MosaicML Composer Deserialization of Untrusted Data Remote Code Execution Vulnerability. This...
CVE-2026-10043
MosaicML Composer Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remot
#severity:high
共收录 5441 条相关情报。
← 返回所有主题A potential security vulnerability has been identified in the HP Accessory WMI Provider installer...
CVE-2026-7539
A potential security vulnerability has been identified in the HP Accessory WMI Provider installer for some HP Docking St
A flaw in AngularJS' Strict Contextual Escaping (SCE) logic allows bypassing certain SCE policies...
CVE-2026-11998
A flaw in AngularJS' Strict Contextual Escaping (SCE) logic allows bypassing certain SCE policies for resource URLs and
Use after free in WebView in Google Chrome on Android prior to 149.0.7827.197 allowed a local...
CVE-2026-13037
Use after free in WebView in Google Chrome on Android prior to 149.0.7827.197 allowed a local attacker to execute arbitr
Use after free in Autofill in Google Chrome on Windows prior to 149.0.7827.197 allowed a remote...
CVE-2026-13038
Use after free in Autofill in Google Chrome on Windows prior to 149.0.7827.197 allowed a remote attacker to execute arbi
Use after free in Bluetooth in Google Chrome on Mac prior to 149.0.7827.197 allowed a remote...
CVE-2026-13035
Use after free in Bluetooth in Google Chrome on Mac prior to 149.0.7827.197 allowed a remote attacker to execute arbitra
Out of bounds read and write in Blink>InterestGroups in Google Chrome prior to 149.0.7827.197...
CVE-2026-13033
Out of bounds read and write in Blink>InterestGroups in Google Chrome prior to 149.0.7827.197 allowed a remote attacker
The Aclara Metrum Cellular Web Interface is vulnerable to unauthorized access due to the absence...
CVE-2026-1840
The Aclara Metrum Cellular Web Interface is vulnerable to unauthorized access due to the absence of authentication contr
Use after free in Blink in Google Chrome prior to 149.0.7827.197 allowed a remote attacker to...
CVE-2026-13036
Use after free in Blink in Google Chrome prior to 149.0.7827.197 allowed a remote attacker to execute arbitrary code ins
Use after free in Web Authentication in Google Chrome prior to 149.0.7827.197 allowed an attacker...
CVE-2026-13029
Use after free in Web Authentication in Google Chrome prior to 149.0.7827.197 allowed an attacker who convinced a user t
Use after free in Digital Credentials in Google Chrome on Mac prior to 149.0.7827.197 allowed a...
CVE-2026-13026
Use after free in Digital Credentials in Google Chrome on Mac prior to 149.0.7827.197 allowed a remote attacker to poten
Race in DevTools in Google Chrome prior to 149.0.7827.197 allowed a remote attacker who had...
CVE-2026-13025
Race in DevTools in Google Chrome prior to 149.0.7827.197 allowed a remote attacker who had compromised the renderer pro
Use after free in Blink in Google Chrome prior to 149.0.7827.197 allowed a remote attacker to...
CVE-2026-13031
Use after free in Blink in Google Chrome prior to 149.0.7827.197 allowed a remote attacker to execute arbitrary code ins
Use after free in FileSystem in Google Chrome prior to 149.0.7827.197 allowed a remote attacker...
CVE-2026-13027
Use after free in FileSystem in Google Chrome prior to 149.0.7827.197 allowed a remote attacker to potentially exploit h
A denial-of-service (DoS) vulnerability has been identified in Tapo C200 v3 in the network packet...
CVE-2026-12760
A denial-of-service (DoS) vulnerability has been identified in Tapo C200 v3 in the network packet handling logic due to
OliveTin has a Concurrent Template Parsing Race Condition which Leads to Cross-Request Command Contamination
CVE-2026-48708
## Summary OliveTin's template engine uses a **single shared `text/template.Template` instance** (`tpl` package-level v
Snipe-IT API Vulnerable to Cross-Tenant Accessory Injection
CVE-2026-54329
### Impact A cross-tenant data injection vulnerability was identified in the Snipe-IT Accessories API when Full Multiple
Snipe-IT: Bulk editing users allowed `ldap_import` and `activated_in` bulk editing users
CVE-2026-48507
### Impact The vulnerability allows a non-admin user holding only the granular `users.edit` permission to lock every adm
Algernon: Host header path traversal in --domain mode reads files and runs Lua from parent dir
CVE-2026-48126
### Summary When algernon is started with `--domain` (or `--letsencrypt`, which silently turns on `--domain` at `engine
Overview: A vulnerability has been found in FAST/TOOLS and CI Server. The web server may return...
CVE-2026-11833
Overview: A vulnerability has been found in FAST/TOOLS and CI Server. The web server may return a response containing t