A path traversal vulnerability in the Fireware OS WebUI management agent allows an authenticated...
CVE-2026-13224
A path traversal vulnerability in the Fireware OS WebUI management agent allows an authenticated administrator to read o
#severity:high
共收录 5417 条相关情报。
← 返回所有主题A deserialization of untrusted data vulnerability in WatchGuard Fireware OS's SAML single sign-on...
CVE-2026-13046
A deserialization of untrusted data vulnerability in WatchGuard Fireware OS's SAML single sign-on session handling (saml
A flaw has been found in Ziroom ZHOME A0101 1.0.1.0. This vulnerability affects the function...
CVE-2026-102793
A flaw has been found in Ziroom ZHOME A0101 1.0.1.0. This vulnerability affects the function set_time_zone of the file /
A vulnerability has been found in Ziroom ZHOME A0101 1.0.1.0. This issue affects some unknown...
CVE-2026-102794
A vulnerability has been found in Ziroom ZHOME A0101 1.0.1.0. This issue affects some unknown processing of the file /ap
A vulnerability was detected in Ziroom ZHOME A0101 1.0.1.0. This affects the function set_syslog...
CVE-2026-102792
A vulnerability was detected in Ziroom ZHOME A0101 1.0.1.0. This affects the function set_syslog of the file /api/ZRnetw
The "supplier_no" parameter used in the business allocation search feature is vulnerable to time...
CVE-2026-72510
The "supplier_no" parameter used in the business allocation search feature is vulnerable to time-based blind SQL injecti
The "reportType" parameter in the product summary report feature within the balancing reports...
CVE-2026-72507
The "reportType" parameter in the product summary report feature within the balancing reports section is susceptible to
U-Boot before 2026.10-rc5 contains a buffer overflow in nfs_readlink_reply() function in net/nfs...
CVE-2026-74221
U-Boot before 2026.10-rc5 contains a buffer overflow in nfs_readlink_reply() function in net/nfs-common.c when processin
The device's update mechanism includes conditions that allow unauthorized software packages to be...
CVE-2026-91191
The device's update mechanism includes conditions that allow unauthorized software packages to be accepted as authentic.
anchorme through 3.0.8 contains a regular expression denial of service vulnerability in the IPv6...
CVE-2026-103043
anchorme through 3.0.8 contains a regular expression denial of service vulnerability in the IPv6 host extraction regex d
LightLLM through 1.2.0 contains a memory exhaustion vulnerability in the NCCL control channel...
CVE-2026-103042
LightLLM through 1.2.0 contains a memory exhaustion vulnerability in the NCCL control channel when started with --pd_tra
U-Boot before 2026.10-rc5 contains a use-after-free vulnerability in the httpc_recv_cb() function...
CVE-2026-74222
U-Boot before 2026.10-rc5 contains a use-after-free vulnerability in the httpc_recv_cb() function within the lwIP wget i
U-Boot before 2026.10-rc5 contains out-of-bounds memory access in dhcp6_parse_options() that...
CVE-2026-74225
U-Boot before 2026.10-rc5 contains out-of-bounds memory access in dhcp6_parse_options() that fails to validate SERVERID
U-Boot before 2026.10-rc5 contains a buffer overflow in nfs_read_reply() function in net/nfs...
CVE-2026-74220
U-Boot before 2026.10-rc5 contains a buffer overflow in nfs_read_reply() function in net/nfs-common.c that allows attack
The device's update mechanism retrieves metadata for software updates over an unencrypted HTTP...
CVE-2026-84409
The device's update mechanism retrieves metadata for software updates over an unencrypted HTTP connection and stores por
The "screenID" parameter in the electronic transaction queue viewer feature within the manual...
CVE-2026-68068
The "screenID" parameter in the electronic transaction queue viewer feature within the manual transactions section is su
The "pattern" parameter used in search function in the home page of the TMS application is...
CVE-2026-68954
The "pattern" parameter used in search function in the home page of the TMS application is vulnerable to time-based blin
The "search" parameter in the view audit logs feature within the utilities section is susceptible...
CVE-2026-63713
The "search" parameter in the view audit logs feature within the utilities section is susceptible to a time-based blind
The application accepts user-supplied session identifiers and does not regenerate the session ID...
CVE-2026-71302
The application accepts user-supplied session identifiers and does not regenerate the session ID after authentication. T
U-Boot before 2026.10-rc3 with CONFIG_IP_DEFRAG enabled contains an out-of-bounds write...
CVE-2026-71971
U-Boot before 2026.10-rc3 with CONFIG_IP_DEFRAG enabled contains an out-of-bounds write vulnerability in the __net_defra