ApostropheCMS before 4.33.0 allows authentication bypass for REST API page reading, as...
CVE-2026-110904
ApostropheCMS before 4.33.0 allows authentication bypass for REST API page reading, as demonstrated by a /api/v1/@apostr
#severity:medium
共收录 5534 条相关情报。
← 返回所有主题Renovate before 44.61.3 contains a protection mechanism bypass vulnerability that allows...
CVE-2026-110866
Renovate before 44.61.3 contains a protection mechanism bypass vulnerability that allows minimumReleaseAge checks to be
Nodemailer from 3.0.0 before 10.0.13 contains an improper input validation vulnerability in its...
CVE-2026-110870
Nodemailer from 3.0.0 before 10.0.13 contains an improper input validation vulnerability in its address parser that fail
Better Auth @better-auth/drizzle-adapter and better-auth from 1.6.17 before 1.7.7, and @better...
CVE-2026-110861
Better Auth @better-auth/drizzle-adapter and better-auth from 1.6.17 before 1.7.7, and @better-auth/kysely-adapter from
n8n before 2.41.4 and 2.42.x before 2.42.1 contains an authorization bypass in the Agents create...
CVE-2026-110851
n8n before 2.41.4 and 2.42.x before 2.42.1 contains an authorization bypass in the Agents create endpoint, which accepts
n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains an authentication...
CVE-2026-110852
n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains an authentication bypass because dynamic-path
GitPython from 3.1.62 before 3.2.0 contains a symlink-following flaw in Submodule.move(), which...
CVE-2026-110860
GitPython from 3.1.62 before 3.2.0 contains a symlink-following flaw in Submodule.move(), which checks the destination o
n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains a prototype pollution...
CVE-2026-110848
n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains a prototype pollution vulnerability in the AI
n8n before 2.41.4 and 2.42.0 contains an authorization bypass in the agent chat resume endpoint,...
CVE-2026-110841
n8n before 2.41.4 and 2.42.0 contains an authorization bypass in the agent chat resume endpoint, which accepts a run ide
FreeRDP 2.0.0 before 3.32.0, when built with WITH_LAME=ON and WITH_DSP_FFMPEG=OFF, has a heap...
CVE-2026-110837
FreeRDP 2.0.0 before 3.32.0, when built with WITH_LAME=ON and WITH_DSP_FFMPEG=OFF, has a heap-based buffer overflow in f
FreeRDP versions 3.13.0 before 3.32.0 contain a resource retention flaw in...
CVE-2026-110831
FreeRDP versions 3.13.0 before 3.32.0 contain a resource retention flaw in drive_process_irp_create, which registers an
FreeRDP 3.0.0 before 3.32.0 allows HTTP header injection in its proxy because a lone LF in the...
CVE-2026-110835
FreeRDP 3.0.0 before 3.32.0 allows HTTP header injection in its proxy because a lone LF in the target portion of a routi
A weakness has been identified in itsmeravitejak Online-Examination-System up to...
CVE-2026-110696
A weakness has been identified in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e244
A stack-based buffer overflow vulnerability in the log processing functionality of Palo Alto...
CVE-2026-0318
A stack-based buffer overflow vulnerability in the log processing functionality of Palo Alto Networks PAN-OS® software o
A vulnerability was found in cemtan sar2html 4.0.0. The affected element is the function updateDb...
CVE-2026-110670
A vulnerability was found in cemtan sar2html 4.0.0. The affected element is the function updateDb of the file sar2html.p
A vulnerability was determined in OpenSIPS up to 3.6.8/4.0.1. The impacted element is the...
CVE-2026-110679
A vulnerability was determined in OpenSIPS up to 3.6.8/4.0.1. The impacted element is the function rtpproxy_offer/rtppro
A type confusion vulnerability in Palo Alto Networks GlobalProtect™ app on Windows enables a...
CVE-2026-0314
A type confusion vulnerability in Palo Alto Networks GlobalProtect™ app on Windows enables a local user with low privile
A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated...
CVE-2026-0320
A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypas
An improper input handling vulnerability in the GlobalProtect™ gateway of Palo Alto Networks PAN...
CVE-2026-0319
An improper input handling vulnerability in the GlobalProtect™ gateway of Palo Alto Networks PAN-OS software enables an
Path traversal vulnerabilities in Palo Alto Networks Checkov by Prisma® Cloud enable an...
CVE-2026-0312
Path traversal vulnerabilities in Palo Alto Networks Checkov by Prisma® Cloud enable an unauthenticated local user to wr