An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper...
CVE-2026-33803
An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolve
#severity:medium
共收录 5559 条相关情报。
← 返回所有主题A Missing Authorization vulnerability in the CLI of Juniper Networks Junos OS on EX Series allows...
CVE-2026-33802
A Missing Authorization vulnerability in the CLI of Juniper Networks Junos OS on EX Series allows a local, authenticated
GoBGP confederation validation panics on empty AS_PATH attribute
CVE-2026-49838
Found through variant analysis based on `CVE-2026-41643` ## Summary GoBGP accepts a zero-length AS_PATH during UPDATE d
GoBGP: BGP OPEN capability parser may read capability values outside declared CapLen boundaries
CVE-2026-49837
### Summary GoBGP contains a BGP OPEN capability parsing issue where several concrete capability decoders may parse
psd-tools vulnerable to arbitrary file write via smart-object filename
CVE-2026-49836
# psd-tools: arbitrary file write/read via smart-object path traversal ## Summary In `psd-tools` (all releases exposin
sigstore-go has a multi-log threshold bypass via single compromised log
CVE-2026-49834
### Impact _What kind of vulnerability is it? Who is impacted?_ A verifier configured with WithTransparencyLog(N>1) or
Rattler vulnerable to package cache path traversal via conda package build string
CVE-2026-53956
`rattler_cache` and `py-rattler` were vulnerable to package-cache path traversal when handling package metadata from con
OpenRun: Redirect URL validation bypass using //host paths leads to Open Redirect
CVE-2026-55252
### Summary The restrictions on redirect URLs in `openrun` can be bypassed by attackers, leading to open redirect attack
mint: Content-Length header accepts non-RFC "+" sign prefix
CVE-2026-49753
### Summary Mint's HTTP/1 client accepts `Content-Length` header values with a leading `+` sign (e.g. `+0`, `+123`), wh
An improper certificate validation vulnerability in the Prisma® Access Agent for iOS enables an...
CVE-2026-0277
An improper certificate validation vulnerability in the Prisma® Access Agent for iOS enables an attacker to perform a ma
Bagisto before 2.4.4 contains a stored cross-site scripting vulnerability via client-side...
CVE-2026-60120
Bagisto before 2.4.4 contains a stored cross-site scripting vulnerability via client-side template injection that allows
An Out-of-bounds Write vulnerability in the SNMP daemon (snmpd) of Juniper Networks Junos OS and...
CVE-2026-33799
An Out-of-bounds Write vulnerability in the SNMP daemon (snmpd) of Juniper Networks Junos OS and Junos OS Evolved allows
A weakness has been identified in D-link DIR-823G 1.0.2B05_20181207. Affected by this...
CVE-2026-15270
A weakness has been identified in D-link DIR-823G 1.0.2B05_20181207. Affected by this vulnerability is an unknown functi
Multiple protection mechanism failures in the Prisma Access Agent Data Loss Prevention (DLP)...
CVE-2026-0278
Multiple protection mechanism failures in the Prisma Access Agent Data Loss Prevention (DLP) component for Windows allow
An authentication bypass vulnerability in Large Scale VPN ( LSVPN) functionality of Palo Alto...
CVE-2026-0283
An authentication bypass vulnerability in Large Scale VPN ( LSVPN) functionality of Palo Alto Networks PAN-OS software a
A command injection vulnerability in the management plane of Palo Alto Networks PAN-OS® software...
CVE-2026-0286
A command injection vulnerability in the management plane of Palo Alto Networks PAN-OS® software enables an authenticate
An XML injection vulnerability in the Large Scale VPN (LSVPN) functionality of Palo Alto Networks...
CVE-2026-0284
An XML injection vulnerability in the Large Scale VPN (LSVPN) functionality of Palo Alto Networks PAN-OS® software enabl
Multiple denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an...
CVE-2026-0287
Multiple denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthenticated attacker with
A server-side request forgery (SSRF) vulnerability in Palo Alto Networks PAN-OS software enables...
CVE-2026-0285
A server-side request forgery (SSRF) vulnerability in Palo Alto Networks PAN-OS software enables an authenticated admini
pypdf: Possible infinite loop when processing threads/articles in writer
CVE-2026-54651
### Impact An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires mergi