tokio-postgres: Panic on a `DataRow` with fewer fields than columns allows denial of service
A malicious or compromised server can send a row containing fewer fields than its row description declares columns. Read
#severity:medium
共收录 5482 条相关情报。
← 返回所有主题postgres-protocol: Panic decoding a malformed `hstore` value allows denial of service
A malicious or compromised server can return a binary `hstore` value with an invalid internal length field, causing the
Sakai Profile Image Deletion has an IDOR
CVE-2026-54050
### Summary The Sakai REST API endpoint `DELETE /api/users/{userId}/profile/image` does not verify that the requesting
A flaw was found in the file-pix (ESM) plugin in GIMP. When processing a specially crafted PIX...
CVE-2026-78475
A flaw was found in the file-pix (ESM) plugin in GIMP. When processing a specially crafted PIX image file, the plugin al
Baserow interpolates a user's display name into the rich-text mention markup without HTML...
CVE-2026-76837
Baserow interpolates a user's display name into the rich-text mention markup without HTML encoding. PATCH /api/user/acco
Multiple DrayTek VigorSwitch models contain a directory traversal vulnerability in the...
CVE-2026-71932
Multiple DrayTek VigorSwitch models contain a directory traversal vulnerability in the getSyslogFile function. The vulne
A vulnerability was found in ggml-org llama.cpp bec4772f6. The impacted element is the function...
CVE-2026-78147
A vulnerability was found in ggml-org llama.cpp bec4772f6. The impacted element is the function deserialize_tensor of th
A vulnerability was determined in ggml-org llama.cpp bec4772f6. This affects the function...
CVE-2026-78148
A vulnerability was determined in ggml-org llama.cpp bec4772f6. This affects the function rpc_server::graph_compute of t
A vulnerability was identified in the-momentum open-wearables up to 0.6.2. This impacts the...
CVE-2026-78154
A vulnerability was identified in the-momentum open-wearables up to 0.6.2. This impacts the function redeem_invitation_c
A vulnerability was determined in code-projects Barangay Resident Profiling Management System 1.0...
CVE-2026-78143
A vulnerability was determined in code-projects Barangay Resident Profiling Management System 1.0. Affected is an unknow
justhtml before 1.12.0 (versions <= 1.11.0) contains a mutation cross-site scripting (mXSS)...
CVE-2026-8630
justhtml before 1.12.0 (versions and . When a DOM tree is processed by sanitize_dom() using a custom policy that keeps
justhtml before 3.11.0 contains a cross-site scripting vulnerability where the default sanitizer...
CVE-2026-74793
justhtml before 3.11.0 contains a cross-site scripting vulnerability where the default sanitizer bypasses event handler
justhtml versions 0.9.0 through 1.21.0 contain a cross-site scripting vulnerability in...
CVE-2026-77088
justhtml versions 0.9.0 through 1.21.0 contain a cross-site scripting vulnerability in to_markdown() where inline code s
justhtml versions 1.13.0 and earlier contain a parser-differential / mutation cross-site...
CVE-2026-5751
justhtml versions 1.13.0 and earlier contain a parser-differential / mutation cross-site scripting (mXSS) vulnerability
justhtml versions before 1.13.0 contain a cross-site scripting vulnerability in the to_markdown()...
CVE-2026-5389
justhtml versions before 1.13.0 contain a cross-site scripting vulnerability in the to_markdown() function when serializ
justhtml before 1.17.0 contains multiple security issues in sanitization, serialization, and...
CVE-2026-6827
justhtml before 1.17.0 contains multiple security issues in sanitization, serialization, and programmatic DOM handling.
The WooCommerce Bookings WordPress plugin before 3.9.0 does not perform a capability check on one...
CVE-2026-14853
The WooCommerce Bookings WordPress plugin before 3.9.0 does not perform a capability check on one of its AJAX actions, a
A vulnerability was determined in vas3k TaxHacker up to 0.8.2. Impacted is the function...
CVE-2026-78061
A vulnerability was determined in vas3k TaxHacker up to 0.8.2. Impacted is the function buildImapConfig of the file lib/
A vulnerability was identified in vas3k TaxHacker up to 0.8.2. The affected element is the...
CVE-2026-78062
A vulnerability was identified in vas3k TaxHacker up to 0.8.2. The affected element is the function envSchema.parse of t
Brave Popup Builder (slug: brave-popup-builder) has a broken access control issue in versions...
CVE-2026-77116
Brave Popup Builder (slug: brave-popup-builder) has a broken access control issue in versions through 0.8.5. Any logged-