SAP Integration Suite does not sufficiently validate XML documents accepted from untrusted...
CVE-2026-76958
SAP Integration Suite does not sufficiently validate XML documents accepted from untrusted sources in certain internal c
#severity:high
共收录 5371 条相关情报。
← 返回所有主题knowns before 0.30.0 fails to validate import names in the import routes, allowing...
CVE-2026-86542
knowns before 0.30.0 fails to validate import names in the import routes, allowing unauthenticated attackers to write fi
knowns versions before 0.30.0 fail to validate filesystem paths in MCP tool arguments, allowing...
CVE-2026-86439
knowns versions before 0.30.0 fail to validate filesystem paths in MCP tool arguments, allowing attackers to read, creat
knowns versions before 0.30.0 contain an authorization bypass vulnerability where mutating code...
CVE-2026-86544
knowns versions before 0.30.0 contain an authorization bypass vulnerability where mutating code actions are incorrectly
knowns versions before 0.30.0 contain a path traversal vulnerability in the handleCodeReplace()...
CVE-2026-86541
knowns versions before 0.30.0 contain a path traversal vulnerability in the handleCodeReplace() function that allows att
knowns versions before 0.30.0 contain a path traversal vulnerability in the POST /api/templates...
CVE-2026-86538
knowns versions before 0.30.0 contain a path traversal vulnerability in the POST /api/templates/preview endpoint that al
knowns versions before 0.30.0 fail to validate the settings.lsp.languages binary field in project...
CVE-2026-86540
knowns versions before 0.30.0 fail to validate the settings.lsp.languages binary field in project configuration files, a
Lara Dashboard before 1.3.2 fails to authorize the MarketplaceModuleBrowser installModule...
CVE-2026-86438
Lara Dashboard before 1.3.2 fails to authorize the MarketplaceModuleBrowser installModule Livewire action, allowing non-
Lara Dashboard before 1.3.2 authorizes the POST /admin/settings/core-upgrades/upload endpoint...
CVE-2026-86437
Lara Dashboard before 1.3.2 authorizes the POST /admin/settings/core-upgrades/upload endpoint with only the settings.edi
In JetBrains YouTrack before 2025.3.160480, 2026.1.14047 pUT requests on link sub-resources...
CVE-2026-86498
In JetBrains YouTrack before 2025.3.160480, 2026.1.14047 pUT requests on link sub-resources allowed modification linked
In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust confirmation before building a...
CVE-2026-86504
In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust confirmation before building a Dev Container allowed ho
In JetBrains YouTrack before 2026.2.18634 cloning a whiteboard allowed unauthorized changes to...
CVE-2026-86494
In JetBrains YouTrack before 2026.2.18634 cloning a whiteboard allowed unauthorized changes to links on inaccessible iss
In JetBrains IntelliJ IDEA before 2026.2.2 missing TLS and authentication on the IJent gRPC...
CVE-2026-86502
In JetBrains IntelliJ IDEA before 2026.2.2 missing TLS and authentication on the IJent gRPC server allowed local code ex
In JetBrains YouTrack before 2026.2.18634 a shared token cache allowed cross-tenant theft of...
CVE-2026-86492
In JetBrains YouTrack before 2026.2.18634 a shared token cache allowed cross-tenant theft of GitHub App installation tok
In JetBrains YouTrack before 2026.2.18788, 2026.1.14055, 2025.3.161254 missing authorisation...
CVE-2026-86479
In JetBrains YouTrack before 2026.2.18788, 2026.1.14055, 2025.3.161254 missing authorisation allowed access to restric
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior...
CVE-2026-80166
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains
In JetBrains YouTrack before 2026.2.18634 unchecked group membership changes allowed privilege...
CVE-2026-86482
In JetBrains YouTrack before 2026.2.18634 unchecked group membership changes allowed privilege escalation
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior...
CVE-2026-80127
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior...
CVE-2026-79691
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior...
CVE-2026-79639
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains