Coder before 2.23.0 contains a session expiration bypass vulnerability that allows authenticated...
CVE-2025-71435
Coder before 2.23.0 contains a session expiration bypass vulnerability that allows authenticated users to retain access
#severity:low
共收录 1562 条相关情报。
← 返回所有主题CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` plugin
CVE-2026-62994
### Summary A network DNS client allowed to request AXFR for a CoreDNS zone can trigger a panic when CoreDNS is configu
ckan-mcp-server: DataStore Table UI resource does not validate postMessage origin (in) and posts to targetOrigin "*" (out)
CVE-2026-76894
## Summary The MCP Apps UI resource (an interactive DataStore table rendered in the host's webview/iframe) communicates
swoosh has email-derived URL path injection in Microsoft Graph endpoint
CVE-2026-54893
### Summary `Swoosh.Adapters.MsGraph` builds its Microsoft Graph API request URL by interpolating the sender's email ad
ClickMigrate has Path Traversal in "revision -m" argument
CVE-2026-68549
### Impact A path traversal vulnerability in the `revision` command allowed a crafted migration name supplied via the `-
FreeRDP from 3.30.0 before 3.32.0 contains a heap out-of-bounds read vulnerability in the Windows...
CVE-2026-111376
FreeRDP from 3.30.0 before 3.32.0 contains a heap out-of-bounds read vulnerability in the Windows client's CliprdrStream
A security flaw has been discovered in ImprintLab Medical-SAM-Adapter 0.1.0-alpha/0.1.0. Affected...
CVE-2026-111212
A security flaw has been discovered in ImprintLab Medical-SAM-Adapter 0.1.0-alpha/0.1.0. Affected by this issue is the f
crmeb_java through 3.1 contains an authorization bypass vulnerability that allows authenticated...
CVE-2026-111354
crmeb_java through 3.1 contains an authorization bypass vulnerability that allows authenticated members to read other me
Papermark through 0.22.0 contains a missing authorization vulnerability in the data room viewer...
CVE-2026-111350
Papermark through 0.22.0 contains a missing authorization vulnerability in the data room viewer group API that allows au
metasfresh through 5.175 contains a missing record-level authorization vulnerability in...
CVE-2026-111351
metasfresh through 5.175 contains a missing record-level authorization vulnerability in BoardRestController that allows
Talos Linux: Support bundle does not redact registry credentials
CVE-2026-77564
### Summary When generating a support bundle with `talosctl support` the credentials entered for private registries are
A vulnerability was detected in ggml-org whisper.cpp up to 1.9.4. This affects the function...
CVE-2026-110810
A vulnerability was detected in ggml-org whisper.cpp up to 1.9.4. This affects the function whisper_model_load of the fi
A security vulnerability has been detected in sgl-project SGLang up to 0.5.19. Affected by this...
CVE-2026-110809
A security vulnerability has been detected in sgl-project SGLang up to 0.5.19. Affected by this issue is the function Se
A weakness has been identified in sgl-project SGLang up to 0.5.19. Affected by this vulnerability...
CVE-2026-110807
A weakness has been identified in sgl-project SGLang up to 0.5.19. Affected by this vulnerability is an unknown function
A vulnerability was detected in turboderp ExLlamaV2 up to 0.3.2. Affected is the function STFile...
CVE-2026-110695
A vulnerability was detected in turboderp ExLlamaV2 up to 0.3.2. Affected is the function STFile.get_tensor of the file
A security vulnerability has been detected in Praat up to 7.0.02. Affected is the function...
CVE-2026-110698
A security vulnerability has been detected in Praat up to 7.0.02. Affected is the function whisper_model_load of the fil
A vulnerability has been found in OAID Tengine up to 1.12.0. This vulnerability affects the...
CVE-2026-110694
A vulnerability has been found in OAID Tengine up to 1.12.0. This vulnerability affects the function get_tm_file_model o
A security flaw has been discovered in OpenClaw ClawScan up to 0.1.6. This impacts the function...
CVE-2026-110689
A security flaw has been discovered in OpenClaw ClawScan up to 0.1.6. This impacts the function shouldSkipTargetPath of
A server-side request forgery vulnerability in Palo Alto Networks Checkov by Prisma® Cloud...
CVE-2026-0311
A server-side request forgery vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local unauthenticat
A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables...
CVE-2026-0316
A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticat