Mythic before 3.4.0.60 contains a broken hasura permission filter on the payload_build_step table...
CVE-2026-57951
Mythic before 3.4.0.60 contains a broken hasura permission filter on the payload_build_step table with an always-satisfi
#severity:high
共收录 5441 条相关情报。
← 返回所有主题Nitter's /video media proxy endpoint fails to validate target URLs against Twitter/X domains and...
CVE-2026-56285
Nitter's /video media proxy endpoint fails to validate target URLs against Twitter/X domains and uses a hardcoded defaul
Modoboa before 2.9.0 contains an insecure direct object reference vulnerability in the PUT /api...
CVE-2026-56780
Modoboa before 2.9.0 contains an insecure direct object reference vulnerability in the PUT /api/v1/accounts/{pk}/passwor
Parseable before 2.9.2 contains an information disclosure vulnerability in the notification...
CVE-2026-56783
Parseable before 2.9.2 contains an information disclosure vulnerability in the notification-target API endpoints that re
Gigamon GVOS v5.16.1 and below is vulnerable to Directory Traversal in the GVOS H-VUE subsystem.
CVE-2026-36848
Gigamon GVOS v5.16.1 and below is vulnerable to Directory Traversal in the GVOS H-VUE subsystem.
Improper neutralization in the Snowpark annotation processor callback template in Snowflake CLI...
CVE-2026-13749
Improper neutralization in the Snowpark annotation processor callback template in Snowflake CLI versions prior to 3.19 a
OpenAM OAuth Client Impersonation via JWKS Resolver Cache
CVE-2026-47426
## Summary **Description** An Improper Authentication (CWE-287) issue in OpenAM's OAuth2 private_key_jwt client authen
OpenAM Authenticated RCE via Groovy Sandbox Escape
CVE-2026-47424
## Summary **Description** A Protection Mechanism Failure (CWE-693) in OpenAM's server-side scripting sandbox allows a
A vulnerability has been found in Tenda JD12L 16.03.53.23. This affects the function...
CVE-2026-13518
A vulnerability has been found in Tenda JD12L 16.03.53.23. This affects the function fromAddressNat of the file /goform/
A vulnerability was found in Tenda JD12L 16.03.53.23. This impacts the function...
CVE-2026-13519
A vulnerability was found in Tenda JD12L 16.03.53.23. This impacts the function fromNatStaticSetting of the file /goform
A flaw has been found in Tenda JD12L 16.03.53.23. The impacted element is the function...
CVE-2026-13517
A flaw has been found in Tenda JD12L 16.03.53.23. The impacted element is the function formWifiBasicSet of the file /gof
A security vulnerability has been detected in Tenda JD12L 16.03.53.23. Impacted is the function...
CVE-2026-13515
A security vulnerability has been detected in Tenda JD12L 16.03.53.23. Impacted is the function formSetPPTPServer of the
A vulnerability was detected in Tenda JD12L 16.03.53.23. The affected element is the function...
CVE-2026-13516
A vulnerability was detected in Tenda JD12L 16.03.53.23. The affected element is the function fromSetWifiGusetBasic of t
RustDesk gates incoming control messages on per-capability flags rather than on the session's...
CVE-2026-58056
RustDesk gates incoming control messages on per-capability flags rather than on the session's authorized connection type
FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) performs 32-bit reads and writes...
CVE-2026-58049
FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) performs 32-bit reads and writes at the row cursor before
libssh2 through 1.11.1 reads an attacker-controlled 32-bit attribute count from a publickey...
CVE-2026-58050
libssh2 through 1.11.1 reads an attacker-controlled 32-bit attribute count from a publickey-subsystem response and uses
MyBB 1.8.40 does not restrict which usergroup a limited Admin Control Panel user may assign when...
CVE-2026-58054
MyBB 1.8.40 does not restrict which usergroup a limited Admin Control Panel user may assign when creating or editing use
libssh2 through 1.11.1 grows its publickey list with SSH2_REALLOC but does not zero-initialize...
CVE-2026-58051
libssh2 through 1.11.1 grows its publickey list with SSH2_REALLOC but does not zero-initialize new entries before parsin
The Frontend File Manager Plugin plugin for WordPress is vulnerable to Authenticated Arbitrary...
CVE-2026-8095
The Frontend File Manager Plugin plugin for WordPress is vulnerable to Authenticated Arbitrary File Deletion in versions
HCL Traveler for Microsoft Outlook (HTMO) is susceptible to vulnerabilities due to .NET Framework...
CVE-2023-37524
HCL Traveler for Microsoft Outlook (HTMO) is susceptible to vulnerabilities due to .NET Framework 4.5 being out of servi