rclone: FTP cross-session auth-proxy backend confusion
CVE-2026-88017
## Summary The FTP auth-proxy driver stores one obscured password per username in a server-wide map. It does not bind t
#severity:high
共收录 5373 条相关情报。
← 返回所有主题rclone: S3 multipart declared-length memory exhaustion
CVE-2026-88045
## Summary In streamed multipart mode, `serve s3` passes the request's declared part length to `multipart.NewRW().Reser
Open WebUI: Unauthenticated requests can stall the server via uncached OIDC fetches in back-channel logout
CVE-2026-87011
## Summary The OIDC back-channel logout endpoint is unauthenticated by design, because the identity provider calls it w
@jhb.software/payload-alt-text-plugin: Alt Text Endpoint Authorization Bypass via Payload Local API `overrideAccess` Omission
CVE-2026-59965
## Alt Text Endpoint Authorization Bypass via Payload Local API `overrideAccess` Omission ### Summary `@jhb.software/p
@argos-ci/core: CI Branch Name OS Command Injection
CVE-2026-59960
## CI Branch Name OS Command Injection in @argos-ci/core ### Summary `@argos-ci/core@6.2.0` passes attacker-controlled
mistral.rs: Unbounded Remote Media Fetch and Video Frame Expansion DoS
## Unbounded Remote Media Fetch and Video Frame Expansion DoS ### Summary The `POST /v1/chat/completions` endpoint in m
mistral.rs Media Loader: Unauthenticated SSRF and arbitrary local file read via image_url
### Summary mistral.rs fetches any request-supplied image/audio URL with no host or IP validation, and opens arbitrary l
Open WebUI: Sign-in as another user via wildcard characters in the OAuth subject claim on SQLite
CVE-2026-87016
## Summary On SQLite deployments, the lookup that maps an external identity to a local account does a substring match i
Tanium addressed a server-side request forgery vulnerability in Enforce.
CVE-2026-87084
Tanium addressed a server-side request forgery vulnerability in Enforce.
Tanium addressed an unauthorized code execution vulnerability in Enforce.
CVE-2026-87088
Tanium addressed an unauthorized code execution vulnerability in Enforce.
Tanium addressed a SQL injection vulnerability in Comply.
CVE-2026-87034
Tanium addressed a SQL injection vulnerability in Comply.
Tanium addressed an improper access controls vulnerability in Comply.
CVE-2026-87072
Tanium addressed an improper access controls vulnerability in Comply.
Tanium addressed an improper access controls vulnerability in Comply.
CVE-2026-87075
Tanium addressed an improper access controls vulnerability in Comply.
Tanium addressed an improper access controls vulnerability in Comply.
CVE-2026-87036
Tanium addressed an improper access controls vulnerability in Comply.
The Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress plugin for...
CVE-2026-13359
The Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress plugin for WordPress is vulnerable to Sto
Tanium addressed a path traversal vulnerability in Comply.
CVE-2026-87023
Tanium addressed a path traversal vulnerability in Comply.
Tanium addressed a path traversal vulnerability in Comply.
CVE-2026-87030
Tanium addressed a path traversal vulnerability in Comply.
The Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) plugin for...
CVE-2026-15406
The Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) plugin for WordPress is vulnerable to L
The Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) plugin for...
CVE-2026-15667
The Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) plugin for WordPress is vulnerable to L
The FireBox – WooCommerce Popup Builder, Exit Intent Popup, Email Optin & Cart Abandonment plugin...
CVE-2026-76801
The FireBox – WooCommerce Popup Builder, Exit Intent Popup, Email Optin & Cart Abandonment plugin for WordPress is vulne