NocoDB: Stored Cross-Site Scripting via Form View Redirect URL

CVE-2026-47387

### Summary The shared form-view submit handler in NocoDB writes the form's `redirect_url` to `window.location.href` af

历史摘要 · 未重新核验 · GitHub Advisory

NocoDB: Stored Cross-Site Scripting via Row Comments

CVE-2026-47383

### Summary An authenticated commenter could store HTML in row comments that executed as script when other users hovered

历史摘要 · 未重新核验 · GitHub Advisory

CWE-326 in BOSH allows a local attacker to steal Basic-auth credentials or redirect UAA token...

CVE-2026-41860

CWE-326 in BOSH allows a local attacker to steal Basic-auth credentials or redirect UAA token requests via MITM. HttpReq

历史摘要 · 未重新核验 · GitHub Advisory

Weak Randomness / Insecure Cryptographic Primitive (CWE-338) in Get-RandomPassword in BOSH...

CVE-2026-41858

Weak Randomness / Insecure Cryptographic Primitive (CWE-338) in Get-RandomPassword in BOSH-Ecosystem / windows-utilities

历史摘要 · 未重新核验 · GitHub Advisory

A network man-in-the-middle between nats-sync and the BOSH director can steal the director...

CVE-2026-41859

A network man-in-the-middle between nats-sync and the BOSH director can steal the director credentials (Basic auth heade

历史摘要 · 未重新核验 · GitHub Advisory

PackagePersister.validate_tgz builds "tar -tf #{tgz} 2>&1" where tgz = File.join(release_dir, ...

CVE-2026-41011

PackagePersister.validate_tgz builds "tar -tf #{tgz} 2>&1" where tgz = File.join(release_dir, 'packages', "#{name}.tgz")

历史摘要 · 未重新核验 · GitHub Advisory

The SP Project & Document Manager plugin for WordPress is vulnerable to unauthorized access due...

CVE-2026-10737

The SP Project & Document Manager plugin for WordPress is vulnerable to unauthorized access due to a missing capability

历史摘要 · 未重新核验 · GitHub Advisory

Froxlor's API Authentication bypasses 2FA Authentication

## Summary Froxlor's API authentication (`FroxlorRPC::validateAuth`) does not enforce Two-Factor Authentication. When a

历史摘要 · 未重新核验 · GitHub Advisory

browserstack-runner vulnerable to Remote Code Execution via vm sandbox escape in _log HTTP handler

CVE-2026-49143

### Summary The HTTP handler `/_log` in `lib/server.js` (lines 491–515) of browserstack-runner passes unauthenticated u

历史摘要 · 未重新核验 · GitHub Advisory

browserstack-runner has an unauthenticated arbitrary file read via path traversal in HTTP server

CVE-2026-49144

## Summary The HTTP server in browserstack-runner serves files from the project directory via the `_default` handler. T

历史摘要 · 未重新核验 · GitHub Advisory

Local privilege escalation due to EXE hijacking vulnerability. The following products are...

CVE-2026-44609

Local privilege escalation due to EXE hijacking vulnerability. The following products are affected: Acronis DeviceLock D

历史摘要 · 未重新核验 · GitHub Advisory

Local privilege escalation due to excessive permissions assigned to child processes. The...

CVE-2026-42061

Local privilege escalation due to excessive permissions assigned to child processes. The following products are affected

历史摘要 · 未重新核验 · GitHub Advisory

Local privilege escalation due to DLL hijacking vulnerability. The following products are...

CVE-2026-50033

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis DeviceLock D

历史摘要 · 未重新核验 · GitHub Advisory

Local privilege escalation due to DLL hijacking vulnerability. The following products are...

CVE-2026-44682

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis DeviceLock D

历史摘要 · 未重新核验 · GitHub Advisory

Concrete CMS below 9.5.2 is vulnerable to PHP Object Injection via unserialize() calls in the...

CVE-2026-7888

Concrete CMS below 9.5.2 is vulnerable to PHP Object Injection via unserialize() calls in the Workflow, Form block, and

历史摘要 · 未重新核验 · GitHub Advisory

Docling Core: Unsafe remote filename resolution

CVE-2026-44023

### Impact In versions `>= 1.5.0, = 2.74.1` ### Workarounds If upgrading is not immediately possible, avoid passing unt

历史摘要 · 未重新核验 · GitHub Advisory

Docling Core: Insufficient validation of image reference URIs

CVE-2026-44019

### Impact In versions `>= 2.5.0, = 2.74.1` ### Workarounds If upgrading is not immediately possible: - reject `file:`

历史摘要 · 未重新核验 · GitHub Advisory

Docling: Unsafe URI and Path Handling in HTML Backend

CVE-2026-47214

### Impact The HTML backend did not perform sufficient validation during resource handling: - Accepted `file://` URIs en

历史摘要 · 未重新核验 · GitHub Advisory

Docling: Unsafe XML Entity Expansion in USPTO Patent Backend

CVE-2026-44020

### Impact The USPTO patent XML parser used the standard `xml.sax.parseString()` without protection against XML External

历史摘要 · 未重新核验 · GitHub Advisory

Docling: Unsafe Playwright-based HTML Rendering

CVE-2026-44016

### Impact In versions `>= 2.82.0, < 2.91.0`, if the HTML backend was explicitly configured for rendering (rendering opt

历史摘要 · 未重新核验 · GitHub Advisory