StrongDM Desktop Application before 23.74.0 (Desktop Client before 53.77.0) on Microsoft Windows...
CVE-2026-4387
StrongDM Desktop Application before 23.74.0 (Desktop Client before 53.77.0) on Microsoft Windows stores authentication s
#severity:low
共收录 1569 条相关情报。
← 返回所有主题In JetBrains IntelliJ IDEA before 2026.1 xXE in the UI Designer form parser was possible
CVE-2026-49383
In JetBrains IntelliJ IDEA before 2026.1 xXE in the UI Designer form parser was possible
In JetBrains TeamCity before 2026.1 open redirect in the SAML plugin was possible
CVE-2026-49380
In JetBrains TeamCity before 2026.1 open redirect in the SAML plugin was possible
In JetBrains TeamCity before 2026.1 stored XSS on the SAML login page was possible
CVE-2026-49381
In JetBrains TeamCity before 2026.1 stored XSS on the SAML login page was possible
In JetBrains YouTrack before 2026.1.13162 information disclosure was possible on fetchApp requests
CVE-2026-49370
In JetBrains YouTrack before 2026.1.13162 information disclosure was possible on fetchApp requests
Authelia Missing Username Canonicalization in Basic Auth (LDAP)
CVE-2026-47203
### Impact **CVSSv4 Baseline Score:** Moderate 6.3 **CVSSv4 Weighted Score:** Low 2.9 The full CVSSv4 Vector for this
Symfony's YAML Parser has a ReDoS via Catastrophic Backtracking in Parser::cleanup() Regex
CVE-2026-45305
### Description `Symfony\Component\Yaml\Parser::cleanup()` strips the optional `%YAML` directive header, leading commen
Symfony's YAML Parser Vulnerable to Exponential Memory Allocation via Recursive Collection-Alias Expansion ("Billion Laughs")
CVE-2026-45304
### Description `Symfony\Component\Yaml\Parser` resolves YAML aliases (`*anchor`) during parsing. Aliases that referenc
Symfony hardened the parser when handling untrusted input
CVE-2026-45133
### Description `Symfony\Component\Yaml\Parser` is the entry point for parsing YAML strings into PHP values via `Yaml::
Symfony Vulnerable to stored XSS in WebProfiler CodeExtension::fileExcerpt() — Unescaped Non-PHP File Rendering
CVE-2026-45072
### Description Symfony's profiler, a development only debug UI, renders source-code excerpts on several pages using Tw
Symfony has XXE (Local File Disclosure) in DomCrawler::addXmlContent() via validateOnParse = true
CVE-2026-45071
### Description `symfony/dom-crawler` provides the `Crawler` class for navigating HTML/XML documents with CSS/XPath sel
When creating an export through the pretix API, API clients are returned an UUID value for their...
CVE-2026-9712
When creating an export through the pretix API, API clients are returned an UUID value for their export job (a long, ra
A vulnerability was determined in QianFox FoxCMS up to 1.2.6. The impacted element is an unknown...
CVE-2026-9608
A vulnerability was determined in QianFox FoxCMS up to 1.2.6. The impacted element is an unknown function of the file /T
A vulnerability was identified in QianFox FoxCMS up to 1.2.6. This affects the function Edit of...
CVE-2026-9609
A vulnerability was identified in QianFox FoxCMS up to 1.2.6. This affects the function Edit of the file Admin.php. The
A vulnerability was found in itsourcecode Courier Management System 1.0. The affected element is...
CVE-2026-9607
A vulnerability was found in itsourcecode Courier Management System 1.0. The affected element is an unknown function of
A vulnerability was detected in JeecgBoot up to 3.9.1. This vulnerability affects unknown code of...
CVE-2026-9604
A vulnerability was detected in JeecgBoot up to 3.9.1. This vulnerability affects unknown code of the component AiragMod
A vulnerability was found in JeecgBoot up to 3.9.1. Impacted is the function user.getUsername of...
CVE-2026-9579
A vulnerability was found in JeecgBoot up to 3.9.1. Impacted is the function user.getUsername of the file /sys/user/logi
A security flaw has been discovered in SourceCodester CET Automated Grading System with AI...
CVE-2026-9582
A security flaw has been discovered in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. Thi
A weakness has been identified in SourceCodester CET Automated Grading System with AI Predictive...
CVE-2026-9583
A weakness has been identified in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. This imp
A vulnerability was identified in JeecgBoot up to 3.9.1. The impacted element is an unknown...
CVE-2026-9581
A vulnerability was identified in JeecgBoot up to 3.9.1. The impacted element is an unknown function of the file /sys/co