A vulnerability in the XML handling component of AOS-8 DHCP services could allow an...
CVE-2026-23822
A vulnerability in the XML handling component of AOS-8 DHCP services could allow an unauthenticated remote attacker to t
#severity:medium
共收录 5624 条相关情报。
← 返回所有主题OpenClaude MCP OAuth Callback: State Check Bypass via error Param Leads to DoS
CVE-2026-42073
# OAuth State Validation Bypass via `error` Parameter Causes Local Server DoS in MCP Auth Callback --- ## Description
Decimal: Unbounded exponent in `Decimal.new` enables unauthenticated DoS
CVE-2026-32686
Summary `decimal` doesn't bound the exponent on parsed input, so something like `"1e10000000"` is parsed fine but then e
protobuf.js: Denial of service from crafted field names in generated code
CVE-2026-44294
## Summary protobufjs generated JavaScript property accessors from schema-controlled field and oneof names. Certain con
protobuf.js: Prototype injection in generated message constructors
CVE-2026-44292
## Summary protobufjs generated message constructors copied enumerable properties from a provided properties object wit
protobufjs has overlong UTF-8 decoding
CVE-2026-44288
## Summary protobufjs includes a minimal UTF-8 decoder used in non-Node and fallback decoding paths. The affected decod
SAP TAF_APPLAUNCHER within Business Server Pages allows an unauthenticated attacker to craft...
CVE-2026-40137
SAP TAF_APPLAUNCHER within Business Server Pages allows an unauthenticated attacker to craft malicious links that, when
Due to insufficient authorization checks in the SAP Incentive and Commission Management...
CVE-2026-40134
Due to insufficient authorization checks in the SAP Incentive and Commission Management application, authenticated users
Due to missing authorization check in SAP Strategic Enterprise Management (Scorecard Wizard in...
CVE-2026-40132
Due to missing authorization check in SAP Strategic Enterprise Management (Scorecard Wizard in Business Server Pages), a
Due to missing authorization check in SAP S/4HANA Condition Maintenance, an authenticated...
CVE-2026-40133
Due to missing authorization check in SAP S/4HANA Condition Maintenance, an authenticated attacker could gain unauthoriz
Due to a Code Injection vulnerability in SAP Application Server ABAP for SAP NetWeaver and ABAP...
CVE-2026-40129
Due to a Code Injection vulnerability in SAP Application Server ABAP for SAP NetWeaver and ABAP Platform, an authenticat
An OS Command Injection vulnerability exists in the SAP NetWeaver Application Server for ABAP and...
CVE-2026-40135
An OS Command Injection vulnerability exists in the SAP NetWeaver Application Server for ABAP and ABAP Platform that all
SAP Financial Consolidation allows an authenticated attacker to disconnect other users by...
CVE-2026-40136
SAP Financial Consolidation allows an authenticated attacker to disconnect other users by terminating their sessions tem
Due to a reflected cross-site scripting (XSS) vulnerability in SAP NetWeaver Application Server...
CVE-2026-27682
Due to a reflected cross-site scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (Applications based
Due to insufficient CSRF protection in SAP BusinessObjects Business Intelligence Platform ,an...
CVE-2026-0502
Due to insufficient CSRF protection in SAP BusinessObjects Business Intelligence Platform ,an authenticated user could b
SAPUI5 (Search UI) allows an unauthenticated attacker to manipulate specific URL parameters on...
CVE-2026-34258
SAPUI5 (Search UI) allows an unauthenticated attacker to manipulate specific URL parameters on the Search UI to include
barebox prior to version 2026.04.0 contains out-of-bounds read vulnerabilities in ext4 extent...
CVE-2026-34961
barebox prior to version 2026.04.0 contains out-of-bounds read vulnerabilities in ext4 extent parsing due to missing val
barebox version prior to 2026.04.0 contains a denial-of-service vulnerability in ext4 directory...
CVE-2026-34962
barebox version prior to 2026.04.0 contains a denial-of-service vulnerability in ext4 directory parsing in fs/ext4/ext4_
Gryph Agents Payload Filter Fails to Strip Tool Payload for Sensitive Content
CVE-2026-45046
Gryph implements logging levels that determine what content is logged to a local sqlite database. The README incorrectly
local-deep-research is Vulnerable to HTML Injection via Unescaped User Input in PDF Export (`pdf_service.py:_markdown_to_html`)
CVE-2026-43979
## Summary `PDFService._markdown_to_html()` constructs an HTML document by interpolating user-controlled values — speci