IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM Diamondback Tape Library and IBM Storage...
CVE-2025-36061
IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM Diamondback Tape Library and IBM Storage TS4500 Library could al
#severity:medium
共收录 5523 条相关情报。
← 返回所有主题IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker...
CVE-2026-19178
IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to gain unauthorized adm
IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 does not invalidate session after a logout...
CVE-2025-36069
IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 does not invalidate session after a logout which could allow an auth
A vulnerability has been found in Dolibarr up to 23.0.2. The impacted element is an unknown...
CVE-2026-112361
A vulnerability has been found in Dolibarr up to 23.0.2. The impacted element is an unknown function of the file htdocs/
russh: Unbounded memory allocation in agent protocol server via crafted constraint records
CVE-2026-111061
### Summary `russh_keys::agent::server::add_key` (`russh/src/keys/agent/server.rs:271-319`) spawns a dedicated tokio ta
Mercury: Stored / DOM Cross-Site Scripting (XSS): mr.Markdown renders untrusted content as raw, unsanitized HTML
CVE-2026-111059
## Summary Mercury turns Jupyter notebooks into shared web apps/dashboards. The `mr.Markdown` widget converts its input
agent-router: MCP session resume does not verify the embedded anti-hijacking subject; default Helm seed makes session IDs forgeable
## Summary The MCP proxy's client-facing session ID embeds the authenticated caller's subject (JWT `sub` claim) specifi
Graphify Fortran extractor: incomplete cpp #include hardening allows arbitrary host-file read/exfiltration when indexing an untrusted repo
## Summary The Fortran extractor's C-preprocessor step (`graphify/extractors/fortran.py`, `_cpp_preprocess`) applies an
A weakness has been identified in calcom cal.com and cal.diy up to 6.2.0. Impacted is the...
CVE-2026-112043
A weakness has been identified in calcom cal.com and cal.diy up to 6.2.0. Impacted is the function createWebhookProcedur
A security vulnerability has been detected in dotnet eShop up to...
CVE-2026-112044
A security vulnerability has been detected in dotnet eShop up to 913acea66708a59595351174cee9b29f37179d29. The affected
The Bootstrap Shortcodes plugin for WordPress before 3.4.6 is vulnerable to stored XSS via the id...
CVE-2026-112111
The Bootstrap Shortcodes plugin for WordPress before 3.4.6 is vulnerable to stored XSS via the id attribute of the [bs_t
A flaw has been found in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d...
CVE-2026-112028
A flaw has been found in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930
A weakness has been identified in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d...
CVE-2026-112025
A weakness has been identified in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61
A vulnerability was detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d...
CVE-2026-112027
A vulnerability was detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f6138
"Gunosy" App contains a vulnerability where sensitive information may be included in the...
CVE-2025-44017
"Gunosy" App contains a vulnerability where sensitive information may be included in the application's outbound communic
A security flaw has been discovered in code-projects Human Resource Integrated System 1.0....
CVE-2025-9743
A security flaw has been discovered in code-projects Human Resource Integrated System 1.0. Impacted is an unknown functi
The TablePress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ...
CVE-2025-9500
The TablePress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘shortcode_debug’ parameter in
The Ocean Extra plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin...
CVE-2025-9499
The Ocean Extra plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's oceanwp_library short
A vulnerability was identified in makeplane plane up to 1.4.2. Impacted is an unknown function of...
CVE-2026-111869
A vulnerability was identified in makeplane plane up to 1.4.2. Impacted is an unknown function of the component API Endp
ip-address before 10.7.4 allows a denial of service (CPU consumption from quadratic complexity,...
CVE-2026-111997
ip-address before 10.7.4 allows a denial of service (CPU consumption from quadratic complexity, and application stall) v