NVIDIA TensorRT-LLM contains a vulnerability in the OpenAI-compatible inference API, where an...
CVE-2026-24271
NVIDIA TensorRT-LLM contains a vulnerability in the OpenAI-compatible inference API, where an attacker could cause alloc
#severity:medium
共收录 5559 条相关情报。
← 返回所有主题NVIDIA TensorRT-LLM for Linux contains a vulnerability where an attacker could cause improper...
CVE-2026-24226
NVIDIA TensorRT-LLM for Linux contains a vulnerability where an attacker could cause improper control of code generation
n8n-MCP: Incorrect authorization can expose default-scope workflow version backups in multi-tenant HTTP mode
CVE-2026-55608
## Summary In multi-tenant HTTP mode (`ENABLE_MULTI_TENANT=true`), an authenticated tenant could, under certain conditi
nebula-mesh: Web UI host creation ignores configured enrollment token TTL and mints 24-hour bearer enrollment tokens
CVE-2026-55513
### Summary The `nebula-mgmt` Web UI host-creation path ignores both the server-wide `enrollment_token_ttl` security set
nebula-mesh: Unauthenticated OIDC login endpoint allocates unbounded in-memory state entries without rate limiting
CVE-2026-55512
### Summary When OIDC is enabled, `GET /ui/oidc/login` is reachable without authentication and is registered outside the
Umbraco.AI discloses sensitive application configuration values
### Impact Under certain configurations, a user with elevated privileges may be able to cause sensitive application conf
Auth0 Symfony SDK Accepted Bearer Tokens via URL Query Parameter
CVE-2026-50157
### Description Applications built with the Auth0 Symphony SDK, using the Authorizer security authenticator to protect H
Hoverfly: Denial of Service via Goroutine Leak in Remote Post-Serve Actions
CVE-2026-50018
### Summary: Remote post-serve actions use `http.DefaultClient` without any timeout configuration. When the remote endp
K3s: ZIP Archive Path Traversal Vulnerability in etcd Snapshot Decompression
CVE-2026-54250
#### Summary A path traversal vulnerability exists in K3s's etcd snapshot decompression functionality. Zip files contai
SAP CRM WebClient UI allows an attacker to inject and execute malicious scripts in the context of...
CVE-2026-44768
SAP CRM WebClient UI allows an attacker to inject and execute malicious scripts in the context of the application due to
The FoodBook Lite - Online Food Ordering System plugin for WordPress is vulnerable to Missing...
CVE-2026-11802
The FoodBook Lite - Online Food Ordering System plugin for WordPress is vulnerable to Missing Authorization in all versi
A flaw has been found in poco-ai poco-claw up to 0.5.4. Affected is the function...
CVE-2026-15622
A flaw has been found in poco-ai poco-claw up to 0.5.4. Affected is the function get_workspace_file of the file executor
The News Kit Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site...
CVE-2026-11390
The News Kit Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Site Logo Title
The WP Customer Area plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ...
CVE-2026-7640
The WP Customer Area plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'type' attribute of the `
SAP S/4HANA Draft operation does not perform necessary authorization checks for an authenticated...
CVE-2026-44771
SAP S/4HANA Draft operation does not perform necessary authorization checks for an authenticated user, a restricted user
SAP S/4HANA application Project Management (PPM-PRO) allows an attacker with high privileges to...
CVE-2026-44769
SAP S/4HANA application Project Management (PPM-PRO) allows an attacker with high privileges to execute crafted database
setThemeRoot() failed to enforce the sap-allowed-theme-origins allowlist. An attacker-controlled...
CVE-2026-44767
setThemeRoot() failed to enforce the sap-allowed-theme-origins allowlist. An attacker-controlled absolute cross-origin U
SAP Create Single Payment does not perform necessary authorization checks for an authenticated...
CVE-2026-44770
SAP Create Single Payment does not perform necessary authorization checks for an authenticated user, a restricted user c
SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject malicious scripts...
CVE-2026-44759
SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject malicious scripts into a URL parameter. The
Due to a Cross-Site Scripting (XSS) vulnerability, applications based on Business Server Pages...
CVE-2026-44760
Due to a Cross-Site Scripting (XSS) vulnerability, applications based on Business Server Pages framework in SAP NetWeave