Coze Studio before 0.5.0 contains an insecure default configuration that allows any registered...
CVE-2026-77934
Coze Studio before 0.5.0 contains an insecure default configuration that allows any registered user to execute commands
#severity:high
共收录 5396 条相关情报。
← 返回所有主题OpenSRE through 0.1.2026.10.19 contains an approval gate bypass vulnerability that allows...
CVE-2026-109444
OpenSRE through 0.1.2026.10.19 contains an approval gate bypass vulnerability that allows attackers to execute shell_run
JoySafeter through 1.0.0 contains a remote code execution vulnerability that allows authenticated...
CVE-2026-109443
JoySafeter through 1.0.0 contains a remote code execution vulnerability that allows authenticated users to run operating
Summary Before version 0.8.1, Pingora's HTTP/2 server used the h2 crate's default limits...
CVE-2026-105297
Summary Before version 0.8.1, Pingora's HTTP/2 server used the h2 crate's default limits unless the application set i
Ning compress-lzf before 1.2.0 contains an out-of-bounds memory access vulnerability in the sun...
CVE-2026-109395
Ning compress-lzf before 1.2.0 contains an out-of-bounds memory access vulnerability in the sun.misc.Unsafe based Unsafe
LangAlpha through 2026.09.07 contains an indirect prompt injection vulnerability that allows...
CVE-2026-109440
LangAlpha through 2026.09.07 contains an indirect prompt injection vulnerability that allows remote attackers to execute
IBM Sterling Connect Direct for Unix 6.3.0.0 through 6.3.0.7 and 6.4.0.0 through 6.4.0.6 could...
CVE-2026-105453
IBM Sterling Connect Direct for Unix 6.3.0.0 through 6.3.0.7 and 6.4.0.0 through 6.4.0.6 could allow a local attacker to
IBM Verify Identity Access 11.0.3.1 and IBM Security Verify Access 10.0.9.3 Appliance could allow...
CVE-2026-109126
IBM Verify Identity Access 11.0.3.1 and IBM Security Verify Access 10.0.9.3 Appliance could allow a physically proximate
IBM Langflow OSS 1.0.0 through 1.12.4 contains three message endpoints that perform no ownership...
CVE-2026-107366
IBM Langflow OSS 1.0.0 through 1.12.4 contains three message endpoints that perform no ownership verification. Any authe
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker...
CVE-2026-107400
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary co
A vulnerability was determined in H3C Magic NX15 NX15V100R017. Impacted is the function write of...
CVE-2026-112371
A vulnerability was determined in H3C Magic NX15 NX15V100R017. Impacted is the function write of the file /api/esps of t
A vulnerability was found in H3C Magic NX15 100R017. This issue affects the function sub_416874...
CVE-2026-112370
A vulnerability was found in H3C Magic NX15 100R017. This issue affects the function sub_416874 of the file /usr/bin/usr
MLflow 3.17.1 and earlier contains a path traversal vulnerability in the FileStore tracking...
CVE-2026-53995
MLflow 3.17.1 and earlier contains a path traversal vulnerability in the FileStore tracking backend that allows unauthen
A security vulnerability has been detected in Netis EAP930 1.250905.115454. This issue affects...
CVE-2026-112360
A security vulnerability has been detected in Netis EAP930 1.250905.115454. This issue affects the function return200 of
aiohttp server lacks an initial request/header timeout
CVE-2026-111064
### Summary The keepalive timeout was not used during the initial portion of a request. ### Impact An attacker could
aiohttp: Multiple instances of excessive or unbounded memory/CPU use
### Summary Multiple cases were found where aiohttp could use excessive or unbounded memory, or excessive CPU consumpti
LoopX serve-status permissive CORS policy exposes control-plane state and private Markdown files
CVE-2026-108372
## Summary `loopx serve-status` sends `Access-Control-Allow-Origin: *` on **every** response, including its unauthentic
在 openGauss-server 的 src/gausskernel/cbb/utils/hll/hll.cpp 中，内置函数 HllObjectUnpack() 存在长度校验缺陷...
CVE-2026-111441
在 openGauss-server 的 src/gausskernel/cbb/utils/hll/hll.cpp 中，内置函数 HllObjectUnpack() 存在长度校验缺陷。该函数从用户提供的 packed HLL 解析 len
A vulnerability is in Web Server default connection ports under the process name GeoWebServer.exe .
CVE-2026-108984
A vulnerability is in Web Server default connection ports under the process name GeoWebServer.exe .
A low-privileged attacker in bluetooth range may be able to access the password of a higher...
CVE-2025-41690
A low-privileged attacker in bluetooth range may be able to access the password of a higher-privilege user (Maintenance)