SiYuan Windows installer before version 3.8.1 (affected versions >= 2.0.14) contains an...
CVE-2026-82649
SiYuan Windows installer before version 3.8.1 (affected versions >= 2.0.14) contains an uncontrolled search path element
#severity:high
共收录 5383 条相关情报。
← 返回所有主题Admidio before 5.0.12 contains a blind SQL injection vulnerability in the relation_type_list...
CVE-2026-82655
Admidio before 5.0.12 contains a blind SQL injection vulnerability in the relation_type_list parameter of lists_show.php
WWBN AVideo (current e01e41ecc and earlier) contains a brute-force rate limiting bypass in...
CVE-2026-82644
WWBN AVideo (current e01e41ecc and earlier) contains a brute-force rate limiting bypass in enforceRateLimit(), which pro
Readest is an open-source e-book reader built on Tauri. In versions prior to 0.11.16, EPUB...
CVE-2026-82642
Readest is an open-source e-book reader built on Tauri. In versions prior to 0.11.16, EPUB chapter HTML is sanitized wit
keploy versions 3.1.0 through 3.6.25 bind the agent control-plane HTTP server to all interfaces...
CVE-2026-82641
keploy versions 3.1.0 through 3.6.25 bind the agent control-plane HTTP server to all interfaces without authentication,
jina-ai reader disables its private-address guard outside Google Cloud deployments, allowing...
CVE-2026-82638
jina-ai reader disables its private-address guard outside Google Cloud deployments, allowing unauthenticated attackers t
Pake before 3.13.1 joins the JavaScript-supplied filename for the download_file Tauri command...
CVE-2026-82635
Pake before 3.13.1 joins the JavaScript-supplied filename for the download_file Tauri command onto the user's Downloads
Qubes OS before qubes-core-dom0-linux 4.3.22 allows OS command injection during a qvm-copy-to-vm...
CVE-2026-82636
Qubes OS before qubes-core-dom0-linux 4.3.22 allows OS command injection during a qvm-copy-to-vm call from dom0 to an at
Frappe Framework development builds contain an authorization flaw in the render_jinja_template...
CVE-2026-82634
Frappe Framework development builds contain an authorization flaw in the render_jinja_template endpoint that allows low-
NextChat versions from 2.15.8 through 2.16.1 contain an improper URL validation vulnerability in...
CVE-2026-82639
NextChat versions from 2.15.8 through 2.16.1 contain an improper URL validation vulnerability in the proxy endpoint that
A vulnerability was determined in TOTOLINK A720R 4.1.5cu.630_B20250509. This impacts the function...
CVE-2026-82539
A vulnerability was determined in TOTOLINK A720R 4.1.5cu.630_B20250509. This impacts the function setMacFilterRules of t
The SAML Single Sign On – SSO Login plugin for WordPress is vulnerable to Authentication Bypass...
CVE-2026-75807
The SAML Single Sign On – SSO Login plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and i
iFlytek astron-agent through 1.1.1 contains an authorization bypass vulnerability in the copyFlow...
CVE-2026-82475
iFlytek astron-agent through 1.1.1 contains an authorization bypass vulnerability in the copyFlow endpoint that fails to
KubeEdge CloudCore through 1.23.1 accepts node task status reports on its HTTPS server without...
CVE-2026-82473
KubeEdge CloudCore through 1.23.1 accepts node task status reports on its HTTPS server without authentication verificati
Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in...
CVE-2026-82474
Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode.
Documenso before 2.13.0 accepts PDF file uploads on the /api/files/upload-pdf endpoint without...
CVE-2026-82472
Documenso before 2.13.0 accepts PDF file uploads on the /api/files/upload-pdf endpoint without requiring authentication,
pac4j-core before 6.5.6 contains an authentication bypass vulnerability in...
CVE-2026-82463
pac4j-core before 6.5.6 contains an authentication bypass vulnerability in CheckProfileTypeAuthorizer that reverses the
pac4j-oidc before 6.5.6 fails to verify access token signatures, issuers, audiences, or expiry...
CVE-2026-82461
pac4j-oidc before 6.5.6 fails to verify access token signatures, issuers, audiences, or expiry when extracting Keycloak
su-exec through 0.3 fails to validate numeric user and group identifiers parsed with strtol...
CVE-2026-82457
su-exec through 0.3 fails to validate numeric user and group identifiers parsed with strtol before assigning to uid_t an
The cohttp package before 6.3.0 for OCaml allows directory traversal.
CVE-2026-82481
The cohttp package before 6.3.0 for OCaml allows directory traversal.