Contrast is a confidential-computing runtime for Kubernetes. In versions before 1.19.1, the Kata...
CVE-2026-100838
Contrast is a confidential-computing runtime for Kubernetes. In versions before 1.19.1, the Kata agent policies generate
#severity:high
共收录 5366 条相关情报。
← 返回所有主题MONAI through 1.6.0 contains a remote code execution vulnerability in the bundle configuration...
CVE-2026-100840
MONAI through 1.6.0 contains a remote code execution vulnerability in the bundle configuration engine that resolves _tar
MONAI before 1.6.0 contains an unsafe deserialization vulnerability in the NumpyReader class that...
CVE-2026-100845
MONAI before 1.6.0 contains an unsafe deserialization vulnerability in the NumpyReader class that unconditionally uses n
Contrast (Edgeless Systems) before 1.8.1 logs the workload secret to stderr, and thus to...
CVE-2025-71425
Contrast (Edgeless Systems) before 1.8.1 logs the workload secret to stderr, and thus to Kubernetes logs, when the Contr
Edgelesssys Contrast is a confidential-computing runtime for Kubernetes. In versions 1.9.0 before...
CVE-2025-71423
Edgelesssys Contrast is a confidential-computing runtime for Kubernetes. In versions 1.9.0 before 1.12.2, the initialize
Contrast is a confidential-computing runtime for Kubernetes. In versions before 1.4.1, a...
CVE-2025-71426
Contrast is a confidential-computing runtime for Kubernetes. In versions before 1.4.1, a recovering Coordinator does not
http4k (Maven artifact org.http4k:http4k-core) before 6.48.0.0, 5.42.0.0, and 4.51.0.0 ships a...
CVE-2026-100725
http4k (Maven artifact org.http4k:http4k-core) before 6.48.0.0, 5.42.0.0, and 4.51.0.0 ships a BasicCookieStorage (clien
vm2 before 3.12.2 does not apply host-side Promise rejection handling in the sandbox-to-host...
CVE-2026-100722
vm2 before 3.12.2 does not apply host-side Promise rejection handling in the sandbox-to-host construct trap. In BaseHand
A vulnerability was detected in D-Link DIR-895L A1_102b07. Impacted is the function...
CVE-2026-100740
A vulnerability was detected in D-Link DIR-895L A1_102b07. Impacted is the function tunnel_set_params of the file tunnel
Unintended Proxy or Intermediary ('Confused Deputy') (CWE-441) in Kibana Agent Builder can lead...
CVE-2026-72668
Unintended Proxy or Intermediary ('Confused Deputy') (CWE-441) in Kibana Agent Builder can lead to privilege escalation.
The Groups – Memberships and Access Control plugin for WordPress is vulnerable to Privilege...
CVE-2026-77203
The Groups – Memberships and Access Control plugin for WordPress is vulnerable to Privilege Escalation in all versions u
Joomla Extension - lomart.fr - Various SQL injection vectors in UP plugin extension 5.0.0-5.2.0,...
CVE-2026-97162
Joomla Extension - lomart.fr - Various SQL injection vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29
Joomla Extension - acymailing.com - Unauthenticated arbitrary file deletion in AcyMailing...
CVE-2026-94131
Joomla Extension - acymailing.com - Unauthenticated arbitrary file deletion in AcyMailing Enterprise extension < 11.1.0
Froxlor versions before 2.3.12 contain a credential disclosure vulnerability in the...
CVE-2026-100719
Froxlor versions before 2.3.12 contain a credential disclosure vulnerability in the DirProtections.listing API command t
Froxlor through 2.3.10 is vulnerable to arbitrary file deletion via symlink following in the FTP...
CVE-2026-100715
Froxlor through 2.3.10 is vulnerable to arbitrary file deletion via symlink following in the FTP data deletion cron task
froxlor is a server administration panel. In versions 2.3.10 and earlier, Validate::validateUrl...
CVE-2026-100717
froxlor is a server administration panel. In versions 2.3.10 and earlier, Validate::validateUrl rejects carriage return
froxlor versions before 2.3.12 fail to invalidate existing panel sessions, API keys, and 2FA...
CVE-2026-100711
froxlor versions before 2.3.12 fail to invalidate existing panel sessions, API keys, and 2FA trust cookies when a user p
Froxlor before 2.3.13 returns the ssl_key_file column — which stores the raw PEM TLS private-key...
CVE-2026-100708
Froxlor before 2.3.13 returns the ssl_key_file column — which stores the raw PEM TLS private-key content — verbatim in t
Froxlor through 2.3.10 stores only a numeric user ID in remembered-2FA tokens (panel_2fa_tokens)...
CVE-2026-100709
Froxlor through 2.3.10 stores only a numeric user ID in remembered-2FA tokens (panel_2fa_tokens) without recording the a
Froxlor through 2.3.10 does not enforce the mail.allow_external_domains policy in the EmailSender...
CVE-2026-100718
Froxlor through 2.3.10 does not enforce the mail.allow_external_domains policy in the EmailSender.add API command. When