An issue in Intelbras VIP-1230-D-G4 Version V2.800.00IB00C.0.T allows a remote attacker to obtain...
CVE-2026-36438
An issue in Intelbras VIP-1230-D-G4 Version V2.800.00IB00C.0.T allows a remote attacker to obtain sensitive information
#severity:medium
共收录 5624 条相关情报。
← 返回所有主题NetBSD prior to commit ec8451e contains a race condition vulnerability in cryptodev_op() within...
CVE-2026-32848
NetBSD prior to commit ec8451e contains a race condition vulnerability in cryptodev_op() within the opencrypto subsystem
OpenTelemetry eBPF Instrumentation: Redis error text is exported in span status messages
CVE-2026-45679
### Summary OBI exports raw Redis error text as the span status message. Because Redis error replies can contain attack
OpenTelemetry eBPF Instrumentation: Unsafe fastelf parsing allows malformed ELF to crash agent
CVE-2026-45676
### Summary OBI's replacement ELF parser trusts section offsets, counts, and string offsets from the executable file. A
ImageMagick: Policy Bypass in PSD decoder
CVE-2026-45031
Due to a missing check in the PSD decoder it would be possible to bypass the `list-length` resource policy when decoding
Docker: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap
CVE-2026-41568
## Summary A race condition during `docker cp` mount setup allows a malicious container to create empty files or direct
ImageMagick: Out-of-Bounds Read of a single byte in meta encoder
CVE-2026-45358
An of by one in the meta encoder could result in an out of bounds read of a single byte in the meta encoder.
ImageMagick: Out-of-Bounds Read in connected components when the user supplies an invalid keep-top define
CVE-2026-45359
An invalid `connected-components:keep-top` value could result in a heap buffer over-read when performing the connected c
Budibase: CouchDB Reduce Injection via Unsanitized Calculation Parameter in V1 Views API
CVE-2026-45719
# Security Advisory: CouchDB Reduce Injection via Unsanitized Calculation Parameter in V1 Views API **Affected Software
Budibase: Row Action Trigger Bypasses View Row Filter Security Boundary Allowing Action on Out-of-Scope Rows
CVE-2026-45718
## Summary The row action trigger endpoint (`POST /api/tables/:sourceId/actions/:actionId/trigger`) fails to validate t
Sulu: Weak Cryptographical usage for API Key generation and Reset Tokens
CVE-2026-45701
### Impact The password reset tokenand API key generation uses a weak cryptographical hash algorithm. ### Patches Fix
shopper/framework: Race condition on Discount.usage_limit allows silent over-redemption
## Impact `CreateOrderFromCartAction::execute` previously created the `Order` row before checking and incrementing the
brace-expansion: Large numeric range defeats documented `max` DoS protection
CVE-2026-45149
The `max` option was being applied too late: When expanding a single large numeric range like `{1..10000000}`, the sequ
CI4MS Fileeditor allows deletion and rename of critical application files due to missing extension allowlist on destructive operations
CVE-2026-45139
## Summary The Fileeditor module enforces an extension allowlist (`['css','js','html','txt','json','sql','md']`) on con
CI4MS: Stored XSS in Blog Content via Broken `html_purify` Validation Rule
CVE-2026-45138
## Summary The custom `html_purify` validation rule used to sanitize blog post bodies relies on by-reference mutation (
Microsoft DirectX12: .spritefont multiply overflow only in 32-bit builds
### Impact The spritefont reader can be induced to perform a 32-bit overflow multiply that could in theory result in a R
Microsoft DirectX: .spritefont multiply overflow only in 32-bit builds
### Impact The spritefont reader can be induced to perform a 32-bit overflow multiply that could in theory result in a R
eduMFA: Unauthenticated Failcounter Increment on Resolver Tokens via /validate/check
### Impact If the resolver parameter is passed, but the user does not exist, all failcounters of tokens in that resolver
n8n-MCP: Workflow telemetry sanitizer could retain partial values from URL-shaped node parameters
CVE-2026-45582
## Summary In affected versions of n8n-mcp, the workflow telemetry sanitizer could retain partial fragments of URL-shap
A vulnerability was detected in opensourcepos Open Source Point of Sale up to 3.4.2. This issue...
CVE-2026-8802
A vulnerability was detected in opensourcepos Open Source Point of Sale up to 3.4.2. This issue affects the function get