Use after free in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had...
CVE-2026-91747
Use after free in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the rendere
#severity:low
共收录 1576 条相关情报。
← 返回所有主题Nezha: OAuth2 redirect_uri Host header injection regression when dashboard_host is empty
## Summary Nezha v2.2.3 regresses the GHSA-9rc6-8cjv-rcvx host header injection fix for deployments where the new `dash
Forgejo before 16.0.4 allows use of restricted API tokens for unintended access to the "allow...
CVE-2026-89151
Forgejo before 16.0.4 allows use of restricted API tokens for unintended access to the "allow maintainer edit" feature.
Flextype CMS versions 0.9.9 through 1.0.0-alpha.3 fail to HTML-escape plugin directory names in...
CVE-2026-89145
Flextype CMS versions 0.9.9 through 1.0.0-alpha.3 fail to HTML-escape plugin directory names in the dependency error pag
libcharon in strongSwan 4.1.2 through 6.0.7 has a missing release of memory after its effective...
CVE-2026-78127
libcharon in strongSwan 4.1.2 through 6.0.7 has a missing release of memory after its effective lifetime in the IKE mess
strongSwan 4.2.0 through 6.0.7 has a missing release of memory after its effective lifetime in...
CVE-2026-78131
strongSwan 4.2.0 through 6.0.7 has a missing release of memory after its effective lifetime in the x509 plugin's attribu
strongSwan 5.0.2 through 6.0.7 allows PKCS#7 certificate enumeration in the openssl plugin that...
CVE-2026-78124
strongSwan 5.0.2 through 6.0.7 allows PKCS#7 certificate enumeration in the openssl plugin that leads to a lack of relea
rclone: http backend forwards custom/auth headers to a different host on redirect
CVE-2026-88013
## Vulnerability Details **File**: `backend/http/http.go` **Lines**: 285 (client construction — no `CheckRedirect`), 50
multer vulnerable to file size limit bypass via async fileFilter race condition
CVE-2026-77063
### Impact When `multer` is configured with an asynchronous `fileFilter`, the `limits.fileSize` limit can be bypassed.
A security vulnerability has been detected in vgmstream up to r2117. Impacted is the function...
CVE-2026-86515
A security vulnerability has been detected in vgmstream up to r2117. Impacted is the function add_entry of the file src/
A weakness has been identified in vgmstream up to r2117. This issue affects the function sscanf...
CVE-2026-86514
A weakness has been identified in vgmstream up to r2117. This issue affects the function sscanf of the file src/meta/txt
A vulnerability was identified in java-json-tools json-patch up to 1.13. This affects the...
CVE-2026-86512
A vulnerability was identified in java-json-tools json-patch up to 1.13. This affects the function CopyOperation.apply/M
Exposed IOCTL with Insufficient Access Control in Armoury Crate driver allows a local user to add...
CVE-2026-16003
Exposed IOCTL with Insufficient Access Control in Armoury Crate driver allows a local user to add an arbitrary process i
SAP S/4HANA Finance (Advanced Payment Management) does not perform sufficient Cross-Site Request...
CVE-2026-76961
SAP S/4HANA Finance (Advanced Payment Management) does not perform sufficient Cross-Site Request Forgery protection on c
SAP S/4HANA Finance (Advanced Payment Management) does not perform sufficient Cross-Site Request...
CVE-2026-76960
SAP S/4HANA Finance (Advanced Payment Management) does not perform sufficient Cross-Site Request Forgery protection on c
SAP Process Integration (SOAP Adapter) allows a privileged user to send specially crafted...
CVE-2026-58234
SAP Process Integration (SOAP Adapter) allows a privileged user to send specially crafted requests containing deeply nes
In JetBrains IntelliJ IDEA before 2026.2.2 opening an untrusted project could trigger SSRF via...
CVE-2026-86503
In JetBrains IntelliJ IDEA before 2026.2.2 opening an untrusted project could trigger SSRF via Kubernetes spec-source UR
In JetBrains IntelliJ IDEA before 2026.2.2 terminal command input could be written to idea.log
CVE-2026-86501
In JetBrains IntelliJ IDEA before 2026.2.2 terminal command input could be written to idea.log
In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust check leaked project metadata to...
CVE-2026-86505
In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust check leaked project metadata to JetBrains Marketplace
In JetBrains YouTrack before 2026.2.18634 the generic VCS webhook handler failed open when its...
CVE-2026-86486
In JetBrains YouTrack before 2026.2.18634 the generic VCS webhook handler failed open when its secret was blank