A vulnerability in the Border Gateway Protocol (BGP) enforce-first-as feature of Cisco...
CVE-2026-20171
A vulnerability in the Border Gateway Protocol (BGP) enforce-first-as feature of Cisco Nexus 3000 Series Switc
#severity:medium
共收录 5624 条相关情报。
← 返回所有主题Ledger Bitcoin app versions 2.1.0 and 2.1.1 contain an address derivation vulnerability that...
CVE-2023-7346
Ledger Bitcoin app versions 2.1.0 and 2.1.1 contain an address derivation vulnerability that allows attackers to cause i
The affected Kieback & Peter DDC building controllers are vulnerable to cross-site scripting,...
CVE-2026-4293
The affected Kieback & Peter DDC building controllers are vulnerable to cross-site scripting, enabling JavaScript to be
MISP’s OIDC authentication plugin allowed automatic linking of an OIDC identity to an existing...
CVE-2026-9084
MISP’s OIDC authentication plugin allowed automatic linking of an OIDC identity to an existing local user account based
Allocation of resources without limits or throttling vulnerability in Progress Software MOVEit...
CVE-2026-8488
Allocation of resources without limits or throttling vulnerability in Progress Software MOVEit Automation allows Excessi
A vulnerability in the SSL certificate handling of Cisco ThousandEyes Virtual Appliance could...
CVE-2026-20199
A vulnerability in the SSL certificate handling of Cisco ThousandEyes Virtual Appliance could allow an authenticated, re
Incorrect default permissions vulnerability in Progress Software MOVEit Automation allows...
CVE-2026-8487
Incorrect default permissions vulnerability in Progress Software MOVEit Automation allows Retrieve Embedded Sensitive Da
Allocation of resources without limits or throttling vulnerability in Progress Software MOVEit...
CVE-2026-8486
Allocation of resources without limits or throttling vulnerability in Progress Software MOVEit Automation allows Floodin
Flowise: Cross-Workspace Chatflow Disclosure via chatflows/apikey Endpoint Returns All Unprotected Chatflows
## Summary The `/api/v1/chatflows/apikey/:apikey` endpoint (whitelisted, accessible with API key auth only) returns all
Flowise: Mass Assignment in PUT /api/v1/user Allows Authenticated Users to Override Password Hash and Bypass Password Change Verification
### Summary A Mass Assignment vulnerability in the PUT /api/v1/user endpoint allows authenticated users to directly modi
Flowise: Hardcoded CORS wildcard on TTS endpoint enables cross-origin credential abuse from any webpage
### Summary The TTS generation endpoint sets `Access-Control-Allow-Origin: *` as a hardcoded response header, independe
Uncontrolled Memory Allocation vulnerability in Progress Software MOVEit Automation allows...
CVE-2026-8485
Uncontrolled Memory Allocation vulnerability in Progress Software MOVEit Automation allows Excessive Allocation. This i
The HCL DominoIQ RAG feature is affected by a Broken Access Control vulnerability. Under certain...
CVE-2026-21836
The HCL DominoIQ RAG feature is affected by a Broken Access Control vulnerability. Under certain circumstances, documen
An unbounded resend loop vulnerability exists in the BIND 9 resolver state machine during bad...
CVE-2026-5950
An unbounded resend loop vulnerability exists in the BIND 9 resolver state machine during bad-server handling, enabling
Missing Authorization vulnerability in ADD-ONS.ORG PDF for Elementor Forms + Drag And Drop...
CVE-2026-45443
Missing Authorization vulnerability in ADD-ONS.ORG PDF for Elementor Forms + Drag And Drop Template Builder allows Explo
Microsoft Defender Denial of Service Vulnerability
CVE-2026-45498
Microsoft Defender Denial of Service Vulnerability
Algernon: Auto-refresh SSE event server sets Access-Control-Allow-Origin: *
CVE-2026-46431
### Summary The SSE event server's `Access-Control-Allow-Origin` response header was hardcoded to the wildcard `*` rega
Algernon: Auto-refresh SSE event server binds to all interfaces by default on Linux/macOS
CVE-2026-46430
### Summary The SSE event server bound to `0.0.0.0:5553` on Linux/macOS by default because the platform-dependent host
Setup PHP: GitHub tokens configured by setup-php may be exposed through pinned affected Composer versions
### Impact This affects only workflows that pin an exact affected Composer semver version through setup-php, for example
Setup PHP: Command Injection in Repository-Derived PHP Version Resolution
CVE-2026-46420
### Summary A command injection vulnerability was identified in `shivammathur/setup-php` when the action resolves the P