Zitadel before 4.16.2 contains a server-side request forgery vulnerability that allows attackers...
CVE-2026-105214
Zitadel before 4.16.2 contains a server-side request forgery vulnerability that allows attackers to make the server requ
#severity:low
共收录 1562 条相关情报。
← 返回所有主题A weakness has been identified in YzmCMS up to 7.6. Impacted is the function Password of the file...
CVE-2026-105156
A weakness has been identified in YzmCMS up to 7.6. Impacted is the function Password of the file /common/function/syste
A security vulnerability has been detected in RainyGao DocSys up to 2.02.85. The affected element...
CVE-2026-105157
A security vulnerability has been detected in RainyGao DocSys up to 2.02.85. The affected element is the function DocCon
A vulnerability was found in Comsenz Discuz! X5.0-20260801/X5.0-20260820/X5.0-20260910. Affected...
CVE-2026-105146
A vulnerability was found in Comsenz Discuz! X5.0-20260801/X5.0-20260820/X5.0-20260910. Affected by this issue is the fu
A vulnerability was found in Laradock up to 20.4. Impacted is an unknown function of the file...
CVE-2026-105137
A vulnerability was found in Laradock up to 20.4. Impacted is an unknown function of the file workspace/Dockerfile of th
A vulnerability was identified in Omega Solution CoinEx Crypto 2025. This impacts an unknown...
CVE-2026-105097
A vulnerability was identified in Omega Solution CoinEx Crypto 2025. This impacts an unknown function of the file /custo
A vulnerability was determined in Omega Solution CoinEx Crypto 2025. This affects an unknown...
CVE-2026-105096
A vulnerability was determined in Omega Solution CoinEx Crypto 2025. This affects an unknown function of the file /custo
OpenAM before 16.1.3 contains an open redirect vulnerability that allows unauthenticated...
CVE-2026-105118
OpenAM before 16.1.3 contains an open redirect vulnerability that allows unauthenticated attackers to redirect users by
A vulnerability has been found in Linux Mint Xreader up to 4.6.9. Impacted is the function...
CVE-2026-104983
A vulnerability has been found in Linux Mint Xreader up to 4.6.9. Impacted is the function g_file_get_child of the file
A flaw has been found in Linux Mint Xreader up to 4.6.5. This issue affects the function...
CVE-2026-104982
A flaw has been found in Linux Mint Xreader up to 4.6.5. This issue affects the function setup_document_content_list/g_s
The WP Ultimate CSV Importer WordPress plugin before 9.2 does not use a site-specific secret...
CVE-2026-80518
The WP Ultimate CSV Importer WordPress plugin before 9.2 does not use a site-specific secret when deriving the storage
The Pie Register WordPress plugin before 3.8.4.14 does not restrict access to an invitation-code...
CVE-2026-96962
The Pie Register WordPress plugin before 3.8.4.14 does not restrict access to an invitation-code report, allowing unaut
The MetForm WordPress plugin before 4.3.1 does not properly restrict access to a debug file it...
CVE-2026-86834
The MetForm WordPress plugin before 4.3.1 does not properly restrict access to a debug file it writes to the web root o
The WP Ultimate CSV Importer WordPress plugin before 9.2 does not properly validate the file...
CVE-2026-80517
The WP Ultimate CSV Importer WordPress plugin before 9.2 does not properly validate the file types contained in an uplo
ImageMagick before 7.1.2-32 and 6.9.13-57 contains a policy bypass vulnerability in...
CVE-2026-105083
ImageMagick before 7.1.2-32 and 6.9.13-57 contains a policy bypass vulnerability in LoadPolicyCache that silently skips
Denuvo Anti-Tamper through 2026-03-04 allows bypass of a hypervisor presence check via CPUID...
CVE-2026-105051
Denuvo Anti-Tamper through 2026-03-04 allows bypass of a hypervisor presence check via CPUID interception (SimpleSvm.sys
MathWorks Simulink before R2026b, when showing a crafted .slx file, can have blocks that are...
CVE-2026-105043
MathWorks Simulink before R2026b, when showing a crafted .slx file, can have blocks that are never visible in the Simuli
SiYuan: Cross-Site WebSocket Hijacking on the admin-only network proxy endpoint (`/ws/network/proxy`) via explicit `CheckOrigin: true` bypass
CVE-2026-74802
**High** ## Package gomod `github.com/siyuan-note/siyuan/kernel` ## Affected versions 3.7.3 ## Patched versions *(non
Wasmtime: Preemption and traps during bulk operations enable breaking internal VM state
CVE-2026-104855
### Impact Wasmtime's implementation of bulk-data-transfer WebAssembly instructions, such as `memory.copy`, contains a
Trivy before 0.71.0 allows directory traversal in Terraform filesystem functions when they try to...
CVE-2026-104994
Trivy before 0.71.0 allows directory traversal in Terraform filesystem functions when they try to access pathnames above