Dify before 1.16.0-rc1 contains a SQL injection vulnerability in the MyScale vector store backend...
CVE-2026-61461
Dify before 1.16.0-rc1 contains a SQL injection vulnerability in the MyScale vector store backend that allows attackers
#severity:high
共收录 5441 条相关情报。
← 返回所有主题Authorization bypass through User-Controlled key vulnerability in Teracity Software Technologies...
CVE-2026-6212
Authorization bypass through User-Controlled key vulnerability in Teracity Software Technologies Inc. TeraMIS allows Pri
Krayin CRM through 2.2.3 contains an insecure direct object reference vulnerability in...
CVE-2026-61460
Krayin CRM through 2.2.3 contains an insecure direct object reference vulnerability in LeadController, PersonController,
HestiaCP before 1.9.5 contains an authenticated OS command injection vulnerability that allows...
CVE-2025-30007
HestiaCP before 1.9.5 contains an authenticated OS command injection vulnerability that allows low-privilege authenticat
Clauster: Non-loopback deployments can serve the dashboard unauthenticated when auth.enabled is unset
### Summary A Clauster instance bound to a **non-loopback** address (e.g. `0.0.0.0` or a LAN IP) can serve the entire da
mcp-atlassian: Arbitrary file read via missing path validation in confluence_upload_attachment
### Summary `confluence_upload_attachment` passes `file_path` directly to `open(file_path, "rb")` with no path validatio
mcp-atlassian: Arbitrary server-side file read via attachment upload
### Summary A client that can invoke MCP tools can read **arbitrary files from the server host** and exfiltrate them as
SafeInstall agent guard shell parsing can miss raw package execution
## Summary SafeInstall CLI through 0.10.1 can fail to recognize some package-manager and registry-runner commands in it
NotrinosERP: Authenticated arbitrary file upload leads to remote code execution via HRM employee "Documents" (doc_file)
#### Summary An authenticated user with the HR "Manage Employees" permission (`SA_EMPLOYEE`) can upload a file with an a
BabelDOC: Arbitrary Code Execution via CMap Pickle Deserialization in babeldoc/pdfminer/cmapdb.py
CVE-2026-54071
## Arbitrary Code Execution via CMap Pickle Deserialization in babeldoc/pdfminer/cmapdb.py ### Summary BabelDOC's vend
SiYuan: Stored XSS in Bazaar marketplace via package README event handlers
CVE-2026-54070
## Summary `renderPackageREADME` in `kernel/bazaar/readme.go` renders a Bazaar package README from Markdown to HTML wit
Excelize: Unbounded Row Index Allocation in Worksheet Parser (checkSheet OOM/Panic DoS)
CVE-2026-54063
## Unbounded Row Index Allocation in Worksheet Parser (checkSheet OOM/Panic DoS) ### Summary The `checkSheet()` functio
SiYuan: Path Traversal via Double URL Encoding in /assets/*path (publish mode arbitrary file─read), Incomplete fix of CVE-2026-41894
CVE-2026-54066
## Summary The patch for CVE-2026-41894 ("Path Traversal via Double URL Encoding") sanitized the `/export/` route but
libp2p: CPU DoS via oversized IHAVE and IWANT control message arrays
CVE-2026-49866
### Summary gossipsub processes IHAVE and IWANT control messages by iterating every received message ID synchronously be
Cotonti Siena 0.9.26 and earlier contains a cross-site request forgery vulnerability that allows...
CVE-2026-58143
Cotonti Siena 0.9.26 and earlier contains a cross-site request forgery vulnerability that allows unauthenticated attacke
The LoginPress Pro plugin for WordPress is vulnerable to Authentication Bypass via Unverified...
CVE-2026-12595
The LoginPress Pro plugin for WordPress is vulnerable to Authentication Bypass via Unverified OAuth Email in all version
An Improper Handling of Undefined Parameters vulnerability in the packet forwarding engine (pfe)...
CVE-2026-57032
An Improper Handling of Undefined Parameters vulnerability in the packet forwarding engine (pfe) of Juniper Networks Jun
The LoginPress Pro plugin for WordPress is vulnerable to Authentication Bypass via the GitHub...
CVE-2026-12597
The LoginPress Pro plugin for WordPress is vulnerable to Authentication Bypass via the GitHub OAuth callback in versions
The LoginPress Pro plugin for WordPress is vulnerable to authentication bypass in versions up to...
CVE-2026-12598
The LoginPress Pro plugin for WordPress is vulnerable to authentication bypass in versions up to and including 6.2.3 via
An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding...
CVE-2026-57020
An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engine (pfe) of Juniper N