Craft CMS 4.x (>= 4.0.0-RC1, < 4.17.0-beta.1) and 5.x (>= 5.0.0-RC1, < 5.9.0-beta.1) contain...
CVE-2026-56393
Craft CMS 4.x (>= 4.0.0-RC1, = 5.0.0-RC1, < 5.9.0-beta.1) contain multiple stored cross-site scripting vulnerabilities w
#severity:medium
共收录 5559 条相关情报。
← 返回所有主题Craft CMS contains a missing authorization vulnerability in the assets/preview-thumb endpoint. A...
CVE-2026-56384
Craft CMS contains a missing authorization vulnerability in the assets/preview-thumb endpoint. A Control Panel user with
ImageMagick before 7.1.2-15 and 6.9.x before 6.9.13-40 contains an integer overflow in the PSB ...
CVE-2026-56367
ImageMagick before 7.1.2-15 and 6.9.x before 6.9.13-40 contains an integer overflow in the PSB (PSD v2) RLE decoding pat
ImageMagick before 7.1.2-15 (and 6.x before 6.9.13-40) contains a heap out-of-bounds read in the...
CVE-2026-56378
ImageMagick before 7.1.2-15 (and 6.x before 6.9.13-40) contains a heap out-of-bounds read in the PCD coder's DecodeImage
Craft CMS versions >= 5.0.0-RC1, <= 5.9.13 and >= 4.0.0-RC1, <= 4.17.7 contain an authorization...
CVE-2026-56385
Craft CMS versions >= 5.0.0-RC1, = 4.0.0-RC1, <= 4.17.7 contain an authorization bypass in the assets/preview-file endpo
Craft CMS from version 5.0.0-RC1 contains a stored cross-site scripting vulnerability in the User...
CVE-2026-56381
Craft CMS from version 5.0.0-RC1 contains a stored cross-site scripting vulnerability in the User Permissions page where
Cap-go before 12.128.2 contains an information disclosure vulnerability in the OPTIONS /build...
CVE-2026-56316
Cap-go before 12.128.2 contains an information disclosure vulnerability in the OPTIONS /build/upload/:jobId/* endpoint t
Craft CMS contains a stored cross-site scripting (XSS) vulnerability in the editableTable.twig...
CVE-2026-56383
Craft CMS contains a stored cross-site scripting (XSS) vulnerability in the editableTable.twig component when using the
Capgo before 12.128.2 contains an authentication bypass vulnerability in the /build/upload/:jobId...
CVE-2026-56299
Capgo before 12.128.2 contains an authentication bypass vulnerability in the /build/upload/:jobId/* endpoint that allows
Capgo CLI before 12.128.2 contains arbitrary file overwrite vulnerabilities in login and build...
CVE-2026-56236
Capgo CLI before 12.128.2 contains arbitrary file overwrite vulnerabilities in login and build credentials operations th
A vulnerability was determined in BerriAI litellm up to 1.82.2. This affects the function json...
CVE-2026-12795
A vulnerability was determined in BerriAI litellm up to 1.82.2. This affects the function json.dumps of the file litellm
A vulnerability was detected in Montodel House-Rental-Management up to...
CVE-2026-12775
A vulnerability was detected in Montodel House-Rental-Management up to 90010017b81265eb1ef3810268909f7719a33863. Affecte
A weakness has been identified in BerriAI litellm up to 1.59.8. Affected is the function...
CVE-2026-12773
A weakness has been identified in BerriAI litellm up to 1.59.8. Affected is the function UserAPIKeyAuth of the file lite
AVideo TopMenu plugin through version 26.0 contains a stored cross-site scripting vulnerability...
CVE-2026-56347
AVideo TopMenu plugin through version 26.0 contains a stored cross-site scripting vulnerability in menu item rendering d
AVideo through version 27.0 contains a server-side request forgery vulnerability in plugin/Live...
CVE-2026-56342
AVideo through version 27.0 contains a server-side request forgery vulnerability in plugin/Live/test.php that allows aut
AVideo through version 25.0 contains an authentication bypass vulnerability in the decryptMessage...
CVE-2026-56346
AVideo through version 25.0 contains an authentication bypass vulnerability in the decryptMessage.json.php endpoint that
vLLM versions >= 0.6.3 and < 0.9.0 contain multiple regular expression denial of service (ReDoS)...
CVE-2025-71379
vLLM versions >= 0.6.3 and < 0.9.0 contain multiple regular expression denial of service (ReDoS) vulnerabilities. Severa
Cap-go before 12.128.12 contains a broken cursor pagination vulnerability in the /private/devices...
CVE-2026-56307
Cap-go before 12.128.12 contains a broken cursor pagination vulnerability in the /private/devices endpoint on the Cloudf
Capgo before 12.128.2 contains an information disclosure vulnerability in the GET /statistics/app...
CVE-2026-56319
Capgo before 12.128.2 contains an information disclosure vulnerability in the GET /statistics/app/:app_id endpoint that
Flowise before 3.1.2 contains a mass assignment vulnerability in the PUT /api/v1/user endpoint...
CVE-2026-56276
Flowise before 3.1.2 contains a mass assignment vulnerability in the PUT /api/v1/user endpoint that allows authenticated