CVE-2026-51274
In schreibfaul1 ESP32-audioI2S 3.4.5, a heap-based buffer overflow in the ID3v2 SYLT synchronized lyrics parser in audio
Unauthenticated Server Side Request Forgery (SSRF) in FormCraft <= 3.9.15 versions.
CVE-2026-65442
Unauthenticated Server Side Request Forgery (SSRF) in FormCraft <= 3.9.15 versions.
Unauthenticated Cross Site Scripting (XSS) in BackWPup <= 5.7.4 versions.
CVE-2026-65443
Unauthenticated Cross Site Scripting (XSS) in BackWPup <= 5.7.4 versions.
Unauthenticated Cross Site Scripting (XSS) in Kali Forms <= 2.4.18 versions.
CVE-2026-65446
Unauthenticated Cross Site Scripting (XSS) in Kali Forms <= 2.4.18 versions.
Unauthenticated Cross Site Scripting (XSS) in Message Filter for Contact Form 7 <= 1.6.3.9 versions.
CVE-2026-65438
Unauthenticated Cross Site Scripting (XSS) in Message Filter for Contact Form 7 <= 1.6.3.9 versions.
Unauthenticated Broken Access Control in Xendit Payment <= 7.1.0 versions.
CVE-2026-66473
Unauthenticated Broken Access Control in Xendit Payment <= 7.1.0 versions.
Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.3 versions.
CVE-2026-65441
Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.3 versions.