Linksys WAG200G through 1.01.06 contains an OS command injection vulnerability that allows...
CVE-2013-20007
Linksys WAG200G through 1.01.06 contains an OS command injection vulnerability that allows authenticated attackers to ex
#severity:high
共收录 5396 条相关情报。
← 返回所有主题MLflow vulnerable to arbitrary file read on unauthenticated servers via prompt model version source
CVE-2026-116690
### Summary On MLflow tracking servers running without authentication, which is the default for mlflow server, a remote
dd-trace: ReDOS in URL query string obfuscation
CVE-2026-116693
### Summary A regular expression used to obfuscate URL query strings can consume excessive CPU when processing certain
TinyMCE Cross-Site Scripting (XSS) vulnerability using media plugin `data-mce-object` serialization
CVE-2026-116675
### Impact Stored XSS vulnerability in the media plugin. Attackers can inject malicious scripts via elements crafted thr
CKEditor: Cross-site scripting (XSS) in the engine package
CVE-2026-116688
### Impact A Cross-Site Scripting (XSS) vulnerability has been discovered in the CKEditor 5 engine. This vulnerability i
Atlantis: OS command injection through PR-controlled Terraform workspace enables RCE during plan
CVE-2026-116676
### Summary Atlantis passes the Terraform `workspace` value from a pull request's `atlantis.yaml` into a shell command
FileBrowser: Symlink following escapes user scope allowing arbitrary file read outside the served directory
CVE-2026-116682
## Summary File read paths resolve symbolic links with `filepath.EvalSymlinks` and then operate on the resolved target
follow-redirects is a Node.js HTTP and HTTPS client wrapper that automatically follows redirects. From 1.16.0 until 1.16.2, the documented sensitiveHeaders option is checked wit...
CVE-2026-116689
follow-redirects is a Node.js HTTP and HTTPS client wrapper that automatically follows redirects. From 1.16.0 until 1.16
undici vulnerable to cache poisoning and cross-user disclosure via cross-origin redirects
CVE-2026-109829
### Impact When an originless `Agent` composes the redirect and cache interceptors as `compose(redirect(), cache())` wi
undici vulnerable to TLS certificate validation bypass via dropped tls options in Agent
CVE-2026-109383
### Impact undici's `Agent` passes its constructor options through a JSON-based deep clone (`JSON.parse(JSON.stringify(
undici vulnerable to Denial of Service via TLS 1.2 certificate-changing renegotiation
CVE-2026-87018
## Impact undici crashes the client process when a TLS 1.2 server renegotiates after the connection is established and
MCP TypeScript SDK: HTTP server transports and handlers did not limit request body size or JSON-RPC batch length
### Summary In affected versions, MCP servers reachable over HTTP put no limit on the size of a POST body or on the numb
Symfony: Unbounded Recursion in the YAML Inline Lexer Lets a Single Document Crash the Process
CVE-2026-109413
### Description `Yaml\Parser::lexInlineStructure()` recursed through `lexInlineMapping()` and `lexInlineSequence()` for
Symfony: ReDoS in HeaderUtils::split() Reachable Through the Cache-Control Request Header
CVE-2026-108082
### Description `HeaderUtils::split()` parsed header values with a pattern whose token alternative also matched whitesp
Go JOSE: DoS when parsing JWKs that contain RSA keys
CVE-2026-116587
### Summary A crafted RSA key inside a JWK can cause operations that parse JWKs to consume excess CPU. ### Details go
CTFer.io's CTFd Terraform Provider allows a local or remote attacker to read team passwords in state as non sensitive values
CVE-2026-116683
### Impact CTFer.io's CTFd Terraform Provider stores `ctfd_team.password` as non-sensitive values (CWE-522). A local or
Authlib is a Python library which builds OAuth and OpenID Connect servers. From 0.15 until 1.9.1, the documented ClientConfigurationEndpoint.authenticate_client and ClientConfig...
CVE-2026-116672
Authlib is a Python library which builds OAuth and OpenID Connect servers. From 0.15 until 1.9.1, the documented ClientC
Hydra legacy target blacklist permits unsafe PyYAML loading
## Summary Hydra's legacy target blacklist omits PyYAML's unsafe loading surfaces. If an application passes attacker-co
undici WebSocket client vulnerable to Denial of Service via failed HTTP/2 handshake
CVE-2026-109855
### Impact undici's experimental WebSocket client (enabled by default via `allowH2: true`) crashes the Node.js process
Authlib accepts an empty HMAC key, allowing JWS/JWT signature forgery (HS256/HS384/HS512)
CVE-2026-114616
Reporter: Cavan Loughran, Celvex Group Inc. Summary Authlib's symmetric (oct) key handling accepts an empty key (empty