IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to gain elevated...
CVE-2026-75782
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to gain elevated privileges due to a misc
#severity:high
共收录 5417 条相关情报。
← 返回所有主题IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker...
CVE-2026-93891
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive inf
IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute...
CVE-2026-85457
IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker...
CVE-2026-93892
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive inf
SQL injection in the bulk license plate search of the Flock Night Shift hosted service allowed an...
CVE-2026-109080
SQL injection in the bulk license plate search of the Flock Night Shift hosted service allowed an authenticated user to
VeraCrypt 1.26.29 (FUSE-T build) on macOS sometimes allows unintended access to decrypted data....
CVE-2026-108982
VeraCrypt 1.26.29 (FUSE-T build) on macOS sometimes allows unintended access to decrypted data. It does not terminate th
ZDR decoding in libnfs through 6.0.2 before 7613236 has an out-of-bounds write related to lib...
CVE-2026-108985
ZDR decoding in libnfs through 6.0.2 before 7613236 has an out-of-bounds write related to lib/libnfs-zdr.c with libnfs_z
Blinko through 1.8.8 allows directory traversal, overwriting startup files as root, via...
CVE-2026-108980
Blinko through 1.8.8 allows directory traversal, overwriting startup files as root, via installPlugin. It builds the plu
GNU Emacs before 31.2 (and TRAMP through 2.8.2) allows OS command injection via a filename...
CVE-2026-108976
GNU Emacs before 31.2 (and TRAMP through 2.8.2) allows OS command injection via a filename because tramp-user-regexp has
databasement before 1.8.2 allows remote code execution because it runs certain commands (e.g.,...
CVE-2026-108963
databasement before 1.8.2 allows remote code execution because it runs certain commands (e.g., mariadb-dump) with a data
omarchy-theme-set in Omarchy 4 before 4.0.1 allows code execution via a third-party theme because...
CVE-2026-108913
omarchy-theme-set in Omarchy 4 before 4.0.1 allows code execution via a third-party theme because the files placed into
pH7Builder (pH7 Social Dating CMS) before 18.6.0 contains a hard-coded API key vulnerability in...
CVE-2026-108905
pH7Builder (pH7 Social Dating CMS) before 18.6.0 contains a hard-coded API key vulnerability in Tool.class.php that allo
pH7Builder (pH7 Social Dating CMS) before 18.5.0 contains a path traversal vulnerability in the...
CVE-2026-108902
pH7Builder (pH7 Social Dating CMS) before 18.5.0 contains a path traversal vulnerability in the picture module deletePho
pH7Builder (pH7 Social Dating CMS) before 18.5.0 contains an information disclosure vulnerability...
CVE-2026-108904
pH7Builder (pH7 Social Dating CMS) before 18.5.0 contains an information disclosure vulnerability that allows API client
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the editThirdAppConfig...
CVE-2026-108883
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the editThirdAppConfig handler that allows any
AmoyLab Unla through 0.10.0 contains an authentication bypass vulnerability that allows...
CVE-2026-108865
AmoyLab Unla through 0.10.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to obt
mcp-go through 1.2.1 contains a denial of service vulnerability in StreamableHTTPServer.ServeHTTP...
CVE-2026-108859
mcp-go through 1.2.1 contains a denial of service vulnerability in StreamableHTTPServer.ServeHTTP that allows remote una
Katanemo Plano through 0.4.37 contains a missing authentication vulnerability that allows...
CVE-2026-108863
Katanemo Plano through 0.4.37 contains a missing authentication vulnerability that allows unauthenticated network attack
UnicomAI Wanwu before 0.6.3 contains an insecure direct object reference vulnerability that...
CVE-2026-108853
UnicomAI Wanwu before 0.6.3 contains an insecure direct object reference vulnerability that allows authenticated low-pri
Nexting pinclaw OpenClaw channel plugin through 0.3.0 contains a missing authentication...
CVE-2026-108757
Nexting pinclaw OpenClaw channel plugin through 0.3.0 contains a missing authentication vulnerability in src/core/http-r