SimpleSAMLphp has Possible DoS via XPath Transform
CVE-2026-49289
## Summary This library turned out to be vulnerable to Denial-of-Service attacks using XPath transforms. A mitigation h
#severity:high
共收录 5441 条相关情报。
← 返回所有主题Zebra Address Book Aborted by IPv4-Mapped Mempool Misbehavior Update
CVE-2026-52829
### Am I affected You are affected if: 1. You run `zebrad` up to and including `v4.4.1`. 2. Your node listens on the d
SimpleSAMLphp HTTP-Artifact TLS validator confusion allows cross-IdP authentication bypass
CVE-2026-49283
## Summary SimpleSAMLphp's HTTP-Artifact receive path can treat an unsigned embedded SAML `Response` as cryptographical
Linuxfabrik Monitoring Plugins: Sudoers may be able to obtain privilege escalation via /usr/bin/apt-get arguments
CVE-2026-52817
### Summary In the [Debian.sudoers](https://github.com/Linuxfabrik/monitoring-plugins/blob/main/assets/sudoers/Debian.su
@asymmetric-effort/nogginlessdom's Path Traversal in matchFileSnapshot allows arbitrary file write
## Summary The `matchFileSnapshot` function in `src/assertions/snapshots.ts` accepted a `filePath` parameter with zero
jsonata: Malicious inputs to "$toMillis" function can cause resource exhaustion
CVE-2026-52746
### Impact In JSONata `= 2.2.0 via fixes that include https://github.com/jsonata-js/jsonata/pull/782 and https://github.
Insufficient validation of untrusted input in Dawn in Google Chrome on Android prior to 150.0...
CVE-2026-14428
Insufficient validation of untrusted input in Dawn in Google Chrome on Android prior to 150.0.7871.46 allowed a remote a
Description: To issue and renew TLS certificates on behalf of customers, Cloudflare's...
CVE-2026-14440
Description: To issue and renew TLS certificates on behalf of customers, Cloudflare's Universal SSL feature automati
Use after free in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute...
CVE-2026-14432
Use after free in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code inside
Type Confusion in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute...
CVE-2026-14431
Type Confusion in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code inside
Insufficient validation of untrusted input in Skia in Google Chrome prior to 150.0.7871.46...
CVE-2026-14429
Insufficient validation of untrusted input in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who
Integer overflow in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to...
CVE-2026-14430
Integer overflow in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code insid
Use after free in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who...
CVE-2026-14426
Use after free in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who convinced a user to engage in
Heap buffer overflow in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker...
CVE-2026-14427
Heap buffer overflow in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised the r
Insufficient validation of untrusted input in ANGLE in Google Chrome on Android prior to 150.0...
CVE-2026-14401
Insufficient validation of untrusted input in ANGLE in Google Chrome on Android prior to 150.0.7871.46 allowed a remote
Integer overflow in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who...
CVE-2026-14389
Integer overflow in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised the rende
Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote...
CVE-2026-14409
Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who convinced a use
Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.46...
CVE-2026-14412
Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker wh
Use after free in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute...
CVE-2026-14393
Use after free in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code inside
Out of bounds write in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to...
CVE-2026-14395
Out of bounds write in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code in