An IPv6 packet processing vulnerability in the dataplane of Palo Alto Networks PAN-OS® software...
CVE-2026-0280
An IPv6 packet processing vulnerability in the dataplane of Palo Alto Networks PAN-OS® software enables an unauthenticat
#severity:low
共收录 1585 条相关情报。
← 返回所有主题Multiple cross site scripting vulnerabilities in the User-ID™ Authentication Portal (aka Captive...
CVE-2026-0279
Multiple cross site scripting vulnerabilities in the User-ID™ Authentication Portal (aka Captive Portal) service, Global
A security vulnerability has been detected in YzmCMS up to 7.5. Affected is the function get_url...
CVE-2026-15202
A security vulnerability has been detected in YzmCMS up to 7.5. Affected is the function get_url of the file /yzmphp/yzm
A security vulnerability has been detected in tumf mcp-text-editor up to 1.0.2. This issue...
CVE-2026-15138
A security vulnerability has been detected in tumf mcp-text-editor up to 1.0.2. This issue affects the function _validat
A flaw has been found in davenardella snap7 up to 1.4.3. This affects the function TS7Worker:...
CVE-2026-15105
A flaw has been found in davenardella snap7 up to 1.4.3. This affects the function TS7Worker::PerformFunctionRead of the
BLF file parser in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows possible information...
CVE-2026-15168
BLF file parser in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows possible information disclosure
GitLab has remediated an issue in GitLab EE affecting all versions from 18.2 before 18.11.7, 19.0...
CVE-2026-6352
GitLab has remediated an issue in GitLab EE affecting all versions from 18.2 before 18.11.7, 19.0 before 19.0.4, and 19.
Limited authentication bypass by spoofing vulnerability in Progress MOVEit Transfer (HTTPS module...
CVE-2026-8651
Limited authentication bypass by spoofing vulnerability in Progress MOVEit Transfer (HTTPS module). This issue affects
GitLab has remediated an issue in GitLab EE affecting all versions from 16.10 before 18.11.7, 19...
CVE-2026-13151
GitLab has remediated an issue in GitLab EE affecting all versions from 16.10 before 18.11.7, 19.0 before 19.0.4, and 19
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.5 before 18.11.7,...
CVE-2025-12506
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.5 before 18.11.7, 19.0 before 19.0.4, and
Path equivalence: vulnerability in Progress MOVEit Transfer (File Upload modules). This issue...
CVE-2026-8801
Path equivalence: vulnerability in Progress MOVEit Transfer (File Upload modules). This issue affects MOVEit Transfer:
Incorrect Authorization vulnerability in Progress MOVEit Transfer (Audit User module). This...
CVE-2026-8800
Incorrect Authorization vulnerability in Progress MOVEit Transfer (Audit User module). This issue affects MOVEit Transf
Waku has an Open Redirect via `unstable_redirect` Helper
CVE-2026-49456
## Summary The `unstable_redirect()` helper exported from `waku/router/server` (`packages/waku/src/router/define-router
sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service (resource...
CVE-2026-60000
sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service (resource consumption from excessive au
The public dashboard deletion endpoint does not enforce organization isolation, allowing an Org...
CVE-2026-28378
The public dashboard deletion endpoint does not enforce organization isolation, allowing an Org Admin in one organizatio
rama has Stored XSS in ServeDir HTML directory listing via unescaped file names and URI path
Resolved: https://github.com/plabayo/rama/commit/89ddff578fd78bbebec99482d7030f28c07757a3 ## Summary `plabayo/rama` co
Webauthn: SimpleFakeCredentialGenerator with an empty secret produces predictable fake credentials, weakening username enumeration protection
## Impact `Webauthn\SimpleFakeCredentialGenerator` is the library-provided default implementation of the `FakeCredentia
Better Auth: Stale sessions persist after user deletion across admin, anonymous, and SCIM flows
### Am I affected? Users are affected if all of the following are true: - They configure `secondaryStorage` on `better
netfoil: Attacker controlled data written to logs
### Summary Domain names were written to the log without first being validated to contain allowed characters. ### Impac
netfoil has a resource leak in LRU cache
### Summary When an entry was removed from the LRU cache, a pointer to the removed element was not properly cleaned up.