Untrusted search path in the installer for Zoom Rooms for Windows before version 7.0.0 may allow...
CVE-2026-30906
Untrusted search path in the installer for Zoom Rooms for Windows before version 7.0.0 may allow an authenticated user t
#severity:high
共收录 5513 条相关情报。
← 返回所有主题A buffer overflow vulnerability in the IKEv2 processing of Palo Alto Networks PAN-OS® software...
CVE-2026-0263
A buffer overflow vulnerability in the IKEv2 processing of Palo Alto Networks PAN-OS® software allows an unauthenticated
An authentication bypass vulnerability in Palo Alto Networks PAN-OS® software enables an...
CVE-2026-0265
An authentication bypass vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with n
A buffer overflow vulnerability in the DNS proxy and DNS Server features of Palo Alto Networks...
CVE-2026-0264
A buffer overflow vulnerability in the DNS proxy and DNS Server features of Palo Alto Networks PAN-OS® Software allows a
An improper protection of alternate path vulnerability in Palo Alto Networks Prisma® Browser on...
CVE-2026-0237
An improper protection of alternate path vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly
A potential vulnerability was reported in some Lenovo Personal Cloud Storage devices that could...
CVE-2026-6281
A potential vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow a remote authentic
A potential improper file path validation vulnerability was reported in some Lenovo Personal...
CVE-2026-6282
A potential improper file path validation vulnerability was reported in some Lenovo Personal Cloud Storage devices that
When a Client SSL profile is configured with Allow Dynamic Record Sizing on a UDP virtual server,...
CVE-2026-42920
When a Client SSL profile is configured with Allow Dynamic Record Sizing on a UDP virtual server, undisclosed traffic ca
A vulnerability exists in BIG-IP systems that may allow an authenticated attacker with...
CVE-2026-42919
A vulnerability exists in BIG-IP systems that may allow an authenticated attacker with administrative access to escalate
When an HTTP/2 profile and an iRule containing the HTTP::redirect or HTTP::respond command are...
CVE-2026-42409
When an HTTP/2 profile and an iRule containing the HTTP::redirect or HTTP::respond command are configured on a virtual s
An authenticated attacker with the Resource Administrator or Administrator role can create SNMP...
CVE-2026-42924
An authenticated attacker with the Resource Administrator or Administrator role can create SNMP configuration objects th
A vulnerability exists in BIG-IP and BIG-IQ systems where a highly privileged, authenticated...
CVE-2026-42406
A vulnerability exists in BIG-IP and BIG-IQ systems where a highly privileged, authenticated attacker with at least the
A vulnerability exists in the ngx_http_scgi_module and ngx_http_uwsgi_module modules that may...
CVE-2026-42946
A vulnerability exists in the ngx_http_scgi_module and ngx_http_uwsgi_module modules that may result in excessive memory
Incorrect permission assignment vulnerabilities exist in BIG-IP and BIG-IQ TMOS Shell (tmsh) arp...
CVE-2026-42937
Incorrect permission assignment vulnerabilities exist in BIG-IP and BIG-IQ TMOS Shell (tmsh) arp and ndp commands, and i
When embedded Packet Velocity Acceleration (ePVA) acceleration is configured, undisclosed local...
CVE-2026-42781
When embedded Packet Velocity Acceleration (ePVA) acceleration is configured, undisclosed local ethernet traffic can cau
When running in Appliance mode, an authenticated attacker assigned the 'Administrator' role may...
CVE-2026-42930
When running in Appliance mode, an authenticated attacker assigned the 'Administrator' role may be able to bypass Applia
SiYuan publish-mode Reader can mutate Conf and SQL index via 8 ungated APIs
CVE-2026-45371
### Summary SiYuan publish-mode Reader can mutate Conf and SQL index via 8 ungated APIs `POST /api/graph/getGraph`, `P
Anchor: `InterfaceAccount` allows account substitution between unexpected types
### Impact Any uses of `InterfaceAccount` allows another unexpected account type to be passed, after https://github.com/
uniget is Vulnerable to Command Injection in tool.Check Leading to Arbitrary Code Execution
CVE-2026-45152
I discovered a command injection vulnerability in uniget that allows arbitrary command execution through the metadata lo
Anchor: Program<'info, System> is not properly validated
CVE-2026-45137
### Summary An logic error causes anchor programs to accept any program id when requiring the system program id, causing