In Modem IMS, there is a possible improper input validation. This could lead to remote denial of...
CVE-2025-71252
In Modem IMS, there is a possible improper input validation. This could lead to remote denial of service with no additio
#severity:high
共收录 5513 条相关情报。
← 返回所有主题In Modem IMS, there is a possible improper input validation. This could lead to remote denial of...
CVE-2025-71255
In Modem IMS, there is a possible improper input validation. This could lead to remote denial of service with no additio
AVideo Vulnerable to Exposure of Sensitive Information to an Unauthorized Actor and Missing Authorization
CVE-2026-43885
### Summary An unauthenticated user can read `APISecret` from `objects/plugins.json.php` and use it to call protected
AVideo has SSRF Protection Bypass via HTTP Redirect and DNS Rebinding in isSSRFSafeURL()
CVE-2026-43884
### Summary Two endpoints in AVideo call `isSSRFSafeURL()` to validate user-supplied URLs, then fetch them using bare `
jdbi3-freemarker Vulnerable to Improper Neutralization of Special Elements Used in FreeMarker Template Engine
# Summary **Description** An Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336) vulnerab
authd: Primary group ID is incorrectly set to value of UID
CVE-2026-6970
authd 0.6.0 contains [a bug](https://github.com/canonical/authd/issues/1482) which can lead to an incorrect primary grou
Mongoose's Improper Sanitization of $nor in sanitizeFilter May Allow NoSQL Injection
CVE-2026-42334
### Impact This vulnerability allows bypassing Mongoose’s sanitizeFilter query sanitization mechanism via the `$nor` op
rust-openssl has undefined behavior in X509Ref::ocsp_responders for certificates with non-UTF-8 OCSP URLs
CVE-2026-42327
`X509Ref::ocsp_responders` returns OCSP responder URLs from a certificate's AIA extension as `OpensslString`, whose `Der
Plug.Cowboy vulnerable to unauthenticated remote DoS via HTTP/2 `:scheme` atom-table exhaustion
CVE-2026-32688
## Summary An unauthenticated remote denial-of-service vulnerability in `Plug.Cowboy.Conn` allows any attacker who can
Grav is Vulnerable to Stored XSS via Tag Injection
CVE-2026-42611
### Summary A low-privileged (with the ability to create a page) user can cause XSS with the injection of `svg` element.
Grav has Unauthenticated Path Traversal & Arbitrary File Write in its FormFlash component
CVE-2026-42608
# Vulnerability Report: Grav CMS Unauthenticated Path Traversal & Arbitrary File Write **[ZERO-DAY] Unauthenticated Pat
A security vulnerability has been detected in D-Link DI-8100 16.07.26A1. Affected by this...
CVE-2026-7854
A security vulnerability has been detected in D-Link DI-8100 16.07.26A1. Affected by this vulnerability is the function
A vulnerability has been found in D-Link DI-8100 16.07.26A1. This vulnerability affects the...
CVE-2026-7857
A vulnerability has been found in D-Link DI-8100 16.07.26A1. This vulnerability affects the function sprintf of the file
A flaw has been found in D-Link DI-8100 16.07.26A1. This affects an unknown part of the file ...
CVE-2026-7856
A flaw has been found in D-Link DI-8100 16.07.26A1. This affects an unknown part of the file /url_member.asp of the comp
In ProFTPD through 1.3.9a before 7666224, a SQL injection vulnerability in...
CVE-2026-44331
In ProFTPD through 1.3.9a before 7666224, a SQL injection vulnerability in sqltab_fetch_clients_cb() in contrib/mod_wrap
A vulnerability was detected in D-Link DI-8100 16.07.26A1. Affected by this issue is the function...
CVE-2026-7855
A vulnerability was detected in D-Link DI-8100 16.07.26A1. Affected by this issue is the function tggl_asp of the file /
An issue was discovered in idrac in OpenStack Ironic before 35.0.1. During import, a user...
CVE-2026-42997
An issue was discovered in idrac in OpenStack Ironic before 35.0.1. During import, a user invoking molds can request aut
Grav Vulnerable to Administrative Account Disruption and Privilege De-escalation via User Overwrite Logic
CVE-2026-42609
### Summary A business logic vulnerability in the Grav Admin Panel allows a low-privileged user (with only user creation
Grav has Insecure Deserialization in File Cache
# Insecure Deserialization in File Cache - **Severity:** High - **CWE:** CWE-502 - **Location:** `system/src/Grav/Fram
Grav Vulnerable to Publisher-Level Stored XSS via Unquoted Event Attributes
CVE-2026-42612
### Summary A stored Cross-Site Scripting (XSS) vulnerability in `getgrav/grav` allows publisher-level accounts to execu