A flaw was found in the keycloak-services component of Keycloak. This issue is an incomplete fix...
CVE-2026-16103
A flaw was found in the keycloak-services component of Keycloak. This issue is an incomplete fix for CVE-2026-9798, wher
#severity:medium
共收录 5559 条相关情报。
← 返回所有主题A flaw was found in the default-groups REST endpoint and realm representation of Keycloak. This...
CVE-2026-16108
A flaw was found in the default-groups REST endpoint and realm representation of Keycloak. This component is responsible
HCL DevOps Loop is affected by a Cross-Origin Resource Sharing (CORS) misconfiguration. Improper...
CVE-2026-21761
HCL DevOps Loop is affected by a Cross-Origin Resource Sharing (CORS) misconfiguration. Improper CORS configuration may
Keycloak provides a mechanism called Client Policies to enforce security requirements on clients,...
CVE-2026-16093
Keycloak provides a mechanism called Client Policies to enforce security requirements on clients, such as requiring them
HCL DevOps Loop is affected by an Unauthorized Access to Admin Functionality (Forced Browsing)...
CVE-2026-21760
HCL DevOps Loop is affected by an Unauthorized Access to Admin Functionality (Forced Browsing) vulnerability. Improper a
Authorization bypass through User-Controlled key vulnerability in Gis Informatics Engineering...
CVE-2026-11763
Authorization bypass through User-Controlled key vulnerability in Gis Informatics Engineering Consulting Laboratory R&D
Skipper: Unbounded Request Body Read in Admission Webhook Causes Memory Exhaustion DoS
CVE-2026-54247
## Summary The Kubernetes admission webhook handler reads the entire request body using `io.ReadAll(r.Body)` without an
vLLM: Speech-to-text upload size limit is enforced after full UploadFile read
CVE-2026-55646
## Summary Current-head vLLM documents `VLLM_MAX_AUDIO_CLIP_FILESIZE_MB` as the maximum audio file size accepted by the
vLLM: Processing differential in multi-channel audio downmixing enables hidden-input/moderation bypass for audio models
CVE-2026-34760
## Issue Description Librosa defaults to using `numpy.mean` for mono downmixing (`to_mono`), while the international sta
Grav before 2.0.4 contains a regular expression denial of service (ReDoS) vulnerability in the...
CVE-2026-62237
Grav before 2.0.4 contains a regular expression denial of service (ReDoS) vulnerability in the regex_replace filter and
OpenClaw 2026.2.25 before 2026.5.26 allow a lower-trust caller or configured input path to bypass...
CVE-2026-62220
OpenClaw 2026.2.25 before 2026.5.26 allow a lower-trust caller or configured input path to bypass non-browser rate limit
OpenClaw 2026.4.14 before 2026.5.26 contain a server-side request forgery vulnerability in...
CVE-2026-62227
OpenClaw 2026.4.14 before 2026.5.26 contain a server-side request forgery vulnerability in browser snapshot routes that
OpenClaw 2026.3.28 before 2026.5.19 contain an authorization bypass vulnerability in the browser...
CVE-2026-62226
OpenClaw 2026.3.28 before 2026.5.19 contain an authorization bypass vulnerability in the browser act route that fails to
OpenClaw 2026.2.12 before 2026.5.26 contain an authorization bypass vulnerability in the hooks...
CVE-2026-62219
OpenClaw 2026.2.12 before 2026.5.26 contain an authorization bypass vulnerability in the hooks allowedAgentIds validatio
OpenClaw versions before 2026.6.1 contain a credential redaction bypass vulnerability in the...
CVE-2026-62211
OpenClaw versions before 2026.6.1 contain a credential redaction bypass vulnerability in the trajectory export feature t
OpenClaw versions before 2026.5.27 contain a token leakage vulnerability in MS Teams outbound...
CVE-2026-62213
OpenClaw versions before 2026.5.27 contain a token leakage vulnerability in MS Teams outbound requests that allows lower
OpenClaw before 2026.5.28 contains a race condition in the MS Teams safeFetch DNS rebinding check...
CVE-2026-62212
OpenClaw before 2026.5.28 contains a race condition in the MS Teams safeFetch DNS rebinding check. When the affected fea
OpenClaw versions before 2026.6.5 contain an authentication bypass vulnerability in HTTP Canvas...
CVE-2026-62215
OpenClaw versions before 2026.6.5 contain an authentication bypass vulnerability in HTTP Canvas responses that allows lo
OpenClaw versions before 2026.5.28 Bot Framework contains an improper input validation...
CVE-2026-62214
OpenClaw versions before 2026.5.28 Bot Framework contains an improper input validation vulnerability that allows lower-t
OpenClaw versions before 2026.6.1 contain a denial of service vulnerability where remote media...
CVE-2026-62210
OpenClaw versions before 2026.6.1 contain a denial of service vulnerability where remote media URLs can trigger slow-rea