Browserslist: Uncaught crash / prototype write via untrusted browserslist-stats.json custom stats (normalizeStats)
CVE-2026-73088
## Vulnerability Details **File**: `node.js` **Function**: `normalizeStats()` (line ~214), reached from `getStat()` (ca
#severity:high
共收录 5383 条相关情报。
← 返回所有主题MySQL2: Auth Plugin Downgrade to mysql_clear_password Leaks Plaintext Credentials
## Summary A rogue MySQL server (or MITM) can force mysql2 to send credentials in **plaintext** by requesting an auth s
A vulnerability in the Backblaze Client allows a local user to make the system not bootable by...
CVE-2026-19820
A vulnerability in the Backblaze Client allows a local user to make the system not bootable by creating a link from Back
Eval injection in cPanel 11.138.0.0 and earlier allows remote authenticated users to execute...
CVE-2026-65643
Eval injection in cPanel 11.138.0.0 and earlier allows remote authenticated users to execute arbitrary code as root.
A security vulnerability has been detected in RedPort Optimizer wXa-203, Optimizer wXa-213 and...
CVE-2026-83524
A security vulnerability has been detected in RedPort Optimizer wXa-203, Optimizer wXa-213 and Optimizer wXa-223 up to 2
A vulnerability was detected in Dokploy up to 0.29.7. This issue affects the function...
CVE-2026-82954
A vulnerability was detected in Dokploy up to 0.29.7. This issue affects the function writeTraefikConfigInPath of the fi
Devtron through 2.2.0 fails to enforce authorization checks on the GET /orchestrator/api-token...
CVE-2026-82882
Devtron through 2.2.0 fails to enforce authorization checks on the GET /orchestrator/api-token/webhook endpoint, allowin
Kirby: File upload permissions are not checked during processing of chunk data
CVE-2026-71415
### TL;DR This vulnerability affects all Kirby sites where users of a particular role have access to the REST API (`acc
Kirby: Access to image files and limited access to JSON files outside of the site root via path traversal in the media handling
CVE-2026-75594
### TL;DR This vulnerability affects all Kirby sites that are deployed to a server that allows requests for URLs with e
A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due...
CVE-2026-83596
A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handl
Unauthenticated Cross Site Scripting (XSS) in WordPress Social Login and Register <= 7.8.2 versions.
CVE-2026-82229
Unauthenticated Cross Site Scripting (XSS) in WordPress Social Login and Register <= 7.8.2 versions.
Unauthenticated Broken Authentication in RegistrationMagic <= 6.0.9.8 versions.
CVE-2026-82225
Unauthenticated Broken Authentication in RegistrationMagic <= 6.0.9.8 versions.
Unauthenticated Cross Site Scripting (XSS) in SliceWP <= 1.2.10 versions.
CVE-2026-82224
Unauthenticated Cross Site Scripting (XSS) in SliceWP <= 1.2.10 versions.
Unauthenticated Cross Site Scripting (XSS) in RegistrationMagic <= 6.0.9.8 versions.
CVE-2026-82221
Unauthenticated Cross Site Scripting (XSS) in RegistrationMagic <= 6.0.9.8 versions.
A vulnerability was found in MSI Dragon Center up to 2.0.155.0. Affected by this vulnerability is...
CVE-2026-82908
A vulnerability was found in MSI Dragon Center up to 2.0.155.0. Affected by this vulnerability is the function MmioWrite
Unauthenticated Bypass Vulnerability in SiteGround Security <= 1.6.6 versions.
CVE-2026-82228
Unauthenticated Bypass Vulnerability in SiteGround Security <= 1.6.6 versions.
A potential security vulnerability has been identified in the HP ImageDiags for versions prior to...
CVE-2026-82346
A potential security vulnerability has been identified in the HP ImageDiags for versions prior to 5.0.0.36. The vulnerab
Unauthenticated Cross Site Scripting (XSS) in Email Essentials <= 6.0.6 versions.
CVE-2026-81764
Unauthenticated Cross Site Scripting (XSS) in Email Essentials <= 6.0.6 versions.
Unauthenticated Cross Site Scripting (XSS) in Uncode <= 2.12.7 versions.
CVE-2026-81291
Unauthenticated Cross Site Scripting (XSS) in Uncode <= 2.12.7 versions.
Unauthenticated Broken Access Control in Fluent Forms Pro Add On Pack <= 6.2.12 versions.
CVE-2026-81296
Unauthenticated Broken Access Control in Fluent Forms Pro Add On Pack <= 6.2.12 versions.