A flaw was found in Eye of GNOME (eog). A heap-based buffer overflow exists in the PNG metadata...
CVE-2026-107651
A flaw was found in Eye of GNOME (eog). A heap-based buffer overflow exists in the PNG metadata reader due to improper s
#severity:medium
共收录 5534 条相关情报。
← 返回所有主题IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to obtain...
CVE-2026-84891
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to obtain sensitive information due to u
Jivejdon from commit e0306088 through commit ee67a65e lacks rate limiting on the unauthenticated ...
CVE-2026-107830
Jivejdon from commit e0306088 through commit ee67a65e lacks rate limiting on the unauthenticated /account/smsVRAction en
Jivejdon through 5.0 contains a stored cross-site scripting vulnerability that allows...
CVE-2026-107800
Jivejdon through 5.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject
Jivejdon through 5.0 contains an authentication bypass vulnerability that allows unauthenticated...
CVE-2026-107828
Jivejdon through 5.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to access Wei
IBM Guardium Data Protection 12.2.2 could allow a remote attacker to conduct a man-in-the-middle...
CVE-2026-84032
IBM Guardium Data Protection 12.2.2 could allow a remote attacker to conduct a man-in-the-middle attack due to improper
Jivejdon through 5.0 contains a cross-site request forgery vulnerability that allows remote...
CVE-2026-107831
Jivejdon through 5.0 contains a cross-site request forgery vulnerability that allows remote attackers to perform state-c
Jivejdon from commit 5489372d through commit ee67a65e contains a reflected cross-site scripting...
CVE-2026-107796
Jivejdon from commit 5489372d through commit ee67a65e contains a reflected cross-site scripting vulnerability in applica
Jivejdon through 5.0 contains a stored cross-site scripting vulnerability that allows...
CVE-2026-107799
Jivejdon through 5.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject
jivejdon from commit 595d8d22 through commit ee67a65e contains a stored cross-site scripting...
CVE-2026-107798
jivejdon from commit 595d8d22 through commit ee67a65e contains a stored cross-site scripting vulnerability in the defaul
Jivejdon from commit d58a36b0 through commit ee67a65e contains a missing authorization...
CVE-2026-107792
Jivejdon from commit d58a36b0 through commit ee67a65e contains a missing authorization vulnerability in UpdateThreadToFo
Jivejdon through 5.0 contains a stored cross-site scripting vulnerability that allows...
CVE-2026-107801
Jivejdon through 5.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to execute
Jivejdon through 5.0 contains a reflected cross-site scripting vulnerability in application...
CVE-2026-107797
Jivejdon through 5.0 contains a reflected cross-site scripting vulnerability in application/message/postThread.jsp that
Jivejdon through 5.0 contains an authorization bypass vulnerability in SubscriptionServiceImp...
CVE-2026-107793
Jivejdon through 5.0 contains an authorization bypass vulnerability in SubscriptionServiceImp.deleteSubscription that al
Satel Netco Design versions prior to v2.1.7 contains a relative path traversal vulnerability in...
CVE-2026-105275
Satel Netco Design versions prior to v2.1.7 contains a relative path traversal vulnerability in its data import function
Jivejdon through 5.0 contains a sql injection vulnerability in AccountDaoSql.getAccountByNameLike...
CVE-2025-71428
Jivejdon through 5.0 contains a sql injection vulnerability in AccountDaoSql.getAccountByNameLike() that allows authenti
fast-jwt: Verifier cache accepts expired JWTs without iat.
CVE-2026-107719
### Summary `cacheSet` only derives its `exp` cache deadline inside `hasIat` (`src/verifier.js:127-140`). JWT `iat` is o
Banks: Symlink traversal and arbitrary file disclosure/overwrite in DirectoryPromptRegistry
CVE-2026-107716
### Summary In `banks.registries.DirectoryPromptRegistry`, prompt file paths and the index file (`index.json`) do not re
Banks: User-controlled prompt input can be parsed as privileged chat messages
CVE-2026-107717
## Summary Banks' `Prompt.chat_messages()` method parses every rendered output line as a potential `ChatMessage` JSON
Indico: Incomplete Server-Side Request Forgery (SSRF) check
CVE-2026-107394
### Impact Indico makes outgoing requests to user-provides URLs in various places. This is mostly intentional and part o