nebula-mesh: Web UI and API responses lack security headers (CSP, X-Frame-Options, HSTS, etc.)
CVE-2026-47723
None of the response paths in `internal/web/` or `internal/api/` set the standard browser-security headers. `grep` for `
#severity:high
共收录 5509 条相关情报。
← 返回所有主题nebula-mesh: Host advanced overrides allow YAML injection into agent config.yml
CVE-2026-47722
`internal/configgen/generator.go:86,108,119` interpolates the operator-supplied `ListenHost` and `TunDevice` fields raw
FUXA: Unauthenticated SSRF via Socket.IO DEVICE_WEBAPI_REQUEST and DEVICE_PROPERTY with response reading
CVE-2026-47719
## Summary An unauthenticated attacker (Alice) connects to FUXA's Socket.IO endpoint and emits a `device-webapi-request
Netty has Insufficient Bailiwick Validation for NS Records
CVE-2026-47691
### Summary Netty's `DnsResolveContext` insufficiently validates the bailiwick of NS records, enabling DNS Cache Poisoni
Netty: SCTP reassembly nests buffers without bound
CVE-2026-46340
For each non-complete SctpMessage fragment the handler does `fragments.put(streamId, Unpooled.wrappedBuffer(frag, byteBu
Netty Vulnerable to DNS Cache Poisoning via Missing Bailiwick Checks in CNAME Records
CVE-2026-45674
### Summary Netty's DnsResolveContext fails to validate the origin (bailiwick) of CNAME records in DNS responses. ### D
Netty: SNI handler pre-allocates up to 16 MiB from nine attacker bytes
CVE-2026-45416
SslClientHelloHandler.decode() reads the 24-bit TLS handshake length and, when the ClientHello does not fit in the first
Netty's Default QUIC token handler accepts any client-supplied token
CVE-2026-44894
NoQuicTokenHandler is the tokenHandler used when the application does not set one. Its writeToken() returns false (serve
Netty: HAProxy SSL TLV parsing leaks retained slice on invalid TLV length
CVE-2026-44893
When decoding a PP2_TYPE_SSL TLV, HAProxyMessage.readNextTLV() first calls `header.retainedSlice(header.readerIndex(), l
Netty has a Vulnerable Default Configuration Which Leads to Denial of Service via Unbounded HTTP/3 Header Size
CVE-2026-44892
### Summary The default configuration of the `Http3ConnectionHandler` in the Netty HTTP/3 codec lacks an enforced maximu
Netty has Unbounded Direct Memory Consumption in its RedisDecoder
CVE-2026-44890
### Summary An attacker can cause DoS by sending crafted Redis payloads across multiple connections without `\r\n`. This
Netty: Memory Exhaustion in RedisArrayAggregator due to Deeply Nested Arrays
CVE-2026-44250
### Summary An attacker can cause DoS by sending a crafted Redis payload with deeply nested arrays. This forces the serv
Netty has an IPv6 Subnet Filter Bypass via Incorrect Comparator Masking
CVE-2026-44249
### Summary An attacker can bypass IPv6 subnet rules due to an incorrect masking operation in IpSubnetFilterRule.compare
WordPress Augmented-Reality plugin contains a remote code execution vulnerability in the elFinder...
CVE-2023-54350
WordPress Augmented-Reality plugin contains a remote code execution vulnerability in the elFinder connector that allows
Comodo Internet Security's firewall driver Inspect.sys contains an integer underflow in its IPv6...
CVE-2026-49494
Comodo Internet Security's firewall driver Inspect.sys contains an integer underflow in its IPv6 packet parser. The pars
clash-verge-service-ipc before 2.3.0 has a world-reachable IPC endpoint, leading to local...
CVE-2026-26422
clash-verge-service-ipc before 2.3.0 has a world-reachable IPC endpoint, leading to local privilege escalation.
A security vulnerability has been detected in JingDong JD Cloud Box AX6600 4.5.3.r4546. The...
CVE-2026-11413
A security vulnerability has been detected in JingDong JD Cloud Box AX6600 4.5.3.r4546. The impacted element is the func
Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft QR Menu...
CVE-2025-2412
Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft QR Menu allows Authentication Bypass
Cross-Site Request Forgery (CSRF) vulnerability in Akınsoft QR Menü allows Cross Site Request...
CVE-2025-0610
Cross-Site Request Forgery (CSRF) vulnerability in Akınsoft QR Menü allows Cross Site Request Forgery. This issue affec
The MDJM Event Management plugin for WordPress is vulnerable to Arbitrary File Upload in all...
CVE-2026-7537
The MDJM Event Management plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and includi