Nexus Repository 3 did not fully sandbox JEXL expressions used in Content Selectors. An account...
CVE-2026-17595
Nexus Repository 3 did not fully sandbox JEXL expressions used in Content Selectors. An account holding the nexus:select
#severity:medium
共收录 5494 条相关情报。
← 返回所有主题A vulnerability was found in SourceCodester Photo Share Website 1.0. This affects an unknown...
CVE-2026-19211
A vulnerability was found in SourceCodester Photo Share Website 1.0. This affects an unknown function of the file /socia
CodeIgniter: Spoofable forwarded HTTPS headers in IncomingRequest::isSecure()
CVE-2026-63220
### Impact `IncomingRequest::isSecure()` trusted the `X-Forwarded-Proto` and `Front-End-Https` headers from any incoming
Netty: RedisArrayAggregator max-elements failure leaves retained partial aggregate state
CVE-2026-56818
## Summary `RedisArrayAggregator` clears retained partial aggregate state when the `maxNestedArrayDepth` limit is excee
API Platform Core: Relation IRIs are not type-checked: a related resource can be denormalised as the wrong resource type (type confusion)
CVE-2026-54164
## Summary The API Platform serializer's `AbstractItemNormalizer` does not validate the resource type returned when res
SvelteKit: ReDoS (O(n^2)) in content negotiation — unauthenticated DoS via the Accept header
CVE-2026-66062
### Impact SvelteKit is vulnerable to remote CPU-exhaustion DoS attacks via specifically-crafted `Accept` headers. The i
Nuxt dev server discloses project root and workspace UUID via the Chrome DevTools workspace endpoint
### Impact When a Nuxt dev server is bound to a network-reachable interface (for example `nuxt dev --host` for on-devic
go-git: Malicious reference names may modify files outside the reference storage
CVE-2026-71557
### Impact A path traversal issue in `go-git` could allow malicious reference names to access files outside the reposito
GitPython: Arbitrary file read via --pathspec-from-file in IndexFile.remove() and Head.checkout()
## Summary `IndexFile.remove()` and `Head.checkout()` forward `**kwargs` into `git rm` and `git checkout` with no guard
A lack of tenant separation in SuperTokens Inc. SuperTokens Core v6.0.0 to v11.4.0 allows an...
CVE-2026-37171
A lack of tenant separation in SuperTokens Inc. SuperTokens Core v6.0.0 to v11.4.0 allows an authenticated party in one
Dell OpenManage Server Administrator, versions prior to 11.1.0.2, contains a Relative Path...
CVE-2026-56794
Dell OpenManage Server Administrator, versions prior to 11.1.0.2, contains a Relative Path Traversal vulnerability. A lo
DOMPurify: IN_PLACE hook removal leaves a detached subtree executable, causing XSS
### Summary During `IN_PLACE` sanitization, a hook that removes an element can leave that element's detached descendant
Smarty Security stream restriction bypass through stream: resource
CVE-2026-62996
`smarty/smarty` version `5.8.0` can read local files through PHP stream wrappers even when Smarty Security is enabled an
Smarty: Symlink path traversal out of trusted directories
CVE-2026-62992
When Smarty's Security policy is enabled, secure_dir (and the configured template/trusted directories) restrict which lo
AIL Framework contains a stored cross-site scripting vulnerability in the crawler domain view....
CVE-2026-71446
AIL Framework contains a stored cross-site scripting vulnerability in the crawler domain view. Crawled URLs were embedde
AIL Project contains a stored cross-site scripting vulnerability in the translation controls...
CVE-2026-71447
AIL Project contains a stored cross-site scripting vulnerability in the translation controls displayed for chat messages
A maliciously crafted TIF file, when parsed through certain Autodesk products during image import...
CVE-2026-7405
A maliciously crafted TIF file, when parsed through certain Autodesk products during image import, can cause an Out-of-B
Opening a crafted DICOM file containing malicious JPEG-compressed pixel data triggers an attacker...
CVE-2026-17264
Opening a crafted DICOM file containing malicious JPEG-compressed pixel data triggers an attacker-controlled heap out-of
llama.cpp builds b1886 through b7445 contain a null pointer dereference vulnerability in the...
CVE-2026-70639
llama.cpp builds b1886 through b7445 contain a null pointer dereference vulnerability in the LLaMA-Android JNI wrapper w
FFmpeg versions from 3.0 up to, but not including, 9.0 contain an uninitialized heap memory read...
CVE-2026-70630
FFmpeg versions from 3.0 up to, but not including, 9.0 contain an uninitialized heap memory read vulnerability in the na