A security vulnerability has been detected in SourceCodester eDoc Doctor Appointment System 1.0....
CVE-2026-9603
A security vulnerability has been detected in SourceCodester eDoc Doctor Appointment System 1.0. This affects an unknown
#severity:medium
共收录 5624 条相关情报。
← 返回所有主题A flaw has been found in GNU libredwg up to 0.13.4.8160. This issue affects the function...
CVE-2026-9605
A flaw has been found in GNU libredwg up to 0.13.4.8160. This issue affects the function bit_read_RC of the file bits.c
A vulnerability has been found in itsourcecode Courier Management System 1.0. Impacted is an...
CVE-2026-9606
A vulnerability has been found in itsourcecode Courier Management System 1.0. Impacted is an unknown function of the fil
A security vulnerability has been detected in code-projects Project Management System 1.0....
CVE-2026-9584
A security vulnerability has been detected in code-projects Project Management System 1.0. Affected is an unknown functi
A flaw was found in gnutls. An off-by-one error exists in the PKCS#12 bag element bounds check....
CVE-2026-42015
A flaw was found in gnutls. An off-by-one error exists in the PKCS#12 bag element bounds check. This vulnerability allow
A logic issue was addressed with improved restrictions. This issue is fixed in macOS Tahoe 26. An...
CVE-2025-46307
A logic issue was addressed with improved restrictions. This issue is fixed in macOS Tahoe 26. An app may be able to acc
A logic issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7,...
CVE-2025-43289
A logic issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macO
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS...
CVE-2025-43290
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma
A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS...
CVE-2025-43451
A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS Tahoe 26. An app may be
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS...
CVE-2025-46280
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Tahoe 26. An app may be
LiquidJS's `{% render %}` tag silently bypasses per-render `ownPropertyOnly:true` via `Context.spawn()`
CVE-2026-44646
## Summary `Context.spawn()` in liquidjs creates a child `Context` for the `{% render %}` tag but does not propagate th
LiquidJS has a renderLimit DoS guard bypass via empty `{% for %}` body
CVE-2026-44645
## Summary The `renderLimit` option — documented in `docs/source/tutorials/dos.md` as the mechanism that "mitigates thi
LiquidJS's strip_html filter bypass via newline characters in HTML tags enables XSS
CVE-2026-44644
## Summary The `strip_html` filter in liquidjs is intended to remove HTML tags from a string before rendering, and is w
Yamcs has No Rate Limiting on Authentication Endpoint
CVE-2026-44596
### Summary The authentication endpoint `POST /auth/token` in `yamcs-core` lacks any form of rate limiting, account loc
Yamcs vulnerable to unauthorized user enumeration via IAM API endpoints
CVE-2026-44595
### Summary The IAM API endpoints (`listUsers`, `getUser`, `listGroups`, and `getGroup`) in `yamcs-core` do not enforce
CarrierWave has a denylisted_content_type bypass via Unescaped Regex Metacharacters
CVE-2026-44587
### Summary CarrierWave's content_type_denylist check fails to escape regex metacharacters in string entries, causing th
Kata Containers have VM Escape via virtiofsd Argument Injection through Default-Enabled Pod Annotations
CVE-2026-44210
## Summary Kata Containers ships with a default configuration that allows pod creators to inject arbitrary command-line
Kirby CMS's `pages.access` permission is not checked during rendering of page drafts
CVE-2026-44176
### TL;DR This vulnerability affects all Kirby sites where users of a particular role have no permission to access page
Yamcs Vulnerable to LDAP Injection in LdapAuthModule
CVE-2026-42568
### Summary An LDAP injection vulnerability exists in `org.yamcs.security.LdapAuthModule` when constructing search filt
netty-incubator-codec-ohttp's HPKEContext operations may produce empty byte[] on failures
CVE-2026-41207
HKDF_expand: returns non-NULL on failure. The byte[] is filled with zeros and has no way to distinguish success from fai