Directory traversal vulnerability in Kerlink Kerlink Wirnet iStation 868 KerOS v.4.3...
CVE-2024-32386
Directory traversal vulnerability in Kerlink Kerlink Wirnet iStation 868 KerOS v.4.3.3_20200803132042 allows a remote at
#severity:high
共收录 5441 条相关情报。
← 返回所有主题An out-of-bounds write vulnerability in the Productivity Suite allows a local attacker to...
CVE-2026-61389
An out-of-bounds write vulnerability in the Productivity Suite allows a local attacker to trigger kernel memory corrupt
Improper Privilege Management in Zoom Rooms for Windows before version 7.1.0 may allow an...
CVE-2026-53409
Improper Privilege Management in Zoom Rooms for Windows before version 7.1.0 may allow an authenticated user to conduct
An out-of-bounds write vulnerability in the Productivity Suite allows a local attacker to...
CVE-2026-60063
An out-of-bounds write vulnerability in the Productivity Suite allows a local attacker to trigger kernel memory corrupt
SALTO ProAccess Space software using the tenancy feature / logical partition is vulnerable to a...
CVE-2026-11889
SALTO ProAccess Space software using the tenancy feature / logical partition is vulnerable to a privilege escalation at
A vulnerability exists in the Health & Safety (HS) application of NASA's Core Flight System (cFS)...
CVE-2026-15352
A vulnerability exists in the Health & Safety (HS) application of NASA's Core Flight System (cFS). The flaw allows the a
ArcadeDB has cross-database IDOR: /ts/*, /batch/*, Prometheus and Grafana handlers bypass authorization
About 14 HTTP handlers resolve the {database} path param and call getDatabase(...) WITHOUT user.canAccessToDatabase(...)
ArcadeDB: Scripting authorization gate (GHSA-48qw-824m-86pr) bypassed via SQL DEFINE FUNCTION ... LANGUAGE js
The GHSA-48qw-824m-86pr hardening added a checkPermissionsOnDatabase(UPDATE_SECURITY) gate on the polyglot engine (Polyg
ArcadeDB: Trigger scripts run with java.lang.* allowed, enabling OS command execution (RCE)
ScriptTriggerExecutor sets allowedPackages to java.lang.*, java.util.*, java.time.*, java.math.* (ScriptTriggerExecutor.
MCP Python SDK: WebSocket server transport does not support Host/Origin validation
CVE-2026-59950
### Summary In affected versions, the deprecated WebSocket server transport (`mcp.server.websocket.websocket_server`) ac
ArcadeDB: Privilege escalation via reader role in /api/v1/command JS scripting language — arbitrary host file read
### Impact A user holding only `reader` (read-only) privileges on a single database could execute arbitrary JVM code by
Pheditor: Incomplete command sanitization in terminal feature allows RCE via pipe operator, backtick substitution, and newline injection
CVE-2026-55578
### Summary The terminal feature in Pheditor uses an incomplete character blocklist to sanitize user-supplied commands
ArcadeDB: Read-only users can mutate database schema (incomplete fix of CVE-2026-44221)
CVE-2026-54076
### Impact The fix for CVE-2026-44221 (GHSA-fxc7-fm93-6q77) added an `UPDATE_SCHEMA` authorization check to a single sc
ArcadeDB: IMPORT DATABASE allows SSRF and arbitrary local file read by authenticated users
CVE-2026-54077
### Impact The SQL `IMPORT DATABASE` statement did not require administrative privileges and passed its source URL to t
Pheditor has an authenticated terminal command whitelist bypass
CVE-2026-54540
### Summary Pheditor 2.0.4 has an authenticated terminal command whitelist bypass. The terminal feature checks whether
MCP Python SDK: HTTP transports serve session requests without verifying the authenticated principal
CVE-2026-52869
### Summary In affected versions, the SSE and Streamable HTTP server transports routed incoming requests to an existing
MCP Python SDK: Experimental task handlers allow any client to access and cancel other clients' tasks
CVE-2026-52870
### Summary In affected versions, the default request handlers installed by the experimental tasks feature (`server.expe
Nuclio: Unsanitized runtimeAttributes.repositories injected into Groovy build.gradle leads to build-time RCE
CVE-2026-52833
## Summary Nuclio's Java runtime generates a `build.gradle` file during function builds using Go's `text/template` pack
Envoy Gateway: xDS Control Plane Information Disclosure when operating in GatewayNamespaceMode
CVE-2026-53714
### Impact When Envoy Gateway runs in GatewayNamespaceMode (`provider.kubernetes.deploy.type=GatewayNamespace`), the xDS
A flaw was found in Keycloak. When the JSON Web Token (JWT) authorization grant preview feature...
CVE-2026-1609
A flaw was found in Keycloak. When the JSON Web Token (JWT) authorization grant preview feature is enabled and a user ac