The Danelec MacGregor Voyage Data Recorder device includes a default username and password, with...
CVE-2026-42941
The Danelec MacGregor Voyage Data Recorder device includes a default username and password, with no enforced password c
#severity:high
共收录 5513 条相关情报。
← 返回所有主题Danelec MacGregor Voyage Data Recorder includes default accounts with hard-coded credentials.
CVE-2026-42929
Danelec MacGregor Voyage Data Recorder includes default accounts with hard-coded credentials.
ouroboros-ai Vulnerable to Remote Code Execution via Untrusted Project-Directory .env
CVE-2026-47211
### Impact A Remote Code Execution (RCE) vulnerability was discovered in Ouroboros. If a user clones a malicious reposit
authentik's XML Signature Wrapping in SAML Source ACS allows authentication as arbitrary federated user
CVE-2026-47201
### Summary authentik's SAML Source ACS endpoint is vulnerable to XML Signature Wrapping when validating upstream SAM
CC-Tweaked has an SSRF Protection Bypass with NAT64
CVE-2026-47695
### Summary CC-Tweaked's HTTP API (`http.request`, `http.websocket`) blocks requests to private network ranges to preve
Koel Vulnerable to SSRF via Podcast Episode Enclosure URLs
CVE-2026-47260
## Summary Koel validates the podcast feed URL via the `SafeUrl` rule (DNS resolution + public IP check), but the indiv
russh: Post-decompression SSH packet size was not bounded, allowing remote oversized compressed packets
CVE-2026-46702
### Summary When SSH compression is enabled, `russh` accepted compressed packets whose on-wire size passed the normal t
AgenticMail API/storage and outbound relay hardening fixes
CVE-2026-47255
The current upstream main branch at commit 7e0206d was reviewed, and the fix-first patch set was rebased on 2026-05-18.
ezsystems/ezpublish-legacy has a SQL injection in dfscleanup
CVE-2026-38739
NB: All tags and branches in this repository are past their end of life, so the vulnerability will not be fixed. The adv
The Frontier X2 device allows unauthenticated BLE read/write access to critical GATT...
CVE-2026-5768
The Frontier X2 device allows unauthenticated BLE read/write access to critical GATT characteristics without enforcing p
xiaomusic v0.5.7 contains an unauthenticated path traversal vulnerability in the GET /music/...
CVE-2026-10108
xiaomusic v0.5.7 contains an unauthenticated path traversal vulnerability in the GET /music/{file_path:path} endpoint th
A Local Privilege Escalation (LPE) vulnerability affects Acer NitroSense software versions prior...
CVE-2026-9789
A Local Privilege Escalation (LPE) vulnerability affects Acer NitroSense software versions prior to 3.01.3052. The vulne
Out-of-bounds write vulnerability in Samsung Open Source Escargot allows Overflow Buffers. This...
CVE-2026-8915
Out-of-bounds write vulnerability in Samsung Open Source Escargot allows Overflow Buffers. This issue affects Escargot:
Tanium addressed an unauthorized code execution vulnerability in Connect.
CVE-2026-9208
Tanium addressed an unauthorized code execution vulnerability in Connect.
compliance-trestle Remote Fetching Mechanism has an Arbitrary File Write via Cache Path Traversal
CVE-2026-45725
## Summary The compliance-trestle library's remote fetching cache mechanism (HTTPSFetcher and SFTPFetcher) constructs t
FUXA's Unauthenticated Project Data Disclosure Exposes Server-Side Scripts and Device Configurations
CVE-2026-47717
### Summary The GET /api/project endpoint exposes sensitive project configuration data to guest-context requests even w
Kata guest escape: runtime-rs guest-root to host-root escape via virtiofs
CVE-2026-47243
### Summary In the runtime-rs standalone virtio-fs path, verified here with QEMU (and verified with Cloud Hypervisor to
Pimcore has a CustomReports Share Bypass
CVE-2026-45704
### Summary `CustomReports` uses inconsistent authorization between the report listing endpoint and the report detail e
Automad has Broken Access Control: Unauthenticated exposure of administrator bcrypt password hashes and TOTP secrets via public API endpoint
CVE-2026-45332
### Summary A Broken Access Control vulnerability allows an unauthenticated attacker to retrieve the bcrypt password h
A path traversal vulnerability exists in WOSDefaultHttpModule.dll when processing a URL path...
CVE-2026-8361
A path traversal vulnerability exists in WOSDefaultHttpModule.dll when processing a URL path starting with /woshome