As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS...
CVE-2026-20156
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has c
#severity:high
共收录 5441 条相关情报。
← 返回所有主题As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS...
CVE-2026-20150
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has c
Koel: Incomplete fix for CVE-2026-47260 — systemic SSRF in podcast & radio fetch paths
CVE-2026-54491
### Summary The fix for **CVE-2026-47260** (v9.3.5) added an **initial** `isSafeUrl()` check to several fetchers (`sync
Protobuf: Unbounded recursion depth in embedded-message decoding
CVE-2026-54451
### Summary Unbounded recursion depth in `Protobuf.Decoder` (Hex package `protobuf`, versions `>= 0.8.0, >` (tag `0x0A`
LangBot: Authenticated RCE Via MCP Configuration
CVE-2026-54449
### Summary Any authenticated user can achieve arbitrary command execution on the LangBot servers through changing the M
garminconnect Has Insecure Permission Assignment for Garmin OAuth Token Store
CVE-2026-54447
## Insecure Permission Assignment for Garmin OAuth Token Store ### Summary `garminconnect` (≤ 0.3.4) wrote its OAuth t
Kasa EC71 v4 and EC70 v4 firmware contains a static cryptographic private key stored in a read...
CVE-2026-9770
Kasa EC71 v4 and EC70 v4 firmware contains a static cryptographic private key stored in a read-only filesystem that is s
Allocation of Resources Without Limits and Throttling and Sensitive Information in Resource Not...
CVE-2026-13585
Allocation of Resources Without Limits and Throttling and Sensitive Information in Resource Not Removed Before Reuse in
Permissive Cross-domain Security Policy with Untrusted Domains in ASUS GameSDK allows a remote...
CVE-2026-8919
Permissive Cross-domain Security Policy with Untrusted Domains in ASUS GameSDK allows a remote user to obtain a local us
Untrusted Pointer Dereference in ASUS System Control Interface v3, ASUS System Control Interface,...
CVE-2026-15029
Untrusted Pointer Dereference in ASUS System Control Interface v3, ASUS System Control Interface, and ASUS Business Mana
Improper Restriction of Communication Channel to Intended Endpoints and External Control of File...
CVE-2026-8920
Improper Restriction of Communication Channel to Intended Endpoints and External Control of File Name or Path in Aura Wa
Illustrator is affected by an out-of-bounds write vulnerability that could result in arbitrary...
CVE-2026-48337
Illustrator is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the con
Illustrator is affected by an out-of-bounds write vulnerability that could result in arbitrary...
CVE-2026-48335
Illustrator is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the con
CAI Content Credentials is affected by an Untrusted Search Path vulnerability that could result...
CVE-2026-48287
CAI Content Credentials is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execut
CAI Content Credentials is affected by an Insufficiently Protected Credentials vulnerability that...
CVE-2026-48295
CAI Content Credentials is affected by an Insufficiently Protected Credentials vulnerability that could result in disclo
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could...
CVE-2026-48351
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in an application de
CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that...
CVE-2026-48290
CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in arbitrary
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could...
CVE-2026-48352
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in an application de
Illustrator is affected by an out-of-bounds write vulnerability that could result in arbitrary...
CVE-2026-48336
Illustrator is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the con
Illustrator is affected by an Untrusted Search Path vulnerability that could result in arbitrary...
CVE-2026-48275
Illustrator is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the c