A flaw has been found in Faveo Helpdesk up to 2.0.3. This impacts the function FormController:...
CVE-2026-78434
A flaw has been found in Faveo Helpdesk up to 2.0.3. This impacts the function FormController::post_ticket_reply of the
#severity:medium
共收录 5482 条相关情报。
← 返回所有主题Subscriber Broken Access Control in AutomatorWP <= 5.8.3 versions.
CVE-2026-78266
Subscriber Broken Access Control in AutomatorWP <= 5.8.3 versions.
Subscriber Broken Access Control in Style Kits <= 2.6.5 versions.
CVE-2026-27364
Subscriber Broken Access Control in Style Kits <= 2.6.5 versions.
vibeio-http has a DoS vulnerability in HTTP/1.x chunked encoding parser triggered by maliciously crafted chunk lengths
When using the affected versions of the `vibeio-http` crate, an attacker could craft a malicious HTTP/1.x request with a
Cloudreve's remote download file paths can escape the selected destination directory
### Summary Cloudreve trusts file paths returned by the configured remote downloader. A downloader-reported path such a
Cloudreve has Broken Access Control - Revoked Share Access Still Allows Signed File URL Generation via Cached context_hint
## Summary Cloudreve's file-listing responses hand the client a `context_hint` (UUID) that is meant to speed up follow
A vulnerability was identified in HashiCorp Vault and Vault Enterprise (“Vault”) such that an...
CVE-2026-5006
A vulnerability was identified in HashiCorp Vault and Vault Enterprise (“Vault”) such that an authenticated attacker may
A maliciously crafted SVG file, when parsed through Autodesk 3ds Max, can trigger an Uncontrolled...
CVE-2026-16781
A maliciously crafted SVG file, when parsed through Autodesk 3ds Max, can trigger an Uncontrolled Recursion vulnerabilit
Dolibarr 21.0.0 before 24.0.0 contains an authorization bypass vulnerability caused by an...
CVE-2026-77923
Dolibarr 21.0.0 before 24.0.0 contains an authorization bypass vulnerability caused by an inverted boolean condition in
A maliciously crafted SVG file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds...
CVE-2026-16782
A maliciously crafted SVG file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Read vulnerability. A m
The guard checker in Rocq Prover does not recheck the recursive tree representation of an...
CVE-2026-72704
The guard checker in Rocq Prover does not recheck the recursive tree representation of an inductive type parameter after
The Lean 4 kernel does not check that the body of an opaque declaration is closed. environment:...
CVE-2026-72711
The Lean 4 kernel does not check that the body of an opaque declaration is closed. environment::add_opaque omits the che
The guard checker in Rocq Prover does not follow recursive calls made through a fixpoint's own...
CVE-2026-72705
The guard checker in Rocq Prover does not follow recursive calls made through a fixpoint's own arguments. A fixpoint may
Rocq Prover does not restore the universe graph's copy of the universe checking flag when a...
CVE-2026-72714
Rocq Prover does not restore the universe graph's copy of the universe checking flag when a module that locally disabled
The guard checker in Rocq Prover treats a parameter of a nested mutual fixpoint as uniform...
CVE-2026-72703
The guard checker in Rocq Prover treats a parameter of a nested mutual fixpoint as uniform without examining calls betwe
Dell Client BIOS contains an Improper Link Resolution Before File Access ('Link Following')...
CVE-2026-63693
Dell Client BIOS contains an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privile
Print Assumptions does not report that a definition was produced while universe checking was...
CVE-2020-37268
Print Assumptions does not report that a definition was produced while universe checking was disabled when that definiti
Dolibarr before 24.0.0 contains a reflected cross-site scripting vulnerability in the extra...
CVE-2026-71503
Dolibarr before 24.0.0 contains a reflected cross-site scripting vulnerability in the extra fields administration templa
Gorilla WebSocket Uses Cryptographically Weak PRNG for WebSocket Mask Key
gorilla/websocket used `math/rand` (cryptographically weak pseudo-random number generator) to generate WebSocket frame m
django CMS: Page cache ignores plugin-declared Vary headers (disclosure & poisoning)
CVE-2026-54625
### Summary The CMS page cache key ignores the request headers that plugins declare via `get_vary_cache_on()`. The heade