GNU Wget through 1.25.0, fixed in commit dd692d9, contains a heap buffer overflow vulnerability...
CVE-2026-58472
GNU Wget through 1.25.0, fixed in commit dd692d9, contains a heap buffer overflow vulnerability in the html_quote_string
#severity:medium
共收录 5559 条相关情报。
← 返回所有主题An improper access check allows users to display a list of modules in the frontend.
CVE-2026-48956
An improper access check allows users to display a list of modules in the frontend.
An improper access check allows unauthorized users to access com_privacy datasets.
CVE-2026-48957
An improper access check allows unauthorized users to access com_privacy datasets.
An improper access check allows unauthorized users to create custom fields via webservices...
CVE-2026-48958
An improper access check allows unauthorized users to create custom fields via webservices endpoints.
An improper access check allows unauthorized users to access workflow stage and transition...
CVE-2026-48955
An improper access check allows unauthorized users to access workflow stage and transition information.
An unauthenticated remote disclosure vulnerability has been identified in HPE Networking Instant...
CVE-2026-44877
An unauthenticated remote disclosure vulnerability has been identified in HPE Networking Instant On 1830, 1930, and 1960
Lack of escaping leads to an XSS vulnerability in the generic image output layout.
CVE-2026-48953
Lack of escaping leads to an XSS vulnerability in the generic image output layout.
Improper validation leads to a generic XSS vector in the language override feature.
CVE-2026-48954
Improper validation leads to a generic XSS vector in the language override feature.
Lack of escaping leads to an XSS vulnerability in the update list view of com_installer.
CVE-2026-48952
Lack of escaping leads to an XSS vulnerability in the update list view of com_installer.
Lack of escaping leads to XSS vulnerabilities in modalreturn layouts of various components.
CVE-2026-48951
Lack of escaping leads to XSS vulnerabilities in modalreturn layouts of various components.
An improper access check allows user to download vcard exports of com_contact contacts that are...
CVE-2026-48948
An improper access check allows user to download vcard exports of com_contact contacts that are inaccessible.
An improper access check allows privileged users to overwrite media files without editing...
CVE-2026-48947
An improper access check allows privileged users to overwrite media files without editing permissions.
Lack of escaping leads to an XSS vulnerability in the file management view of com_templates.
CVE-2026-48950
Lack of escaping leads to an XSS vulnerability in the file management view of com_templates.
Lack of validation leads to an XSS vulnerability in the MFA management views.
CVE-2026-48949
Lack of validation leads to an XSS vulnerability in the MFA management views.
@better-auth/oauth-provider may provide access tokens for unauthorized audiences via unbound resource indicators
### Am I affected? Users are affected if all of the following hold: - Their application depends on `@better-auth/oaut
netfoil has a domain name filter bypass via multiple questions
### Summary Potential bypass of domain name filter by crafting a DNS request with multiple questions, with the first que
@aborruso/ckan-mcp-server: SSRF via base_url allows access to internal networks (Potential fix bypass of CVE-2026-33060)
CVE-2026-53509
### Summary A known vulnerability CVE-2026-33060 indicated tools including ckan_package_search and sparql_query that acc
A flaw was found in Jastow. Jastow is vulnerable to Cross-Site Scripting (XSS) attack. If using a...
CVE-2025-12799
A flaw was found in Jastow. Jastow is vulnerable to Cross-Site Scripting (XSS) attack. If using a set of combined config
A flaw was found in 389-ds-base where the LDBM backend attribute encryption uses a hardcoded...
CVE-2026-14969
A flaw was found in 389-ds-base where the LDBM backend attribute encryption uses a hardcoded static initialization vecto
Open WebUI has Blind Server Side Request Forgery in its Image Edit Functionality
CVE-2026-34225
### Summary There is a blind server side request forgery in the functionality that allows editing an image via a prompt.