Diffusers through 0.39.0, fixed in commit cee298c, contains a path traversal vulnerability in the...
CVE-2026-65920
Diffusers through 0.39.0, fixed in commit cee298c, contains a path traversal vulnerability in the _get_checkpoint_shard_
#severity:medium
共收录 5514 条相关情报。
← 返回所有主题Joomla Extension - phoca.cz - Reflected XSS vulnerability in Phoca Guestbook 1.0.0-6.1.0 -...
CVE-2026-65762
Joomla Extension - phoca.cz - Reflected XSS vulnerability in Phoca Guestbook 1.0.0-6.1.0 - Improper validation of user i
Void through 1.3.4 contains a path traversal vulnerability in the AI agent file-reading tools...
CVE-2026-65698
Void through 1.3.4 contains a path traversal vulnerability in the AI agent file-reading tools that allows network-adjace
Overseerr through 1.35.0 contains an authorization bypass through user-controlled key...
CVE-2026-65696
Overseerr through 1.35.0 contains an authorization bypass through user-controlled key vulnerability in the push subscrip
A flaw was found in gdk-pixbuf. When parsing a specially crafted ICO file with pixel values that...
CVE-2026-16768
A flaw was found in gdk-pixbuf. When parsing a specially crafted ICO file with pixel values that exceed the defined pale
Fathom Lite through 1.3.1 contains a stored cross-site scripting vulnerability in the analytics...
CVE-2026-65697
Fathom Lite through 1.3.1 contains a stored cross-site scripting vulnerability in the analytics collection endpoint that
GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the Call Home...
CVE-2026-48535
GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the Call Home proxy server configurati
GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the IMAP Server...
CVE-2026-48534
GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the IMAP Server configuration that all
GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the File...
CVE-2026-48532
GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the File History Retention Policy conf
GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the default...
CVE-2026-48538
GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the default import settings configurat
GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the File...
CVE-2026-48537
GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the File Archive Assistant configurati
GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the...
CVE-2026-48539
GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the MailInsights scheduled report conf
GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the General...
CVE-2026-48536
GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the General Settings SMTP configuratio
Improper handling of insufficient permissions or privileges vulnerability in Tridium Niagara...
CVE-2026-11804
Improper handling of insufficient permissions or privileges vulnerability in Tridium Niagara Framework on Windows, Linux
pypdf: Possible long runtimes for repeated malformed cross-reference entries
CVE-2026-59937
### Impact An attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires cross-re
pypdf: Possible large memory usage for wrong image dimensions
CVE-2026-59938
### Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires loa
Auth.js: OAuth state, nonce, and PKCE check cookies are not bound to the provider that created them
## Summary Auth.js stores the OAuth/OIDC anti-CSRF checks (`state`, `nonce`, and the PKCE verifier) in global cookies t
The alertmanager templates test endpoint (/api/alertmanager/grafana/config/api/v1/templates/test)...
CVE-2026-21723
The alertmanager templates test endpoint (/api/alertmanager/grafana/config/api/v1/templates/test) can execute templates
A security flaw has been discovered in boazsegev facil.io up to 0.7.58. This affects the function...
CVE-2026-16653
A security flaw has been discovered in boazsegev facil.io up to 0.7.58. This affects the function http_sendfile2 of the
A flaw has been found in boazsegev facil.io up to 0.7.4. Affected is the function...
CVE-2026-16632
A flaw has been found in boazsegev facil.io up to 0.7.4. Affected is the function websocket_on_protocol_error in the lib