An improper access control vulnerability exists where an authenticated non-administrative...
CVE-2026-19639
An improper access control vulnerability exists where an authenticated non-administrative application user could potenti
#severity:medium
共收录 5494 条相关情报。
← 返回所有主题A SQL injection vulnerability exists in Security Center that could allow an authenticated...
CVE-2026-19631
A SQL injection vulnerability exists in Security Center that could allow an authenticated administrator to execute arbit
Nozomi Networks Labs identified a CWE-352: Cross-Site Request Forgery (CSRF) vulnerability in the...
CVE-2026-57469
Nozomi Networks Labs identified a CWE-352: Cross-Site Request Forgery (CSRF) vulnerability in the web-based configuratio
Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Improper Deserialization...
CVE-2026-63701
Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Improper Deserialization of Untrusted Data vuln
Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain a Use of Hard-coded...
CVE-2026-63702
Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain a Use of Hard-coded Credentials vulnerability. A l
Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain a Missing Authentication...
CVE-2026-66272
Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain a Missing Authentication for Critical Function vul
Nozomi Networks Labs identified a CWE-22: Improper Limitation of a Pathname to a Restricted...
CVE-2026-57471
Nozomi Networks Labs identified a CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Nozomi Networks Labs identified a CWE-22: Improper Limitation of a Pathname to a Restricted...
CVE-2026-57472
Nozomi Networks Labs identified a CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
A flow has been identified into dnssec.c library, causing an infinite loop to dnsmasq service. An...
CVE-2026-13002
A flow has been identified into dnssec.c library, causing an infinite loop to dnsmasq service. An attacker who controls
dua-cli fails to filter terminal escape sequences when printing marked file paths after exiting...
CVE-2026-73479
dua-cli fails to filter terminal escape sequences when printing marked file paths after exiting the TUI interface. Attac
A vulnerability was detected in Model Context Protocol mcp-rdf-explorer 1.0.0. Affected is the...
CVE-2026-19753
A vulnerability was detected in Model Context Protocol mcp-rdf-explorer 1.0.0. Affected is the function explore_url of t
streama contains an insecure direct object reference vulnerability in ViewingStatusController...
CVE-2026-73039
streama contains an insecure direct object reference vulnerability in ViewingStatusController that allows authenticated
Worksuite SaaS versions prior to 6.0.14 contains a stored cross-site scripting vulnerability in...
CVE-2026-18741
Worksuite SaaS versions prior to 6.0.14 contains a stored cross-site scripting vulnerability in the Asset Management mod
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to execute arbitrary code or cause a...
CVE-2026-18086
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to execute arbitrary code or cause a denial of service due to
gdu fails to strip terminal escape sequences from directory and file names when printing paths...
CVE-2026-73480
gdu fails to strip terminal escape sequences from directory and file names when printing paths after TUI exit. Attackers
IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to forge valid...
CVE-2026-17468
IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to forge valid session tokens due to the use
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to...
CVE-2026-18068
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to a byte-count and eleme
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an...
CVE-2026-17476
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an improper buffer write.
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an...
CVE-2026-18020
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an off-by-one error in bo
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to obtain sensitive information or...
CVE-2026-17438
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to obtain sensitive information or modify data due to improper