The WPO365 | Login plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions...
CVE-2026-15212
The WPO365 | Login plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 43
#severity:high
共收录 5441 条相关情报。
← 返回所有主题find-my-way: DDoS with HTTP2
CVE-2026-47219
### Impact Remotely triggerable DoS in find-my-way when it is used with Node's HTTP/2 server. The short version is that
Vanna through 2.0.2 contains a path traversal vulnerability in the FileSystemConversationStore...
CVE-2026-65702
Vanna through 2.0.2 contains a path traversal vulnerability in the FileSystemConversationStore persistence integration t
PyTorch torchvision through 0.28.0, fixed in commit 4e05dc2, contains an out-of-bounds heap read...
CVE-2026-65918
PyTorch torchvision through 0.28.0, fixed in commit 4e05dc2, contains an out-of-bounds heap read vulnerability in the GI
Meshery before 1.0.57 contains an unauthenticated arbitrary file read vulnerability in the /api...
CVE-2026-65919
Meshery before 1.0.57 contains an unauthenticated arbitrary file read vulnerability in the /api/system/fileView and /api
Proxygen lacked a generalized slow-consumer detection mechanism in its core HTTP session layer. A...
CVE-2026-44909
Proxygen lacked a generalized slow-consumer detection mechanism in its core HTTP session layer. A remote, unauthenticate
Office-Word-MCP-Server through 1.1.11 contains a path traversal vulnerability in its document...
CVE-2026-65695
Office-Word-MCP-Server through 1.1.11 contains a path traversal vulnerability in its document tools that allows attacker
Joomla Extension - joomshaper.com - unauthenticated payment/order forgery in Easy Store extension...
CVE-2026-65759
Joomla Extension - joomshaper.com - unauthenticated payment/order forgery in Easy Store extension 1.0.0-2.0.1 - Critical
CyberPanel through 1.9.1, fixed in commit b198460, contains an insecure direct object reference ...
CVE-2026-65917
CyberPanel through 1.9.1, fixed in commit b198460, contains an insecure direct object reference (IDOR) vulnerability in
CyberPanel through 1.9.1, fixed in commit b198460, contains a missing authorization vulnerability...
CVE-2026-65916
CyberPanel through 1.9.1, fixed in commit b198460, contains a missing authorization vulnerability in the cancelBackupCre
pypdf: Possible infinite loop for not terminated inline images (ASCII85 and ASCIIHex filter)
CVE-2026-59935
### Impact An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires parsi
pypdf: Possible infinite loop for not terminated inline images
CVE-2026-59936
### Impact An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires parsi
PostCSS: Arbitrary file read and information disclosure via attacker-controlled sourceMappingURL in CSS comments
CVE-2026-45623
## Summary PostCSS's `PreviousMap` parses the `/*# sourceMappingURL=PATH */` comment from any CSS string passed to `pro
PHPSpreadsheet: XLS/OLE sector-chain self-loop causes memory exhaustion
CVE-2026-59933
## Summary PhpSpreadsheet's OLE reader follows sector chains from attacker-controlled XLS/OLE metadata without detectin
PHPSpreadsheet: Gnumeric reader unbounded gzip expansion causes memory exhaustion
CVE-2026-59932
## Summary PhpSpreadsheet's Gnumeric reader reads attacker-supplied `.gnumeric` files into memory and, when the file st
PHPSpreadsheet: SSRF bypass via HTTP redirect in WEBSERVICE() domain whitelist
CVE-2026-59931
### Summary The domain whitelist introduced in PhpSpreadsheet 5.4.0 for the `WEBSERVICE()` formula function can be bypa
Auth.js: getToken() throws an uncaught exception on malformed Bearer authorization headers
## Summary The exported `getToken()` helper (`next-auth/jwt` and `@auth/core/jwt`) can throw an uncaught exception when
Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware ...
CVE-2026-60439
Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Third
Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware ...
CVE-2026-60455
Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Third
Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware ...
CVE-2026-61246
Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Third