rtapi_app in linuxcnc-uspace in LinuxCNC before 2.9.9 allows privilege escalation. It is...
CVE-2026-58302
rtapi_app in linuxcnc-uspace in LinuxCNC before 2.9.9 allows privilege escalation. It is installed SUID root and loads s
#severity:high
共收录 5441 条相关情报。
← 返回所有主题NLTK version 3.9.4 is vulnerable to a path traversal attack due to an incomplete fix for GitHub...
CVE-2026-12243
NLTK version 3.9.4 is vulnerable to a path traversal attack due to an incomplete fix for GitHub Issue #3504. The `_UNSAF
Dgraph Vulnerable to DQL Injection via checkUserPassword GraphQL Query
CVE-2026-44840
## Summary The `checkUserPassword` GraphQL query in Dgraph is vulnerable to DQL (Dgraph Query Language) injection. User
PBackupVSS.exe in Matrix42 Empirum before 25.5 and 26.x before 26.2 creates a named pipe (\\....
CVE-2026-57919
PBackupVSS.exe in Matrix42 Empirum before 25.5 and 26.x before 26.2 creates a named pipe (\\.\pipe\PBackupVSS) with a DA
JavaScript::Minifier::XS versions before 0.16 for Perl leak memory on every call to minify(),...
CVE-2026-56018
JavaScript::Minifier::XS versions before 0.16 for Perl leak memory on every call to minify(), allowing unbounded memory
JavaScript::Minifier::XS versions before 0.16 for Perl crash with a NULL pointer dereference when...
CVE-2026-56017
JavaScript::Minifier::XS versions before 0.16 for Perl crash with a NULL pointer dereference when the first meaningful t
A use-after-free issue was addressed with improved memory management. This issue is fixed in...
CVE-2026-43715
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 26.5.2 a
The issue was addressed with improved input validation. This issue is fixed in Safari 26.5.2, iOS...
CVE-2026-43725
The issue was addressed with improved input validation. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5
A use-after-free issue was addressed with improved memory management. This issue is fixed in...
CVE-2026-43731
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 26.5.2 a
A type confusion issue was addressed with improved checks. This issue is fixed in Safari 26.5.2,...
CVE-2026-43705
A type confusion issue was addressed with improved checks. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 2
Inconsistent interpretation of HTTP/2 requests in AWS Application Load Balancer with AWS WAF...
CVE-2026-13763
Inconsistent interpretation of HTTP/2 requests in AWS Application Load Balancer with AWS WAF enabled might allow remote
Inconsistent interpretation of HTTP/2 requests in Amazon CloudFront with AWS WAF enabled might...
CVE-2026-13762
Inconsistent interpretation of HTTP/2 requests in Amazon CloudFront with AWS WAF enabled might allow remote actors to by
luci-proto-openvpn through 0.11.1, fixed in commit e4ff45e, contains a command injection...
CVE-2026-58000
luci-proto-openvpn through 0.11.1, fixed in commit e4ff45e, contains a command injection vulnerability in the generateKe
luci-app-tailscale-community contains a command injection vulnerability in the tailscale.do_login...
CVE-2026-57999
luci-app-tailscale-community contains a command injection vulnerability in the tailscale.do_login RPC method that allows
Hi.Events through 1.9.0 public check-in list endpoints use short_id as sole access control,...
CVE-2026-57960
Hi.Events through 1.9.0 public check-in list endpoints use short_id as sole access control, allowing unauthenticated acc
ruoyi-vue-pro through 2026.05, fixed in commit 5d1fd70 contains a broken access control...
CVE-2026-57950
ruoyi-vue-pro through 2026.05, fixed in commit 5d1fd70 contains a broken access control vulnerability in ErpSaleOrderCon
ruoyi-vue-pro through 2026.05, fixed in commit c779a47, contains a missing authorization...
CVE-2026-57949
ruoyi-vue-pro through 2026.05, fixed in commit c779a47, contains a missing authorization vulnerability in the CRM module
Hi.Events through 1.9.0 contains a promo code validation vulnerability where reservation...
CVE-2026-57959
Hi.Events through 1.9.0 contains a promo code validation vulnerability where reservation validates usage count before as
SigNoz through 0.130.1 contains a SQL injection vulnerability that allows authenticated attackers...
CVE-2026-57955
SigNoz through 0.130.1 contains a SQL injection vulnerability that allows authenticated attackers to execute arbitrary C
Pinpoint through version 3.1.0 contains an insecure session management vulnerability that allows...
CVE-2026-57948
Pinpoint through version 3.1.0 contains an insecure session management vulnerability that allows attackers to access the