Memory Corruption when processing asynchronous input parameters due to improper handling of...
CVE-2026-25271
Memory Corruption when processing asynchronous input parameters due to improper handling of modified values between chec
#severity:high
共收录 5441 条相关情报。
← 返回所有主题Memory Corruption when allocating memory with sizes that exceed the maximum allowed value.
CVE-2026-21379
Memory Corruption when allocating memory with sizes that exceed the maximum allowed value.
Memory Corruption when processing invalid HT40 channel layouts during dynamic channel switching...
CVE-2026-25268
Memory Corruption when processing invalid HT40 channel layouts during dynamic channel switching operations.
Cryptographic Issue when using a static initialization vector for AES-GCM key wrapping, which...
CVE-2026-21383
Cryptographic Issue when using a static initialization vector for AES-GCM key wrapping, which requires a unique value fo
HashiCorp Terraform Enterprise contained an issue in its version control system (VCS) ingestion...
CVE-2026-14468
HashiCorp Terraform Enterprise contained an issue in its version control system (VCS) ingestion of registry modules that
A missing authorization vulnerability exists in the embedded webserver of HP Deskjet 2800 Series...
CVE-2026-13753
A missing authorization vulnerability exists in the embedded webserver of HP Deskjet 2800 Series Printers running firmwa
Craft CMS: DOM XSS via GitHub issue title in CraftSupport widget
CVE-2026-55790
## Summary An attacker with only a GitHub account can plant a JavaScript payload in a `craftcms/cms` issue title. When
Linuxfabrik Monitoring Plugins have local privilege escalation using embedded command
CVE-2026-55426
### Summary When a check plugin places user provided input inside a command which is passed to `shell_exec`, an attacker
Coder's AI Bridge Proxy skips TLS certificate verification in default configuration
CVE-2026-55436
### Summary The AI Bridge Proxy (`aibridgeproxyd`) created a goproxy server whose default transport set `InsecureSkipVe
Coder's session token leaked to arbitrary hosts via `coder open app` for external workspace apps
CVE-2026-55431
### Summary `coder open app` opens external workspace-app URLs without validating the scheme or host. When an external
Coder: Route hijacking through lack of validation of agent-supplied AllowedIPs in tailnet coordinator
CVE-2026-55428
### Summary The tailnet coordinator validates that an agent's `Addresses` derive from its authenticated UUID but applie
Coder's workspace app upsert allows cross-workspace agent rebinding via user-controlled app ID
CVE-2026-55429
### Summary `UpsertWorkspaceApp` overwrites an existing app's `agent_id` on a primary-key conflict and `insertAgentApp`
Coder vulnerable to SSH config injection via unsanitized server-supplied values in `coder config-ssh`
CVE-2026-55427
### Summary `coder config-ssh` wrote server-supplied SSH settings (`HostnameSuffix`, `SSHConfigOptions`) into the user'
Coder: User-admin role can reset owner account password
CVE-2026-55077
### Summary The `PUT /api/v2/users/{user}/password` endpoint authorized only `ActionUpdatePersonal` and did not prevent
Coder vulnerable to OIDC account takeover via email-based user matching and email_verified bypass
CVE-2026-55075
### Summary Two flaws in Coder's OIDC login chained into account takeover: email-based user matching fell back to linki
Coder's OIDC email_verified type coercion bypass enables account takeover via unverified email linking
CVE-2026-55076
### Summary Coder's OIDC callback checked `email_verified` with a direct Go `bool` type assertion. When an IdP returned
OpenRemote has an incomplete fix for CVE-2026-40882: XXE in KNXProtocol.startAssetImport() allows arbitrary file read via unprotected XMLInputFactory
CVE-2026-54640
### Summary The fix for CVE-2026-40882 addressed only the Velbus asset import handler. The KNX asset import handler (`KN
OpenRemote has Cross-Realm User Information Disclosure in UserResourceImpl
CVE-2026-54641
### Summary A realm admin of tenant B can read the profile, client roles, and realm roles of any user in any other real
Langroid: handle_message() executes user-supplied tool JSON without sender verification
CVE-2026-54771
## Summary A Langroid application exposing a chat interface to untrusted users may allow direct tool invocation via raw
A high-severity vulnerability exists in a web application component of BeyondTrust Remote Support...
CVE-2026-40141
A high-severity vulnerability exists in a web application component of BeyondTrust Remote Support and Privileged Remote