Consul Community Edition and Consul Enterprise 1.19.1 through 2.0.2 did not enforce the {{session...
CVE-2026-19016
Consul Community Edition and Consul Enterprise 1.19.1 through 2.0.2 did not enforce the {{session:write}} ACL permission
#severity:medium
共收录 5494 条相关情报。
← 返回所有主题A security flaw has been discovered in SourceCodester Simple Doctors Appointment System 1.0. This...
CVE-2026-19231
A security flaw has been discovered in SourceCodester Simple Doctors Appointment System 1.0. This vulnerability affects
Broadcast control frames can disconnect multiple aircraft simultaneously leading to delayed...
CVE-2025-71411
Broadcast control frames can disconnect multiple aircraft simultaneously leading to delayed clearances and air traffic c
Grav CMS's scheduler-webhook plugin contains an authentication bypass in the webhook token check....
CVE-2026-11430
Grav CMS's scheduler-webhook plugin contains an authentication bypass in the webhook token check. When the webhook featu
Consul Community Edition and Consul Enterprise 1.3.0 through 2.0.2 are vulnerable to an...
CVE-2026-19113
Consul Community Edition and Consul Enterprise 1.3.0 through 2.0.2 are vulnerable to an unauthenticated denial of servic
pypdf: Possible large memory usage for large /ToUnicode streams
CVE-2026-71870
### Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory consumption. This requir
pypdf: Possible long runtimes/large memory usage for large CID font width ranges
CVE-2026-71852
### Impact An attacker who uses this vulnerability can craft a PDF which leads to long runtimes and large memory consum
Hono: `memo()` retains SSR output across requests, leading to cross-user data disclosure
CVE-2026-71850
### Summary `memo()` from `hono/jsx` retains the result of a server-side render and reuses it for later renders with co
Hono: Algorithmic Complexity DoS in Language Middleware
CVE-2026-71848
### Summary The `languageDetector` middleware is vulnerable to algorithmic complexity denial of service when processing
The OnCallNotificationActivity in the Datadog Android application is declared android:exported=...
CVE-2026-44964
The OnCallNotificationActivity in the Datadog Android application is declared android:exported="true" in AndroidManifest
BubbleChatActivity in the Datadog Android application is declared android:exported="true" with no...
CVE-2026-47361
BubbleChatActivity in the Datadog Android application is declared android:exported="true" with no permission guard and a
Six Android App Widget configuration activities in the Datadog Android application are declared...
CVE-2026-44965
Six Android App Widget configuration activities in the Datadog Android application are declared android:exported="true"
The launcher activity AppActivity in the Datadog Android application is declared android:exported...
CVE-2026-47363
The launcher activity AppActivity in the Datadog Android application is declared android:exported="true" with launchMode
On every successful login, the Datadog Android application calls FirebaseCrashlytics.setUserId...
CVE-2026-47364
On every successful login, the Datadog Android application calls FirebaseCrashlytics.setUserId with the signed-in user's
The Datadog Android application stores operationally sensitive content in plaintext SQLite...
CVE-2026-47362
The Datadog Android application stores operationally sensitive content in plaintext SQLite databases via Room. Two datab
A vulnerability was determined in SourceCodester Online Clothing Store. Affected by this issue is...
CVE-2026-19229
A vulnerability was determined in SourceCodester Online Clothing Store. Affected by this issue is some unknown functiona
Nexus Repository 3 was found to be vulnerable to stored cross-site scripting (XSS). A user with...
CVE-2026-17596
Nexus Repository 3 was found to be vulnerable to stored cross-site scripting (XSS). A user with the nexus:blobstores:cre
Nexus Repository 3 contains a Server-Side Request Forgery (SSRF) vulnerability in the email...
CVE-2026-17597
Nexus Repository 3 contains a Server-Side Request Forgery (SSRF) vulnerability in the email configuration verification f
Sonatype Nexus Repository 3 did not properly filter internal configuration keys from user...
CVE-2026-17598
Sonatype Nexus Repository 3 did not properly filter internal configuration keys from user-supplied task properties when
Nexus Repository 3 contained an endpoint used to change the administrator account password during...
CVE-2026-17599
Nexus Repository 3 contained an endpoint used to change the administrator account password during initial onboarding. Th