A flaw was found in FreeIPA. An improper authorization check allows an authenticated host to...
CVE-2026-115221
A flaw was found in FreeIPA. An improper authorization check allows an authenticated host to retrieve and revoke digital
#severity:medium
共收录 5506 条相关情报。
← 返回所有主题A flaw was found in the OpenShift client oc. When extracting container image layers with oc image...
CVE-2026-115424
A flaw was found in the OpenShift client oc. When extracting container image layers with oc image extract, the applicati
Ghidra before 12.2 contains a resource allocation without limits vulnerability in...
CVE-2026-115398
Ghidra before 12.2 contains a resource allocation without limits vulnerability in FileSystemIndexHelper used by TarFileS
No description provided
CVE-2026-95716
No description provided
No description provided
CVE-2026-95719
No description provided
tarfile.tar_filter could be bypassed using crafted link entries, including symlinks with empty or...
CVE-2026-114583
tarfile.tar_filter could be bypassed using crafted link entries, including symlinks with empty or directory-like names,
Vikunja 2.2.0 before 2.7.1 contains an HTML injection vulnerability in CreateConversationalHeader...
CVE-2026-115507
Vikunja 2.2.0 before 2.7.1 contains an HTML injection vulnerability in CreateConversationalHeader in pkg/notifications/m
No description provided
CVE-2026-95718
No description provided
Ghidra before 12.2 contains an improper handling of highly compressed data vulnerability in...
CVE-2026-115503
Ghidra before 12.2 contains an improper handling of highly compressed data vulnerability in ExtensionUtils.unzipToInstal
No description provided
CVE-2026-95720
No description provided
No description provided
CVE-2026-95717
No description provided
No description provided
CVE-2026-95714
No description provided
No description provided
CVE-2026-95715
No description provided
virtualenv: Generated files can follow existing destination links
CVE-2026-113721
## Summary Generated activation files and pyvenv.cfg can follow existing links and write outside the requested environm
Nuxt: Server-side route rules (`redirect`, `headers`, `proxy`, `ssr`) are skipped for case-variant paths when routing is case-insensitive
CVE-2026-114132
## Impact With the default `router.options.sensitive: false`, Nuxt's page router resolves routes case-insensitively, so
Nuxt server islands render `useHeadSafe` input without sanitisation
CVE-2026-114133
## Impact `useHeadSafe` restricts head input to an allowlist of safe tags and attributes. For example, `bodyAttrs` is l
Nuxt: Route rules are matched against the raw request path, so a percent-encoded segment can bypass `appMiddleware` on dynamic and catch-all routes
CVE-2026-114131
### Summary Nuxt compared `routeRules` keys against the raw request path, without decoding percent-encoding, while the
pypdf: Possible long runtimes/large memory usage when retrieving form fields
CVE-2026-113789
### Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory usage and/or long runtim
pypdf: Possible large memory usage when parsing arrays and dictionaries
CVE-2026-113790
### Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires par
pypdf: Possible large memory usage when parsing content streams
CVE-2026-113791
### Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires par