Vulnerabilities exist in a protocol-handling component of AOS-8 and AOS-10 Operating Systems. An...
CVE-2026-23825
Vulnerabilities exist in a protocol-handling component of AOS-8 and AOS-10 Operating Systems. An unauthenticated attacke
#severity:high
共收录 5513 条相关情报。
← 返回所有主题A vulnerability in the command line interface of Access Points running AOS-10 and AOS-8 Instant...
CVE-2026-23820
A vulnerability in the command line interface of Access Points running AOS-10 and AOS-8 Instant could allow an authentic
A vulnerability in a network management service of AOS-8 Operating System could allow an...
CVE-2026-23826
A vulnerability in a network management service of AOS-8 Operating System could allow an unauthenticated remote attacker
A vulnerability in the configuration processing logic of Access Points running AOS-10 could allow...
CVE-2026-23821
A vulnerability in the configuration processing logic of Access Points running AOS-10 could allow an authenticated remot
Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and...
CVE-2026-34648
Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by an
Dalfox has an Unauthenticated Remote DoS via Closed-Channel Write in `ParameterAnalysis` (server mode)
CVE-2026-45090
## Summary `ParameterAnalysis` in `pkg/scanning/parameterAnalysis.go` runs two sequential worker stages that both write
Dalfox Server Mode has an Unauthenticated Arbitrary File Create/Append via `output` Option
CVE-2026-45089
## Summary When dalfox is run in REST API server mode, the `output`, `output-all`, and `debug` fields in `model.Options
Dalfox Server Mode has an Unauthenticated Arbitrary File Read with Out-of-Band Exfiltration via `custom-payload-file`
CVE-2026-45088
## Summary When dalfox is run in REST API server mode, the `custom-payload-file` field in `model.Options` is JSON-tagge
protobuf.js: Code injection in pbjs static output from crafted schema names
CVE-2026-44295
## Summary `pbjs` static code generation could emit unsafe JavaScript identifiers derived from schema-controlled names.
protobuf.js: Code injection through bytes field defaults in generated toObject code
CVE-2026-44293
## Summary protobufjs generated JavaScript for `toObject` conversion could include an unsafe expression derived from a
protobuf.js: Code generation gadget after prototype pollution
CVE-2026-44291
## Summary protobufjs used plain objects with inherited prototypes for internal type lookup tables used by generated en
protobuf.js: Process-wide denial of service through unsafe option paths
CVE-2026-44290
## Summary protobufjs allowed certain schema option paths to traverse through inherited object properties while applyin
protobuf.js: Denial of service through unbounded protobuf recursion
CVE-2026-44289
## Summary protobufjs could recurse without a depth limit while decoding nested protobuf data. This affected both skipp
protobuf.js is Vulnerable to OS Command Injection in the CLI
CVE-2026-42290
## Summary `pbts` invoked JSDoc by building a shell command string from input file paths and executing it through `chil
Due to an OS Command Execution vulnerability in SAP Forecasting & Replenishment, an authenticated...
CVE-2026-34259
Due to an OS Command Execution vulnerability in SAP Forecasting & Replenishment, an authenticated attacker with administ
barebox version prior to 2026.04.0 contains multiple memory-safety vulnerabilities in the EFI PE...
CVE-2026-34963
barebox version prior to 2026.04.0 contains multiple memory-safety vulnerabilities in the EFI PE loader in efi/loader/pe
barebox prior to version 2026.04.0 contains an out-of-bounds read vulnerability in DHCP option...
CVE-2026-34960
barebox prior to version 2026.04.0 contains an out-of-bounds read vulnerability in DHCP option parsing within the dhcp_m
MantisBT Vulnerable to Stored XSS in File Download
CVE-2026-44657
Using *show_inline=1* parameter and a valid *file_show_inline_token* CSRF token on file_download.php, an attacker can ex
MantisBT has Stored XSS on Move Attachments Admin Page
CVE-2026-44655
Unescaped Project Name allows an attacker that can set it (which typically requires manager or administrator access leve
Kysely: JSON-path traversal injection via unsanitized path-leg metacharacters in `JSONPathBuilder.key()` / `.at()`
CVE-2026-44635
## Summary Kysely 0.28.12 added a `sanitizeStringLiteral()` call inside `DefaultQueryCompiler.visitJSONPathLeg` (commit