Pronetiqs IntraVUE versions 3.2.1a14 and prior have an inadequate encryption strength...
CVE-2026-50044
Pronetiqs IntraVUE versions 3.2.1a14 and prior have an inadequate encryption strength vulnerability which could allow an
#severity:high
共收录 5441 条相关情报。
← 返回所有主题9Router before 0.4.72 contains a server-side request forgery (SSRF) vulnerability in the /v1/web...
CVE-2026-63313
9Router before 0.4.72 contains a server-side request forgery (SSRF) vulnerability in the /v1/web/fetch endpoint. The end
cal.com (calcom repository, later renamed cal.diy) is affected by a repository takeover...
CVE-2024-58354
cal.com (calcom repository, later renamed cal.diy) is affected by a repository takeover vulnerability in its GitHub Acti
A bug in the entropy initialization for SiWx917 causes the DRBG to use a predictable seed. As...
CVE-2026-6924
A bug in the entropy initialization for SiWx917 causes the DRBG to use a predictable seed. As such, all random numbers g
The affected product is vulnerable to a stack-based buffer overflow, which may allow an attacker...
CVE-2026-50039
The affected product is vulnerable to a stack-based buffer overflow, which may allow an attacker to cause a memory corru
A NULL pointer dereference in the L2 GOOSE and R-GOOSE shared parser, which may allow a network...
CVE-2026-50103
A NULL pointer dereference in the L2 GOOSE and R-GOOSE shared parser, which may allow a network-adjacent attacker to cra
A NULL pointer dereference in the MMS Write Named Variable List handler, which may allow a...
CVE-2026-50032
A NULL pointer dereference in the MMS Write Named Variable List handler, which may allow a network adjacent attacker to
FFmpeg versions 2.7 through 8.1.2 contain an out-of-bounds write vulnerability in the TDSC video...
CVE-2026-65703
FFmpeg versions 2.7 through 8.1.2 contain an out-of-bounds write vulnerability in the TDSC video decoder that allows rem
Victor SSRF vulnerability in Johnson Controls CCure 9000 and victor application server allows...
CVE-2026-21653
Victor SSRF vulnerability in Johnson Controls CCure 9000 and victor application server allows Server Side Request Forger
Insufficient session expiration vulnerability in Progress MOVEit Transfer. This issue affects...
CVE-2026-15967
Insufficient session expiration vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2
Improper neutralization of input during web page generation ('cross-site scripting')...
CVE-2026-15968
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Progress MOVEit Tr
FFmpeg versions 3.4 through 8.1.2 contain an out-of-bounds write vulnerability in the...
CVE-2026-65705
FFmpeg versions 3.4 through 8.1.2 contain an out-of-bounds write vulnerability in the vf_floodfill video filter that all
FFmpeg versions 3.0 through 8.1.2 contain an out-of-bounds write vulnerability in the vf_swaprect...
CVE-2026-65706
FFmpeg versions 3.0 through 8.1.2 contain an out-of-bounds write vulnerability in the vf_swaprect video filter that allo
Deserialization of untrusted data vulnerability in Johnson Control victor on Windows allows capec...
CVE-2026-21655
Deserialization of untrusted data vulnerability in Johnson Control victor on Windows allows capec-586. This issue affec
Cwe-269 vulnerability in Johnson Controls victor Web on Windows allows capec-233. This issue...
CVE-2026-34496
Cwe-269 vulnerability in Johnson Controls victor Web on Windows allows capec-233. This issue affects victor Web: before
Chatwoot before 4.16.0 contains an authentication bypass vulnerability in the direct uploads...
CVE-2026-63765
Chatwoot before 4.16.0 contains an authentication bypass vulnerability in the direct uploads controller that allows unau
Permissive cross-domain security policy with untrusted domains vulnerability in Progress MOVEit...
CVE-2026-15966
Permissive cross-domain security policy with untrusted domains vulnerability in Progress MOVEit Transfer. This issue af
gpsd through release-3.27.5, fixed at commit 4c06658, contains a code injection vulnerability in...
CVE-2026-60122
gpsd through release-3.27.5, fixed at commit 4c06658, contains a code injection vulnerability in the gpsprof utility tha
FFmpeg through 8.1.2 contains an out-of-bounds write vulnerability that allows attackers to cause...
CVE-2026-65704
FFmpeg through 8.1.2 contains an out-of-bounds write vulnerability that allows attackers to cause heap corruption by sup
Improper Authentication vulnerability in Progress MOVEit Transfer. This issue affects MOVEit...
CVE-2026-10697
Improper Authentication vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.5,