YesWiki before 4.7.0 contains a reflected cross-site scripting vulnerability that allows...
CVE-2026-116823
YesWiki before 4.7.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to in
#severity:medium
共收录 5506 条相关情报。
← 返回所有主题YesWiki before 4.7.0 contains a path traversal vulnerability in BazarListeAction that allows...
CVE-2026-116822
YesWiki before 4.7.0 contains a path traversal vulnerability in BazarListeAction that allows unauthenticated attackers t
OpenPanel before 3.0.0 contains an improper escaping vulnerability in sankey.service.ts that...
CVE-2026-116815
OpenPanel before 3.0.0 contains an improper escaping vulnerability in sankey.service.ts that allows authenticated projec
OpenPanel before 3.0.0 contains a missing authentication vulnerability that allows...
CVE-2026-116817
OpenPanel before 3.0.0 contains a missing authentication vulnerability that allows unauthenticated attackers to access t
OpenPanel before 3.0.0 contains a missing authorization vulnerability in the onboarding.project...
CVE-2026-116806
OpenPanel before 3.0.0 contains a missing authorization vulnerability in the onboarding.project tRPC mutation that allow
OpenPanel before 3.0.0 contains a missing authorization vulnerability that allows unauthenticated...
CVE-2026-116810
OpenPanel before 3.0.0 contains a missing authorization vulnerability that allows unauthenticated attackers to read any
DOMPurify from 3.4.4 before 3.4.17 contains a SAFE_FOR_TEMPLATES bypass that lets attackers...
CVE-2026-116804
DOMPurify from 3.4.4 before 3.4.17 contains a SAFE_FOR_TEMPLATES bypass that lets attackers preserve template expression
OpenPanel before 3.0.0 contains a missing authorization vulnerability in the event.bots tRPC...
CVE-2026-116809
OpenPanel before 3.0.0 contains a missing authorization vulnerability in the event.bots tRPC procedure that allows unaut
OpenPanel before 3.0.0 contains an information disclosure vulnerability that allows read-level...
CVE-2026-116805
OpenPanel before 3.0.0 contains an information disclosure vulnerability that allows read-level project members to obtain
WWBN AVideo before 29.5.0 contains a local file inclusion vulnerability that allows...
CVE-2026-116800
WWBN AVideo before 29.5.0 contains a local file inclusion vulnerability that allows unauthenticated attackers to include
A vulnerability was detected in SourceCodester Online Food Ordering System 1.0. This issue...
CVE-2026-116602
A vulnerability was detected in SourceCodester Online Food Ordering System 1.0. This issue affects the function unlink o
Parse Server before 8.6.105 and 9.0.0 before 9.10.5-alpha.6 does not validate the owning object...
CVE-2026-116801
Parse Server before 8.6.105 and 9.0.0 before 9.10.5-alpha.6 does not validate the owning object reference in $relatedTo
DOMPurify before 3.4.17 contains a cross-site scripting vulnerability that allows attackers to...
CVE-2026-116802
DOMPurify before 3.4.17 contains a cross-site scripting vulnerability that allows attackers to bypass the SMIL attribute
An NTLM coercion vulnerability exists on Windows nodes when the subPath supplied in a pod's...
CVE-2026-76654
An NTLM coercion vulnerability exists on Windows nodes when the subPath supplied in a pod's volumeMounts is set to a sym
A vulnerability has been found in SourceCodester Online Food Ordering System 1.0. The affected...
CVE-2026-116604
A vulnerability has been found in SourceCodester Online Food Ordering System 1.0. The affected element is an unknown fun
DOMPurify before 3.4.17 contains a cross-site scripting vulnerability that allows attackers to...
CVE-2026-116803
DOMPurify before 3.4.17 contains a cross-site scripting vulnerability that allows attackers to keep event handlers armed
A confused deputy attack exists in the StatefulSet controller that allows a user with namespace...
CVE-2026-2270
A confused deputy attack exists in the StatefulSet controller that allows a user with namespace-scoped write permissions
QloApps 1.6.0 through 1.7.0 contains a missing authorization vulnerability in the qlohotelreview...
CVE-2026-116746
QloApps 1.6.0 through 1.7.0 contains a missing authorization vulnerability in the qlohotelreview module's AddReview AJAX
ntop nDPI through 6.0 contains an out-of-bounds read vulnerability in dissect_softether_host_fqdn...
CVE-2026-116744
ntop nDPI through 6.0 contains an out-of-bounds read vulnerability in dissect_softether_host_fqdn() in softether.c that
QloApps through 1.7.0 contains an information disclosure vulnerability in...
CVE-2026-116745
QloApps through 1.7.0 contains an information disclosure vulnerability in OrderConfirmationController::init() that allow