Taipy 4.1.1, fixed in commit 129fd40, contains a path traversal vulnerability in the...
CVE-2026-48544
Taipy 4.1.1, fixed in commit 129fd40, contains a path traversal vulnerability in the ElementLibrary.get_resource() metho
#severity:high
共收录 5513 条相关情报。
← 返回所有主题In GDAL 3.1.0 through 3.13.0, scanForGeometryContainers in the netCDF driver allows code...
CVE-2026-49014
In GDAL 3.1.0 through 3.13.0, scanForGeometryContainers in the netCDF driver allows code execution via a stack-based buf
A flaw has been found in UTT HiPER 1250GW up to 3.2.7-210907-180535. Affected by this issue is...
CVE-2026-9632
A flaw has been found in UTT HiPER 1250GW up to 3.2.7-210907-180535. Affected by this issue is the function strcpy of th
A vulnerability was detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. Affected by this...
CVE-2026-9631
A vulnerability was detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. Affected by this vulnerability is the functi
In OpenStack Swift before 2.36.2 and 2.37.2, s3api middleware enters an infinite loop when...
CVE-2026-49017
In OpenStack Swift before 2.36.2 and 2.37.2, s3api middleware enters an infinite loop when processing a truncated aws-ch
A weakness has been identified in UTT HiPER 1200GW up to 2.5.3-170306. Affected is an unknown...
CVE-2026-9628
A weakness has been identified in UTT HiPER 1200GW up to 2.5.3-170306. Affected is an unknown function of the file /gofo
A security flaw has been discovered in UTT HiPER 1200GW up to 2.5.3-170306. This impacts the...
CVE-2026-9627
A security flaw has been discovered in UTT HiPER 1200GW up to 2.5.3-170306. This impacts the function strcpy of the file
Tanium addressed an unauthorized code execution vulnerability in Connect.
CVE-2026-9207
Tanium addressed an unauthorized code execution vulnerability in Connect.
@hapi/content header parser has a parameter smuggling issue that allows upload-filter bypass via duplicate parameters
CVE-2026-44974
### Impact The two parsers resolved duplicates inconsistently and silently: - `Content.disposition()` retained the last
Pimcore Admin Classic Bundle Vulnerable to SQL Injection in Translation Grid Date Filter via Unsanitized Property Parameter
CVE-2026-44741
# GM-369 ## Summary SQL injection in Pimcore's translation grid date filter — the user-supplied `property` field from t
Pimcore Vulnerable to SQL Injection in Custom Reports Column Configuration
CVE-2026-44739
### Summary The columnConfigAction endpoint in the CustomReportsBundle is vulnerable to SQL injection. An attacker with
tmp has Path Traversal via unsanitized prefix/postfix that enables directory escape
CVE-2026-44705
### Summary The tmp npm package contains a path traversal vulnerability that allows escaping the intended temporary dir
A Server-Side Request Forgery (SSRF) vulnerability was identified in GitHub Enterprise Server...
CVE-2026-8606
A Server-Side Request Forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed an attacker t
A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret...
CVE-2026-5260
A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret during an RSA key excha
A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a...
CVE-2026-42012
A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted certifi
A flaw was found in gnutls. When validating certificates, an oversized Subject Alternative Name ...
CVE-2026-42013
A flaw was found in gnutls. When validating certificates, an oversized Subject Alternative Name (SAN) could cause the va
A race condition was addressed with additional validation. This issue is fixed in macOS Sequoia...
CVE-2025-46284
A race condition was addressed with additional validation. This issue is fixed in macOS Sequoia 15.7, macOS Tahoe 26. An
A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7,...
CVE-2025-43306
A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Ta
Kirby CMS has pre-authentication path traversal and PHP file inclusion during user lookup
CVE-2026-44177
### TL;DR This vulnerability affects all Kirby sites on Kirby 5.3.0-5.4.0 and is independent from setup conditions and
Kirby CMS vulnerable to cross-site scripting (XSS) from list field content in the site frontend
CVE-2026-44175
### TL;DR This vulnerability affects all Kirby sites that use the list field or list block, when content is authored by