An improper authentication vulnerability in the "social_login.cgi" CGI program in Zyxel WAX650S...
CVE-2026-8508
An improper authentication vulnerability in the "social_login.cgi" CGI program in Zyxel WAX650S firmware versions throug
#severity:medium
共收录 5494 条相关情报。
← 返回所有主题A path traversal flaw was found in WildFly's domain mode implementation. The...
CVE-2026-17614
A path traversal flaw was found in WildFly's domain mode implementation. The LocalFileRepository.getFile() and getCo
A flaw in Node.js allows a spoofed `TypedArray` `byteLength` to trigger a reachable assertion in...
CVE-2026-58045
A flaw in Node.js allows a spoofed `TypedArray` `byteLength` to trigger a reachable assertion in the synchronous `node:z
Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to...
CVE-2026-66317
Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering over a n
Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to...
CVE-2026-66316
Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a ne
Missing authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to...
CVE-2026-66326
Missing authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
Time-of-check time-of-use (toctou) race condition in Microsoft Edge (Chromium-based) allows an...
CVE-2026-66314
Time-of-check time-of-use (toctou) race condition in Microsoft Edge (Chromium-based) allows an unauthorized attacker to
Server-side request forgery (ssrf) in Microsoft Edge (Chromium-based) allows an unauthorized...
CVE-2026-66325
Server-side request forgery (ssrf) in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofin
Buffer over-read in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code...
CVE-2026-66312
Buffer over-read in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network.
Improper control of generation of code ('code injection') in Microsoft Edge (Chromium-based)...
CVE-2026-65804
Improper control of generation of code ('code injection') in Microsoft Edge (Chromium-based) allows an unauthorized atta
Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to...
CVE-2026-66313
Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering locally.
Missing authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to...
CVE-2026-66311
Missing authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering locally.
Camaleon CMS through 2.9.2, fixed in commit 88ab703, contains a missing authorization...
CVE-2026-67616
Camaleon CMS through 2.9.2, fixed in commit 88ab703, contains a missing authorization vulnerability on the drafts endpoi
Microweber CMS through 2.0.20 contains a stored cross-site scripting vulnerability in the content...
CVE-2026-67617
Microweber CMS through 2.0.20 contains a stored cross-site scripting vulnerability in the content tagging system that al
OPNsense before 26.1.9 contains a stored cross-site scripting vulnerability that allows...
CVE-2026-49131
OPNsense before 26.1.9 contains a stored cross-site scripting vulnerability that allows authenticated attackers with fir
Shlink contains a server-side request forgery vulnerability that allows authenticated API key...
CVE-2026-18736
Shlink contains a server-side request forgery vulnerability that allows authenticated API key holders to cause the serve
OPNsense before 26.1.9 contains a stored cross-site scripting vulnerability that allows...
CVE-2026-49132
OPNsense before 26.1.9 contains a stored cross-site scripting vulnerability that allows authenticated attackers to injec
Shlink versions 5.0.0 through 5.1.5 contain a CSV formula injection vulnerability that allows...
CVE-2026-18738
Shlink versions 5.0.0 through 5.1.5 contain a CSV formula injection vulnerability that allows unauthenticated remote att
Improper Neutralization of Input During Web Page Generation (XSS) vulnerability in lud oaskit...
CVE-2026-66296
Improper Neutralization of Input During Web Page Generation (XSS) vulnerability in lud oaskit allows reflected cross-sit
A security vulnerability has been detected in jina-ai reader up to...
CVE-2026-18647
A security vulnerability has been detected in jina-ai reader up to 1574bfd380d249c86c82db4dace0d9c8fe17e2b1. This issue