IBM Sterling Connect Direct for Unix 6.3.0.0 through 6.3.0.7 and 6.4.0.0 through 6.4.0.6 could...
CVE-2026-105453
IBM Sterling Connect Direct for Unix 6.3.0.0 through 6.3.0.7 and 6.4.0.0 through 6.4.0.6 could allow a local attacker to
#severity:high
共收录 5410 条相关情报。
← 返回所有主题IBM Verify Identity Access 11.0.3.1 and IBM Security Verify Access 10.0.9.3 Appliance could allow...
CVE-2026-109126
IBM Verify Identity Access 11.0.3.1 and IBM Security Verify Access 10.0.9.3 Appliance could allow a physically proximate
IBM Langflow OSS 1.0.0 through 1.12.4 contains three message endpoints that perform no ownership...
CVE-2026-107366
IBM Langflow OSS 1.0.0 through 1.12.4 contains three message endpoints that perform no ownership verification. Any authe
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker...
CVE-2026-107400
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary co
A vulnerability was determined in H3C Magic NX15 NX15V100R017. Impacted is the function write of...
CVE-2026-112371
A vulnerability was determined in H3C Magic NX15 NX15V100R017. Impacted is the function write of the file /api/esps of t
A vulnerability was found in H3C Magic NX15 100R017. This issue affects the function sub_416874...
CVE-2026-112370
A vulnerability was found in H3C Magic NX15 100R017. This issue affects the function sub_416874 of the file /usr/bin/usr
MLflow 3.17.1 and earlier contains a path traversal vulnerability in the FileStore tracking...
CVE-2026-53995
MLflow 3.17.1 and earlier contains a path traversal vulnerability in the FileStore tracking backend that allows unauthen
A security vulnerability has been detected in Netis EAP930 1.250905.115454. This issue affects...
CVE-2026-112360
A security vulnerability has been detected in Netis EAP930 1.250905.115454. This issue affects the function return200 of
aiohttp server lacks an initial request/header timeout
CVE-2026-111064
### Summary The keepalive timeout was not used during the initial portion of a request. ### Impact An attacker could
aiohttp: Multiple instances of excessive or unbounded memory/CPU use
### Summary Multiple cases were found where aiohttp could use excessive or unbounded memory, or excessive CPU consumpti
LoopX serve-status permissive CORS policy exposes control-plane state and private Markdown files
CVE-2026-108372
## Summary `loopx serve-status` sends `Access-Control-Allow-Origin: *` on **every** response, including its unauthentic
在 openGauss-server 的 src/gausskernel/cbb/utils/hll/hll.cpp 中，内置函数 HllObjectUnpack() 存在长度校验缺陷...
CVE-2026-111441
在 openGauss-server 的 src/gausskernel/cbb/utils/hll/hll.cpp 中，内置函数 HllObjectUnpack() 存在长度校验缺陷。该函数从用户提供的 packed HLL 解析 len
A vulnerability is in Web Server default connection ports under the process name GeoWebServer.exe .
CVE-2026-108984
A vulnerability is in Web Server default connection ports under the process name GeoWebServer.exe .
A low-privileged attacker in bluetooth range may be able to access the password of a higher...
CVE-2025-41690
A low-privileged attacker in bluetooth range may be able to access the password of a higher-privilege user (Maintenance)
A vulnerability was determined in Tenda CH22 1.0.0.1. Affected by this issue is the function...
CVE-2025-9748
A vulnerability was determined in Tenda CH22 1.0.0.1. Affected by this issue is the function fromIpsecitem of the file /
Fleet before 4.89.0 contains an unbounded recursion vulnerability in Apple MDM enrollment...
CVE-2026-111923
Fleet before 4.89.0 contains an unbounded recursion vulnerability in Apple MDM enrollment property list parsing that all
Fleet before 4.83.0 contains a denial of service vulnerability that allows unauthenticated...
CVE-2026-111924
Fleet before 4.83.0 contains a denial of service vulnerability that allows unauthenticated attackers to exhaust server m
Coder before 2.29.20, 2.33.0 before 2.33.12, 2.34.0 before 2.34.8, and 2.35.0 before 2.35.4...
CVE-2026-111927
Coder before 2.29.20, 2.33.0 before 2.33.12, 2.34.0 before 2.34.8, and 2.35.0 before 2.35.4 contains an improper hostnam
phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an authorization bypass...
CVE-2026-111910
phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an authorization bypass vulnerability in attachment.php
Vikunja from 2.2.0 before 2.7.0 contains a permissive CORS configuration that trusts every...
CVE-2026-111922
Vikunja from 2.2.0 before 2.7.0 contains a permissive CORS configuration that trusts every localhost and 127.0.0.1 port