ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 incorrectly parses delegate invocations,...
CVE-2026-116140
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 incorrectly parses delegate invocations, which can allow an executa
#severity:medium
共收录 5506 条相关情报。
← 返回所有主题ImageMagick before 7.1.2-33 contains a memory leak vulnerability in the MAT decoder that fails to...
CVE-2026-116152
ImageMagick before 7.1.2-33 contains a memory leak vulnerability in the MAT decoder that fails to release allocated memo
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in the MSL decoder...
CVE-2026-116146
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in the MSL decoder that fails to release all
A vulnerability has been found in mansi-k Restaurant_IMS d7ad49f61ab7cc1ec6eb359ac2b5378bdbde0694...
CVE-2026-115999
A vulnerability has been found in mansi-k Restaurant_IMS d7ad49f61ab7cc1ec6eb359ac2b5378bdbde0694. Affected is the funct
A security flaw has been discovered in Zylon PrivateGPT 1.0.0/1.0.1. This vulnerability affects...
CVE-2026-116000
A security flaw has been discovered in Zylon PrivateGPT 1.0.0/1.0.1. This vulnerability affects the function load_file_f
A vulnerability was detected in Unitree Robotics Unitree Go2 up to 1.1.13/1.1.14.1/1.1.15.1. This...
CVE-2026-115996
A vulnerability was detected in Unitree Robotics Unitree Go2 up to 1.1.13/1.1.14.1/1.1.15.1. This affects the function W
A vulnerability was identified in FaveoSuite Faveo Helpdesk 2.0.3. Affected by this issue is the...
CVE-2026-115973
A vulnerability was identified in FaveoSuite Faveo Helpdesk 2.0.3. Affected by this issue is the function ForgotPassword
A vulnerability has been found in Travisun Opptrix 0.4.0. This impacts an unknown function of the...
CVE-2026-115970
A vulnerability has been found in Travisun Opptrix 0.4.0. This impacts an unknown function of the file /api/system-updat
A flaw has been found in Travisun Opptrix 0.4.0. This affects an unknown function of the file ...
CVE-2026-115969
A flaw has been found in Travisun Opptrix 0.4.0. This affects an unknown function of the file /api/auth/setup of the com
A vulnerability was found in Travisun Opptrix 0.4.0. Affected is the function Buffer.concat of...
CVE-2026-115971
A vulnerability was found in Travisun Opptrix 0.4.0. Affected is the function Buffer.concat of the file /api/channels/we
A vulnerability was determined in FaveoSuite Faveo Helpdesk up to 2.0.3. Affected by this...
CVE-2026-115972
A vulnerability was determined in FaveoSuite Faveo Helpdesk up to 2.0.3. Affected by this vulnerability is the function
Missing Authorization vulnerability in Magepeople inc. WpEvently mage-eventpress allows...
CVE-2026-114192
Missing Authorization vulnerability in Magepeople inc. WpEvently mage-eventpress allows Exploiting Incorrectly Configure
yudao-cloud through 2026.09 contains an insecure direct object reference vulnerability in the...
CVE-2026-116015
yudao-cloud through 2026.09 contains an insecure direct object reference vulnerability in the mall trade module that all
ONEARMY community-platform before 2.165.2 contains an insecure direct object reference...
CVE-2026-116018
ONEARMY community-platform before 2.165.2 contains an insecure direct object reference vulnerability that allows authent
BookStack before 26.09.2 contains an incorrect authorization vulnerability in...
CVE-2026-116020
BookStack before 26.09.2 contains an incorrect authorization vulnerability in AttachmentController that allows authentic
Xiaozhi-esp32-server before 0.9.8 contains an insecure direct object reference vulnerability in...
CVE-2026-116017
Xiaozhi-esp32-server before 0.9.8 contains an insecure direct object reference vulnerability in the manager-api DeviceCo
RosarioSIS before 12.9.1 contains a missing authorization vulnerability that allows authenticated...
CVE-2026-116010
RosarioSIS before 12.9.1 contains a missing authorization vulnerability that allows authenticated teachers to write reco
DaybydayCRM through 2.2.1 contains a missing authorization vulnerability in ProjectsController:...
CVE-2026-116008
DaybydayCRM through 2.2.1 contains a missing authorization vulnerability in ProjectsController::updateAssign() that allo
OpenResty lua-resty-dns before 0.24 contains an improper input validation vulnerability in...
CVE-2026-116013
OpenResty lua-resty-dns before 0.24 contains an improper input validation vulnerability in parse_section() and _decode_n
BOLA Allows Cross-Project Target Tampering in Cervantes version v1.3-beta could allow an...
CVE-2026-115994
BOLA Allows Cross-Project Target Tampering in Cervantes version v1.3-beta could allow an attacker modify or delete targ