A buffer overflow vulnerability exists in the underlying operating system of AOS-CX that could...
CVE-2026-73774
A buffer overflow vulnerability exists in the underlying operating system of AOS-CX that could lead to unauthenticated d
#severity:high
共收录 5383 条相关情报。
← 返回所有主题A vulnerability exists in the command line interface of AOS-CX that may allow for improper...
CVE-2026-73768
A vulnerability exists in the command line interface of AOS-CX that may allow for improper processing of malformed input
Vulnerabilities in the API endpoint of AOS-CX could allow a remote attacker authenticated with...
CVE-2026-73775
Vulnerabilities in the API endpoint of AOS-CX could allow a remote attacker authenticated with low privileges to access
Vulnerabilities have been identified in the operating system of AOS-CX switches that could...
CVE-2026-73764
Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthen
An authenticated arbitrary file write vulnerability exists in AOS-CX. Successful exploitation...
CVE-2026-73770
An authenticated arbitrary file write vulnerability exists in AOS-CX. Successful exploitation could allow an authenticat
An unauthenticated Denial-of-Service (DoS) vulnerability exists in the API endpoint of AOS-CX....
CVE-2026-73773
An unauthenticated Denial-of-Service (DoS) vulnerability exists in the API endpoint of AOS-CX. Successful exploitation o
A vulnerability exists in a management component that could allow an unauthenticated adjacent...
CVE-2026-73763
A vulnerability exists in a management component that could allow an unauthenticated adjacent attacker to execute arbitr
An authentication vulnerability exists in the AOS-CX management interface and API that may allow...
CVE-2026-73771
An authentication vulnerability exists in the AOS-CX management interface and API that may allow improper authentication
TYPO3 CMS - Broken Access Control in Backend and Install Tool
CVE-2026-19418
### Problem The referrer enforcement introduced with [TYPO3-CORE-SA-2020-006](https://news.typo3.com/security/advisory/t
Filament: Multi-factor authentication (app) can be bypassed when recovery codes are enabled
CVE-2026-77567
A flaw in the challenge handling for app-based multi-factor authentication allows the second factor to be bypassed. This
league/commonmark: Denial of service via distinctly-named attributes in the Attributes extension
### Impact `AttributesExtension` ships with the library but must be explicitly registered on the `Environment`; it is n
NLTK: Uncontrolled search path when invoking the Graphviz 'dot' binary
CVE-2026-78680
Two NLTK sites executed the Graphviz `dot` program by bare name, so process creation resolved it via the search path — a
league/commonmark: Denial of service in the SmartPunct and Attributes extensions
### Impact Two first-party extensions contain quadratic parsing paths. Both ship with the library but must be explicitl
league/commonmark XSS: `on*` event-handler filter in `AttributesExtension` bypassed with a U+000C form feed
### Summary The `AttributesExtension` documents a security guarantee: > **Note:** Attributes starting with `on` (e.g.
league/commonmark: Denial of service via crafted code fences, reference links, and emphasis delimiters
### Impact Affected versions of `league/commonmark` perform super-linear work on three independent parsing paths, all o
nanoid: Integer Overflow or Wraparound
CVE-2026-73086
### Summary An integer overflow in `nanoid(size)` permanently corrupts the process-wide CSPRNG pool, causing all subseq
pnpm: Environment secrets exfiltrated via env-placeholder expansion in proxy settings read from an untrusted pnpm-workspace.yaml
## Summary pnpm expands `${VAR}` environment placeholders in the `httpProxy` / `httpsProxy` / `noProxy` settings read f
pnpm: pacquet trust-lockfile install can create dependency symlinks outside the project
## Summary A crafted lockfile alias could reach several install-time filesystem joins. With `--trust-lockfile` or a fro
MLFLOW_ALLOW_PICKLE_DESERIALIZATION=False safety control bypassed by mlflow.statsmodels flavor — RCE via crafted model artifact
## Summary MLflow introduced `MLFLOW_ALLOW_PICKLE_DESERIALIZATION` as a security control to prevent unsafe `pickle.load
Browserslist: Unbounded memory growth (no cache eviction) via distinct query results, leading to eventual OOM
CVE-2026-73089
## Vulnerability Details **File**: `index.js` **Location**: `cache` (browserslist()'s result cache, line ~402) and `par