Radius Controller May Delete a Container Resource via an Injected Deployment Annotation (Multi-Tenant Installs)
CVE-2026-53999
# Radius Controller May Delete a Container Resource via an Injected Deployment Annotation (Multi-Tenant Installs) ## Su
#severity:high
共收录 5509 条相关情报。
← 返回所有主题TYPO3 CMS has Broken Access Control in its Form Framework
CVE-2026-11607
### Problem Backend users with access to the Form Framework were able to use files not ending in `.form.yaml` as form de
TYPO3 CMS: Destructive Actions on File Mount Folders
CVE-2026-47343
### Problem Non-privileged backend users with file mount access were able to perform write operations (move, delete, ren
PyO3 has an Out-of-bounds Read in `nth` / `nth_back` for `PyList` and `PyTuple` iterators
PyO3 0.24.0 added optimized implementations of `Iterator::nth` and `DoubleEndedIterator::nth_back` for the `BoundListIte
TYPO3 CMS has Privilege Escalation & SQL Injection in its Form Framework
CVE-2026-49741
### Problem Backend users with write access to the `form_definition` database table were able to directly create, update
TYPO3 CMS has Broken Access Control in its Form Framework
CVE-2026-47346
### Problem Backend users with file write permissions were able to upload form definition files with mixed-case extensio
TYPO3 CMS has Broken Access Control in its Media Module
CVE-2026-49742
### Problem Backend users with file download permissions were able to download files from the fallback storage of the fi
Idira Privilege Cloud Connector versions prior 1.1.100504 under specific conditions and...
CVE-2026-45170
Idira Privilege Cloud Connector versions prior 1.1.100504 under specific conditions and configuration scenarios, TLS cer
A use-after-free vulnerability exists in MongoDB Server's server-side JavaScript engine when...
CVE-2026-11933
A use-after-free vulnerability exists in MongoDB Server's server-side JavaScript engine when converting BSON documents t
Idira Identity Browser Extension (Chrome, Firefox, and Edge builds) versions prior to 26.8.1...
CVE-2026-45173
Idira Identity Browser Extension (Chrome, Firefox, and Edge builds) versions prior to 26.8.1 exhibit an origin validatio
Out of bounds write in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote...
CVE-2026-12030
Out of bounds write in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote attacker who had comprom
Use after free in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote...
CVE-2026-12028
Use after free in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote attacker who had compromised
Inappropriate implementation in Views in Google Chrome on Windows prior to 149.0.7827.115 allowed...
CVE-2026-12031
Inappropriate implementation in Views in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacker who
Insufficient validation of untrusted input in Linux Toolkit Theming in Google Chrome on Linux...
CVE-2026-12034
Insufficient validation of untrusted input in Linux Toolkit Theming in Google Chrome on Linux prior to 149.0.7827.115 al
Due to incomplete input validation in Idira Privileged Session Manager for SSH (PSMP) versions...
CVE-2026-45172
Due to incomplete input validation in Idira Privileged Session Manager for SSH (PSMP) versions prior to 15.0.2, 14.6.3,
Use after free in Video in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote...
CVE-2026-12029
Use after free in Video in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacker who had compromise
Idira Endpoint Privilege Manager Linux Agent versions prior to 26.5 allow a local attacker to...
CVE-2026-45174
Idira Endpoint Privilege Manager Linux Agent versions prior to 26.5 allow a local attacker to potentially compromise the
An authenticated format string vulnerability exists in the ONVIF service of Tapo C110 v2 due to...
CVE-2026-6250
An authenticated format string vulnerability exists in the ONVIF service of Tapo C110 v2 due to improper handling of use
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
CVE-2026-42653
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in iova.Mihai SliceWP
Heap buffer overflow in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote...
CVE-2026-12010
Heap buffer overflow in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote attacker who had compro