Astro: Arbitrary CSS injection in Astro View Transitions
CVE-2026-114127
### Summary Astro's server-side View Transition CSS generator did not keep string animation properties within their gen
#severity:low
共收录 1562 条相关情报。
← 返回所有主题Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a CSRF validation bypass in...
CVE-2026-114719
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a CSRF validation bypass in the mark-as-junk actio
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 allows the ImageMagick resource limits to...
CVE-2026-114723
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 allows the ImageMagick resource limits to be bypassed during thum
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 allows the disabled_actions configuration...
CVE-2026-114721
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 allows the disabled_actions configuration setting to be bypassed.
pypdf: Unvalidated JPEG image data loading
CVE-2026-113786
### Impact An attacker who uses this vulnerability can craft a PDF which leads to arbitrary image parsers being called.
A weakness has been identified in Tenstorrent tt-metal up to 0.80.0. The affected element is the...
CVE-2026-113743
A weakness has been identified in Tenstorrent tt-metal up to 0.80.0. The affected element is the function load_hf_state_
Trigger.dev before 4.5.12 contains an authorization bypass vulnerability that allows...
CVE-2026-114071
Trigger.dev before 4.5.12 contains an authorization bypass vulnerability that allows authenticated project members to co
SvelteKit (@sveltejs/kit) before 3.0.0 contains an open redirect vulnerability in enhanced form...
CVE-2026-114060
SvelteKit (@sveltejs/kit) before 3.0.0 contains an open redirect vulnerability in enhanced form actions (use:enhance) on
SvelteKit (@sveltejs/kit) before 3.0.0 contains a cross-site scripting vulnerability in...
CVE-2026-114061
SvelteKit (@sveltejs/kit) before 3.0.0 contains a cross-site scripting vulnerability in prerendered pages because a cach
A flaw has been found in itsourcecode Online Cake Ordering System 1.0. Affected by this...
CVE-2026-113740
A flaw has been found in itsourcecode Online Cake Ordering System 1.0. Affected by this vulnerability is an unknown func
A vulnerability has been found in R6410418 Jackrong-llm-finetuning-guide up to...
CVE-2026-113738
A vulnerability has been found in R6410418 Jackrong-llm-finetuning-guide up to ef2b17f2798cd18cd85375080c35a58397ad0d09.
A flaw has been found in R6410418 Jackrong-llm-finetuning-guide up to...
CVE-2026-113737
A flaw has been found in R6410418 Jackrong-llm-finetuning-guide up to ef2b17f2798cd18cd85375080c35a58397ad0d09. This aff
A vulnerability has been found in itsourcecode Online Cake Ordering System 1.0. Affected by this...
CVE-2026-113741
A vulnerability has been found in itsourcecode Online Cake Ordering System 1.0. Affected by this issue is some unknown f
markdown-it: Quadratic-time denial of service in inline HTML parsing with html enabled
CVE-2026-111766
### Summary With `html: true`, markdown-it takes quadratic time to parse repeated unterminated HTML constructs inside a
AIOHTTP: Cookie from subdomain can remove Host-Only Scope from existing cookies
CVE-2026-111749
### Summary A subdomain can remove the Host-Only flag from an existing cookie to a parent domain. ### Impact A user a
A weakness has been identified in H3C Magic NX15 V100R017. This affects the function...
CVE-2026-112372
A weakness has been identified in H3C Magic NX15 V100R017. This affects the function importprofile of the file /api/uplo
A weakness has been identified in TiBillet Lespass up to 10e87909c5d526dffa6d424c104fc12860740537...
CVE-2026-112358
A weakness has been identified in TiBillet Lespass up to 10e87909c5d526dffa6d424c104fc12860740537. This vulnerability af
AIOHTTP: Secure attribute not enforced for shared cookie
CVE-2026-111063
### Summary The Secure attribute was not being enforced for the shared cookie. ### Impact It may be possible to send
A russh SSH server accepts a publickey authentication whose signature uses a different algorithm than the one named in the request
CVE-2026-111062
### Details In `russh/src/server/encrypted.rs`, `server_read_auth_request_pk` (0.63.3, around lines 880-990): * The re
A vulnerability was identified in diem-project diem up to...
CVE-2026-112041
A vulnerability was identified in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. This vulnerability a