Steeltoe.Discovery.Eureka: malformed enum/bool/timestamp field aborts entire registry fetch (DoS)
CVE-2026-81515
## Summary Steeltoe's Eureka discovery client deserializes the registry response as a single unit. If any registered in
#severity:high
共收录 5373 条相关情报。
← 返回所有主题Jupyter Server: 5xx request logging leaks token-bearing Referer header values
CVE-2026-86049
### Summary When a request returns a 500, `jupyter_server/log.py` logs a small JSON block of request headers. The Ref
Grav: media_directory() Twig function allows filesystem path traversal and file content disclosure from sandboxed page content
CVE-2026-72697
## Summary The `media_directory()` Twig function is allow-listed for use in sandboxed, editor-authored page content (`s
Grav: UserInterface offsetget/offsetexists allow-listed in Twig sandbox let editor-authored content leak hashed_password and 2FA secrets via offsetGet()
CVE-2026-76839
## Summary `system/config/security.yaml`'s Twig sandbox policy allow-lists `offsetget` and `offsetexists` for `Grav\Com
Grav: config_denied_paths default list omits `system`, exposing real secrets (e.g. system.cache.redis.password) via the Twig sandbox when config_access is enabled
CVE-2026-76846
## Summary `system/config/security.yaml`'s default `twig_sandbox.config_denied_paths` list (`plugins`, `streams`, `secu
Grav: The system, site, and theme Twig variables bypass the content sandbox entirely and are never covered by config_denied_paths
CVE-2026-72698
## Summary `Grav\Common\Twig\Twig::init()` unconditionally puts the raw `system`, `site`, and `theme` config arrays int
The Affinity by Canva application before 3.3.0 (September 2026 release) did not perform adequate...
CVE-2026-81546
The Affinity by Canva application before 3.3.0 (September 2026 release) did not perform adequate bounds checking when pa
A DLL hijacking vulnerability exists in the GeoVision GV-Remote E-Map desktop application. The...
CVE-2026-92838
A DLL hijacking vulnerability exists in the GeoVision GV-Remote E-Map desktop application. The application loads one or
Nodemailer before 9.1.0 contains a quadratic time complexity vulnerability in the addressparser...
CVE-2026-92596
Nodemailer before 9.1.0 contains a quadratic time complexity vulnerability in the addressparser component that allows re
Nodemailer before 9.1.0 fails to apply UTS-46 normalization when encoding international domain...
CVE-2026-92598
Nodemailer before 9.1.0 fails to apply UTS-46 normalization when encoding international domain names, causing the domain
joi (npm package `joi`, hapi.js) versions >=17.2.0 <17.13.7 and >=18.0.0 <18.2.6 are vulnerable...
CVE-2026-92599
joi (npm package `joi`, hapi.js) versions >=17.2.0 =18.0.0 <18.2.6 are vulnerable to regular expression denial of servic
Craft CMS 5.0.0-RC1 through versions before 5.11.0 incorrectly authorize the GraphQL draftCreator...
CVE-2026-92594
Craft CMS 5.0.0-RC1 through versions before 5.11.0 incorrectly authorize the GraphQL draftCreator and revisionCreator fi
Craft CMS versions 5.10.0 through 5.10.12 contain an incomplete fix for CVE-2026-55794: the...
CVE-2026-92593
Craft CMS versions 5.10.0 through 5.10.12 contain an incomplete fix for CVE-2026-55794: the Controller::getPostedRedirec
Nodemailer versions >= 6.9.16 and < 9.1.0 mis-parse RFC 5322 comments in email addresses: in lib...
CVE-2026-92597
Nodemailer versions >= 6.9.16 and < 9.1.0 mis-parse RFC 5322 comments in email addresses: in lib/addressparser, a commen
Craft CMS 5.0.0 through 5.10.12 treats a database connection failure as meaning that Craft is not...
CVE-2026-92591
Craft CMS 5.0.0 through 5.10.12 treats a database connection failure as meaning that Craft is not installed, which makes
Craft CMS 4.8.0 through 4.18.5 and 5.0.0 through 5.10.12 sign an authenticated user's attacker...
CVE-2026-92592
Craft CMS 4.8.0 through 4.18.5 and 5.0.0 through 5.10.12 sign an authenticated user's attacker-controlled license-shun c
TCH QRing smart ring model R20_B006 running firmware RT09R20_1.00.00_250318 contains an...
CVE-2026-89034
TCH QRing smart ring model R20_B006 running firmware RT09R20_1.00.00_250318 contains an unauthenticated Bluetooth Low En
AVideo (WWBN/AVideo) through 29.0 (commit e01e41ecc) is vulnerable to cross-site request forgery....
CVE-2026-92582
AVideo (WWBN/AVideo) through 29.0 (commit e01e41ecc) is vulnerable to cross-site request forgery. objects/videoAddNew.js
In AVideo through 29.0, the API get_api_video endpoint contains a broken access control...
CVE-2026-92577
In AVideo through 29.0, the API get_api_video endpoint contains a broken access control vulnerability in the clean_title
In AVideo through 29.0, the CloneSite plugin is vulnerable to stored OS command injection. In...
CVE-2026-92580
In AVideo through 29.0, the CloneSite plugin is vulnerable to stored OS command injection. In plugin/CloneSite/cloneClie