SolarWinds Database Performance Analyzer was found to be affected by a stored cross-site...
CVE-2026-28322
SolarWinds Database Performance Analyzer was found to be affected by a stored cross-site scripting vulnerability, which
#severity:medium
共收录 5559 条相关情报。
← 返回所有主题Incorrect security UI in Views in Google Chrome prior to 150.0.7871.47 allowed a remote attacker...
CVE-2026-14144
Incorrect security UI in Views in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to
Inappropriate implementation in PreviewTab in Google Chrome on Android prior to 150.0.7871.47...
CVE-2026-14129
Inappropriate implementation in PreviewTab in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker
Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 150...
CVE-2026-14137
Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a re
Type Confusion in Bluetooth in Google Chrome on Windows prior to 150.0.7871.47 allowed an...
CVE-2026-14119
Type Confusion in Bluetooth in Google Chrome on Windows prior to 150.0.7871.47 allowed an attacker on the local network
Inappropriate implementation in Enterprise in Google Chrome prior to 150.0.7871.47 allowed a...
CVE-2026-14112
Inappropriate implementation in Enterprise in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinc
Use after free in SSL in Google Chrome on ChromeOS prior to 150.0.7871.47 allowed a remote...
CVE-2026-14103
Use after free in SSL in Google Chrome on ChromeOS prior to 150.0.7871.47 allowed a remote attacker to obtain potentiall
Uninitialized Use in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to...
CVE-2026-14125
Uninitialized Use in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensi
Insufficient validation of untrusted input in DevTools in Google Chrome on Windows prior to 150.0...
CVE-2026-14117
Insufficient validation of untrusted input in DevTools in Google Chrome on Windows prior to 150.0.7871.47 allowed a remo
Inappropriate implementation in WebAppInstalls in Google Chrome on Windows prior to 150.0.7871.47...
CVE-2026-14138
Inappropriate implementation in WebAppInstalls in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attac
Paymenter has race condition in payWithCredit() that enables credit double-spend
CVE-2026-55219
### Summary The credit payment implementation in `app/Livewire/Invoices/Show.php` executes a pessimistic row lock (`lock
Twig: Sandbox property allowlist bypass via the `column` filter under `SourcePolicyInterface`
CVE-2026-48808
### Description This is a residual bypass of CVE-2026-46635 / GHSA-vcc8-phrv-43wj that only affects sandboxing enabled
Twig: Sandbox `__toString()` policy bypass via `Traversable` in `join` and `replace` filters
CVE-2026-48807
### Description This is a residual bypass of CVE-2026-47732 / GHSA-pr2w-4gpj-cpq4 left after the initial fix for unguar
Twig: Sandbox `__toString()` policy bypass via dynamic mapping keys
CVE-2026-48806
### Description This is a residual bypass of CVE-2026-47732 / GHSA-pr2w-4gpj-cpq4 left after the initial fix for unguar
Sigstore Timestamp Authority has OOM due to unbounded metric label cardinality
CVE-2026-49835
### Impact An unauthenticated remote attacker can trigger unbounded memory growth on the timestamp authority server. T
CefSharp.Common: `FolderSchemeHandlerFactory` path boundary check can expose files outside the configured root folder
CVE-2026-48796
### Summary `FolderSchemeHandlerFactory` was intended to restrict served files to a configured `rootFolder`, but its pa
oban_web missing authorization check on `save-job` event handler
CVE-2026-48592
### Summary `oban_web` 2.12.0 through the current unpatched release exposes a `save-job` LiveView event handler that pe
oban_web: Unbounded range expansion in cron describe causes memory exhaustion
CVE-2026-48593
### Summary `oban_web` 2.12.0 introduced a cron expression parser that expands `-`-separated ranges without validating
Probo has an open redirect bypass via path normalization
CVE-2026-49820
### Impact Probo's `saferedirect` package validates redirect URLs used across authentication flows (OIDC, SAML, session
Fission builder pods auto-mount the fission-builder ServiceAccount token in the user-supplied builder container
CVE-2026-50565
### Summary Fission builder pods were created with `ServiceAccountName: fission-builder` and no `AutomountServiceAccoun