The Gravity Forms plugin for WordPress is vulnerable to Directory Traversal in all versions up to...
CVE-2026-12997
The Gravity Forms plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.10.4
#severity:high
共收录 5441 条相关情报。
← 返回所有主题OS command injection in the npm package loading component in AWS jsii-diff before 1.131.0 might...
CVE-2026-15895
OS command injection in the npm package loading component in AWS jsii-diff before 1.131.0 might allow context-dependent
MantisBT: Stored XSS in print_all_bug_page_word.php
CVE-2026-62944
A missing output encoding call in print_all_bug_page_word.php allows any authenticated user to inject arbitrary HTML int
A flaw was found in the AAP Gateway Envoy proxy configuration. The non-mTLS route to EDA event...
CVE-2026-12382
A flaw was found in the AAP Gateway Envoy proxy configuration. The non-mTLS route to EDA event streams does not remove t
In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.8, and 9.4.13, and Splunk Cloud Platform...
CVE-2026-20296
In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.8, and 9.4.13, and Splunk Cloud Platform versions below 10.5.26
Cherry Studio versions 1.2.2 through 1.9.12, fixed in commit 1518530, contain a remote code...
CVE-2026-40501
Cherry Studio versions 1.2.2 through 1.9.12, fixed in commit 1518530, contain a remote code execution vulnerability in S
In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.8, 9.4.13, and 9.3.14, and Splunk Cloud...
CVE-2026-20297
In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.8, 9.4.13, and 9.3.14, and Splunk Cloud Platform versions below
PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution...
CVE-2026-58659
PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_st
immich before 3.0.3 contains a broken access control vulnerability in the PUT /albums/:id/user/...
CVE-2026-59258
immich before 3.0.3 contains a broken access control vulnerability in the PUT /albums/:id/user/:userId endpoint that all
Dell ThinOS 10, versions prior to 2605_10.2100, contain an Obsolete Feature in UI vulnerability....
CVE-2026-56687
Dell ThinOS 10, versions prior to 2605_10.2100, contain an Obsolete Feature in UI vulnerability. A low privileged attack
Kanboard through 1.2.52, fixed in commit 564cc30, BoardAjaxController save() method (used by the...
CVE-2026-58660
Kanboard through 1.2.52, fixed in commit 564cc30, BoardAjaxController save() method (used by the kanban board drag-and-d
BloodHound through 9.4.0, fixed in commit 8f79035, contains a missing authorization vulnerability...
CVE-2026-59255
BloodHound through 9.4.0, fixed in commit 8f79035, contains a missing authorization vulnerability in the custom-nodes AP
ws before 8.21.1 contains a memory exhaustion vulnerability in lib/receiver.js where the fragment...
CVE-2026-62389
ws before 8.21.1 contains a memory exhaustion vulnerability in lib/receiver.js where the fragment guard only triggers wh
GPUStack through 2.2.1, fixed in commit 4e20551, contains an unauthenticated information...
CVE-2026-58658
GPUStack through 2.2.1, fixed in commit 4e20551, contains an unauthenticated information disclosure vulnerability that a
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS...
CVE-2026-20187
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has c
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS...
CVE-2026-20158
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has c
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS...
CVE-2026-20157
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has c
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_slice_module module. When...
CVE-2026-60005
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_slice_module module. When the slice directive and
Microsoft AVML before 0.17.0 could follow a symlink when opening a destination output path on...
CVE-2026-61371
Microsoft AVML before 0.17.0 could follow a symlink when opening a destination output path on Unix, allowing truncation/
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS...
CVE-2026-20153
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has c