Trigger.dev before 4.5.5 contains a missing authentication vulnerability in the realtime streams...
CVE-2026-114086
Trigger.dev before 4.5.5 contains a missing authentication vulnerability in the realtime streams POST handler that allow
#severity:medium
共收录 5506 条相关情报。
← 返回所有主题Trigger.dev before 4.5.2 contains a blind server-side request forgery vulnerability that allows...
CVE-2026-114080
Trigger.dev before 4.5.2 contains a blind server-side request forgery vulnerability that allows authenticated project me
Trigger.dev before 4.5.6 contains an improper authorization vulnerability that allows holders of...
CVE-2026-114079
Trigger.dev before 4.5.6 contains an improper authorization vulnerability that allows holders of lower-trust environment
Trigger.dev before 4.5.2 contains a blind server-side request forgery vulnerability that allows...
CVE-2026-114076
Trigger.dev before 4.5.2 contains a blind server-side request forgery vulnerability that allows authenticated tenants to
Trigger.dev before 4.5.6 contains an authorization bypass vulnerability in...
CVE-2026-114077
Trigger.dev before 4.5.6 contains an authorization bypass vulnerability in createDeploymentBackgroundWorkerV4 that resol
Trigger.dev before 4.5.12 contains an authorization bypass vulnerability that allows holders of...
CVE-2026-114075
Trigger.dev before 4.5.12 contains an authorization bypass vulnerability that allows holders of capability-restricted us
The Trigger.dev webapp before 4.5.12 contains a cross-site request forgery vulnerability in its...
CVE-2026-114072
The Trigger.dev webapp before 4.5.12 contains a cross-site request forgery vulnerability in its organization-level Slack
Trigger.dev CLI before 4.5.9 contains an information disclosure vulnerability that exposes...
CVE-2026-114073
Trigger.dev CLI before 4.5.9 contains an information disclosure vulnerability that exposes resolved environment secret v
Trigger.dev before 4.5.10 contains a server-side request forgery vulnerability that allows...
CVE-2026-114074
Trigger.dev before 4.5.10 contains a server-side request forgery vulnerability that allows authenticated project members
Trigger.dev 4.5.0 before 4.6.0 contains an information disclosure vulnerability in the Dashboard...
CVE-2026-114070
Trigger.dev 4.5.0 before 4.6.0 contains an information disclosure vulnerability in the Dashboard Agent input proxy that
Snipe-IT before 8.7.0 contains a server-side request forgery vulnerability in the webhook testing...
CVE-2026-114064
Snipe-IT before 8.7.0 contains a server-side request forgery vulnerability in the webhook testing feature that allows su
SvelteKit before 3.0.0 contains a server-side request forgery vulnerability that allows remote...
CVE-2026-114062
SvelteKit before 3.0.0 contains a server-side request forgery vulnerability that allows remote attackers to reach intern
ArcadeDB from 26.8.1 before 26.10.1 contains an authorization bypass vulnerability that allows...
CVE-2026-114056
ArcadeDB from 26.8.1 before 26.10.1 contains an authorization bypass vulnerability that allows read-only users to modify
ArcadeDB from 26.2.1 before 26.10.1 contains a missing authorization vulnerability in the Bolt...
CVE-2026-114057
ArcadeDB from 26.2.1 before 26.10.1 contains a missing authorization vulnerability in the Bolt protocol handler that all
ArcadeDB from 26.2.1 before 26.10.1 contains a missing authorization vulnerability in the Bolt...
CVE-2026-114058
ArcadeDB from 26.2.1 before 26.10.1 contains a missing authorization vulnerability in the Bolt protocol handler that let
vLLM before 0.31.0 contains a cross-request mask leak in InputBatch.condense() that allows remote...
CVE-2026-114049
vLLM before 0.31.0 contains a cross-request mask leak in InputBatch.condense() that allows remote attackers to constrain
FreeRDP before 3.32.1 on Windows contains a heap out-of-bounds read in...
CVE-2026-114041
FreeRDP before 3.32.1 on Windows contains a heap out-of-bounds read in client_cli_present_gateway_message that passes a
FreeRDP before 3.32.1 contains a heap out-of-bounds read vulnerability in the Android client that...
CVE-2026-114044
FreeRDP before 3.32.1 contains a heap out-of-bounds read vulnerability in the Android client that allows malicious RDP s
WWBN AVideo before 24.0 contains a cross-site request forgery vulnerability in legacy endpoints...
CVE-2026-114048
WWBN AVideo before 24.0 contains a cross-site request forgery vulnerability in legacy endpoints like playlistStatus.php
A flaw was found in device-mapper-multipath. A local user can trigger an out-of-bounds read by...
CVE-2026-114038
A flaw was found in device-mapper-multipath. A local user can trigger an out-of-bounds read by sending a command with a