PX4 Autopilot contains a heap buffer overflow vulnerability in the sd_bench command that writes a...
CVE-2026-84698
PX4 Autopilot contains a heap buffer overflow vulnerability in the sd_bench command that writes a four-byte block number
#severity:high
共收录 5383 条相关情报。
← 返回所有主题PikiwiDB (Pika) v3.5.7 exposes an internal protobuf replication server on a port derived from the...
CVE-2026-84700
PikiwiDB (Pika) v3.5.7 exposes an internal protobuf replication server on a port derived from the client port plus 2000
facefusion through 3.6.1 fails to normalize job identifiers in get_job_file_name, allowing...
CVE-2026-84702
facefusion through 3.6.1 fails to normalize job identifiers in get_job_file_name, allowing attackers to write files outs
ION-DTN versions before 4.2.0 contain an out-of-bounds read vulnerability in the decodeSdnv...
CVE-2026-84484
ION-DTN versions before 4.2.0 contain an out-of-bounds read vulnerability in the decodeSdnv function that allows unauthe
Coolify before 4.2.0 fails to properly escape environment variable key names in Docker commands...
CVE-2026-84694
Coolify before 4.2.0 fails to properly escape environment variable key names in Docker commands executed over SSH on man
WWBN AVideo through commit 9c39d8c8 contains a cross-site request forgery vulnerability in the...
CVE-2026-84482
WWBN AVideo through commit 9c39d8c8 contains a cross-site request forgery vulnerability in the get_domain() and isSameDo
WWBN AVideo fails to validate trusted proxies before accepting X-Real-IP and X-Forwarded-For...
CVE-2026-84476
WWBN AVideo fails to validate trusted proxies before accepting X-Real-IP and X-Forwarded-For headers, allowing attackers
AVideo through version 29.0 contains an unauthenticated SQL injection vulnerability in the...
CVE-2026-84208
AVideo through version 29.0 contains an unauthenticated SQL injection vulnerability in the User_Location plugin's region
A server-side request forgery (SSRF) vulnerability was identified in GitHub Enterprise Server...
CVE-2026-18730
A server-side request forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed an unauthenti
Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS...
CVE-2026-83549
Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerabi
A Server-Side Request Forgery (SSRF) vulnerability was identified in GitHub Enterprise Server...
CVE-2026-76851
A Server-Side Request Forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed remote code e
A time-of-check time-of-use race condition vulnerability was identified in GitHub Enterprise...
CVE-2026-19118
A time-of-check time-of-use race condition vulnerability was identified in GitHub Enterprise Server that allowed remote
gRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation
CVE-2026-84304
### Impact An unauthenticated remote attacker can initiate a gRPC stream and purposefully fragment their payload into mi
A vulnerability in the web-based management interface of AOS-CX could allow an authenticated...
CVE-2026-73781
A vulnerability in the web-based management interface of AOS-CX could allow an authenticated remote attacker to conduct
Vulnerabilities have been identified in the API endpoint of AOS-CX switches that could...
CVE-2026-73777
Vulnerabilities have been identified in the API endpoint of AOS-CX switches that could potentially allow an unauthentica
A signature verification bypass vulnerability exists in the command line interface of AOS-CX....
CVE-2026-73776
A signature verification bypass vulnerability exists in the command line interface of AOS-CX. Successful exploitation co
A vulnerability in the web-based management interface of AOS-CX switches exposes some sessions to...
CVE-2026-73780
A vulnerability in the web-based management interface of AOS-CX switches exposes some sessions to a lack of Cross-Site R
A format string vulnerability exists in the command line interface of AOS-CX that could lead to...
CVE-2026-73782
A format string vulnerability exists in the command line interface of AOS-CX that could lead to unauthenticated remote c
A vulnerability exists in the Credential Manager component that may allow for unauthorized...
CVE-2026-73778
A vulnerability exists in the Credential Manager component that may allow for unauthorized administrative access. An una
Vulnerabilities have been identified in the operating system of AOS-CX switches that could...
CVE-2026-73779
Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthen