A vulnerability was determined in SourceCodester Pizzafy Ecommerce System 1.0. This vulnerability...
CVE-2026-7297
A vulnerability was determined in SourceCodester Pizzafy Ecommerce System 1.0. This vulnerability affects the function s
#severity:medium
共收录 5624 条相关情报。
← 返回所有主题A security flaw has been discovered in Xuxueli xxl-job up to 3.3.2. Impacted is the function...
CVE-2026-7303
A security flaw has been discovered in Xuxueli xxl-job up to 3.3.2. Impacted is the function logDetailCat of the file xx
OpenTelemetry's Zipkin remote endpoint cache could grow without bounds and increase memory pressure
CVE-2026-41310
### Summary The Zipkin exporter remote endpoint cache accepted unbounded key growth derived from span attributes. In hi
PhpSpreadsheet has XSS via number format code with @ text placeholder bypasses htmlspecialchars in HTML writer
CVE-2026-40296
It was discovered that there is a way to bypass HTML escaping in the HTML writer using custom number format codes. ## T
PhpSpreadsheet has XSS via NumberFormat @ Text Substitution in HTML Writer
CVE-2026-35453
### Summary The HTML Writer in PhpSpreadsheet bypasses `htmlspecialchars()` output escaping when a cell uses a custom nu
FacturaScripts has Insecure Parameter Handling: Unauthorized Modification of Immutable 'nick' Field
CVE-2026-32699
### Summary The application fails to validate the ```nick``` parameter during a ```POST``` request to the ```EditUser```
Fiber's cache middleware default key generator ignores query string, causing response mix-up across distinct query parameters
CVE-2026-30246
### Summary Fiber cache middleware's default key generator uses only `c.Path()` and does not include the query string. A
A security vulnerability has been detected in SourceCodester Pizzafy Ecommerce System 1.0. The...
CVE-2026-7265
A security vulnerability has been detected in SourceCodester Pizzafy Ecommerce System 1.0. The affected element is the f
A vulnerability has been found in SourceCodester Pizzafy Ecommerce System 1.0. This impacts the...
CVE-2026-7268
A vulnerability has been found in SourceCodester Pizzafy Ecommerce System 1.0. This impacts the function save_category o
A vulnerability was detected in SourceCodester Pizzafy Ecommerce System 1.0. The impacted element...
CVE-2026-7266
A vulnerability was detected in SourceCodester Pizzafy Ecommerce System 1.0. The impacted element is the function save_o
A weakness has been identified in SourceCodester Pizzafy Ecommerce System 1.0. Impacted is the...
CVE-2026-7264
A weakness has been identified in SourceCodester Pizzafy Ecommerce System 1.0. Impacted is the function get_cart_items o
A weakness has been identified in BrowserOperator browser-operator-core up to 0.6.0. Affected is...
CVE-2026-7234
A weakness has been identified in BrowserOperator browser-operator-core up to 0.6.0. Affected is the function startsWith
The Woostify plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to,...
CVE-2026-4805
The Woostify plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.5.0 T
In Spring AI, an attacker can bypass conversation isolation and exfiltrate sensitive memory from...
CVE-2026-40966
In Spring AI, an attacker can bypass conversation isolation and exfiltrate sensitive memory from other users’ chat histo
In Spring AI, having access to a shared environment can expose the ONNX model used by the...
CVE-2026-40979
In Spring AI, having access to a shared environment can expose the ONNX model used by the application. Affected version
In KDE KCoreAddons before 6.25, KShell::quoteArgs is intended to safely quote arguments so that...
CVE-2026-41526
In KDE KCoreAddons before 6.25, KShell::quoteArgs is intended to safely quote arguments so that they can be passed to a
Penetration Testing engineers at Amazon have discovered a flaw where the camera system fails to...
CVE-2024-54011
Penetration Testing engineers at Amazon have discovered a flaw where the camera system fails to properly handle data sup
A vulnerability was detected in AgiFlow scaffold-mcp up to 1.0.27. Affected by this issue is some...
CVE-2026-7237
A vulnerability was detected in AgiFlow scaffold-mcp up to 1.0.27. Affected by this issue is some unknown functionality
KDE Dolphin before 25.12.3 allows applications in a Flatpak (or with AppArmor confinement) to...
CVE-2026-41525
KDE Dolphin before 25.12.3 allows applications in a Flatpak (or with AppArmor confinement) to open folders outside of th
A security vulnerability has been detected in ErlichLiu claude-agent-sdk-master up to...
CVE-2026-7235
A security vulnerability has been detected in ErlichLiu claude-agent-sdk-master up to b185aa7ff0d864581257008077b4010fca