ImageMagick before 6.9.13-58 and 7.x before 7.1.2-32 contains a security policy bypass caused by...
CVE-2026-116145
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-32 contains a security policy bypass caused by an incomplete fix for t
#severity:low
共收录 1562 条相关情报。
← 返回所有主题A security vulnerability has been detected in onyx-dot-app Onyx up to 5.0.0. Impacted is an...
CVE-2026-116004
A security vulnerability has been detected in onyx-dot-app Onyx up to 5.0.0. Impacted is an unknown function of the file
A flaw has been found in pig-mesh pig up to 4.1.0. This impacts the function orderItem.getColumn...
CVE-2026-115997
A flaw has been found in pig-mesh pig up to 4.1.0. This impacts the function orderItem.getColumn of the file pig-common/
A vulnerability was detected in phpIPAM up to 1.8.3. Affected by this issue is the function...
CVE-2026-115982
A vulnerability was detected in phpIPAM up to 1.8.3. Affected by this issue is the function create_rack_link of the file
A security vulnerability has been detected in phpIPAM up to 1.8.3. Affected by this vulnerability...
CVE-2026-115981
A security vulnerability has been detected in phpIPAM up to 1.8.3. Affected by this vulnerability is an unknown function
Ghidra before 12.2 contains a numeric truncation vulnerability in PackedDecode::skipAttribute and...
CVE-2026-116012
Ghidra before 12.2 contains a numeric truncation vulnerability in PackedDecode::skipAttribute and skipAttributeRemaining
A flaw has been found in Scada-LTS 2.8.0. Affected by this vulnerability is the function...
CVE-2026-115803
A flaw has been found in Scada-LTS 2.8.0. Affected by this vulnerability is the function HttpServletRequest.getParameter
A weakness has been identified in InternScience InternAgent 1.5.0. This affects the function...
CVE-2026-115802
A weakness has been identified in InternScience InternAgent 1.5.0. This affects the function train of the file tasks/Aut
The GeoDirectory WordPress plugin before 2.8.194 does not correctly verify ownership of listings...
CVE-2026-113674
The GeoDirectory WordPress plugin before 2.8.194 does not correctly verify ownership of listings submitted by logged-ou
A security flaw has been discovered in Kakao khaiii up to 0.4. The impacted element is the...
CVE-2026-115801
A security flaw has been discovered in Kakao khaiii up to 0.4. The impacted element is the function khaiii::nn::Linear::
filelock: ReadWriteLock on Windows acts on SQLite side files another local user places beside its database
CVE-2026-112913
On Windows, `ReadWriteLock` and `AsyncReadWriteLock` (the SQLite-backed reader/writer lock) connect SQLite to the lock d
filelock: On Windows an oplock on a soft lock's marker holds SoftFileLock.acquire() past its timeout and blocks the stale break
CVE-2026-112907
On Windows the soft locks (`SoftFileLock`, `MarkerSoftFileLock`, `SoftFileLease`, their async forms, and a `FileLock` th
virtualenv: Pip seeding with download omits wheel digest verification
CVE-2026-113717
## Summary The pip seeder acquires bundled wheels with download=False and lets pip access the index when --download is
virtualenv: Downloaded wheel selection and caching precede verification
CVE-2026-113714
## Summary Wheel downloads go directly into the reusable wheelhouse, while the verification target is selected from pip
virtualenv: Venv configuration readback can reinterpret path boundaries
CVE-2026-113715
## Summary The venv creator reads the standard library's generated pyvenv.cfg with splitlines() and merges all resultin
Serialize JavaScript: Cross-site scripting (XSS) via unescaped </script at the end of a serialized function body
CVE-2026-115897
### Impact `serialize-javascript` escapes its output so it is safe to embed inside a `` element. Before 7.1.3 that guar
Fallow: A `.*` glob segment let an analyzed repository make Fallow test paths in the parent of the project root
### Impact Fallow expands some globs from the analyzed repository on disk. Before 3.34.0, a segment such as `.*`, `.?`
Fallow: Jest and Vitest `projects` entries let an analyzed repository make Fallow read files outside the project root
CVE-2026-115569
### Impact Fallow reads the Jest and Vitest configs of the repository that it analyzes. A Jest `projects` entry or a Vi
setuptools: Windows path escape via namespace_packages.txt during legacy wheel installation Description
### Summary On Windows, attacker-controlled content in a wheel's `.dist-info/namespace_packages.txt` can cause setuptoo
fast-uri vulnerable to improper path equivalence in relative reference normalization
CVE-2026-110095
### Impact `fast-uri`'s `normalize()` and `serialize()` apply RFC 3986 dot-segment removal (`remove_dot_segments`) to t