Wagtail: Identification of documents by SHA1 hash
### Impact By passing specific HTTP headers to the document serve URL endpoint, an attacker was able to determine whethe
#severity:low
共收录 1585 条相关情报。
← 返回所有主题Winter: Stored XSS through Backend List widget image columns
### Impact `Backend\Widgets\Lists::evalImageTypeValue()` interpolated the resolved image URL into a single-quoted `src`
Fleet: ORDER BY column injection on activity list endpoints
### Summary An authenticated user with read access to Activity could influence the `ORDER BY` clause of the activity li
Crash in sharkd in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
CVE-2026-76891
Crash in sharkd in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
Crash in sharkd in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
CVE-2026-76890
Crash in sharkd in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
BUSMASTER file parser abnormal exit in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
CVE-2026-76926
BUSMASTER file parser abnormal exit in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
RDP protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
CVE-2026-76888
RDP protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
Tektronix K12xx file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
CVE-2026-76885
Tektronix K12xx file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
A security flaw has been discovered in TRENDnet TEW-755AP up to 20260702. This affects the...
CVE-2026-76591
A security flaw has been discovered in TRENDnet TEW-755AP up to 20260702. This affects the function log_email_server of
ERF file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
CVE-2026-76884
ERF file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
Crash in the Wireshark dissection engine in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of...
CVE-2026-76887
Crash in the Wireshark dissection engine in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
In Splunk SOAR versions below 8.6.0, a user who holds a role that contains the playbooks:view...
CVE-2026-76368
In Splunk SOAR versions below 8.6.0, a user who holds a role that contains the playbooks:view permission could view meta
In FireAMP versions below 2.1.15, a user who holds a role that can edit, create, or run playbooks...
CVE-2026-76371
In FireAMP versions below 2.1.15, a user who holds a role that can edit, create, or run playbooks in Splunk SOAR could r
In Splunk SOAR versions below 8.6.0, a user who holds the OnPrem Broker role could write files...
CVE-2026-76369
In Splunk SOAR versions below 8.6.0, a user who holds the OnPrem Broker role could write files outside the intended Auto
In Splunk SOAR versions below 8.6.0, a user with the "Administrator" role could use the /rest...
CVE-2026-76361
In Splunk SOAR versions below 8.6.0, a user with the "Administrator" role could use the /rest/support/connectivity/.../c
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds a Splunk...
CVE-2026-76348
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds a Splunk role that contains the
BuildKit has a possible runtime DoS via unbounded group parsing
CVE-2026-61712
### Impact Maliciously crafted base image or build can cause a Denial of Service (DoS) condition. When creating a contai
A security vulnerability has been detected in xianrendzw EasyReport up to 2.0.17.0522_Beta. The...
CVE-2026-75978
A security vulnerability has been detected in xianrendzw EasyReport up to 2.0.17.0522_Beta. The affected element is the
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web...
CVE-2026-73923
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported ver
A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. This...
CVE-2026-75078
A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. This affects an unknown par