NXP MQX Classic before 5.0 contains an out-of-bounds write vulnerability in the RTCS UDP recvfrom...
CVE-2017-20283
NXP MQX Classic before 5.0 contains an out-of-bounds write vulnerability in the RTCS UDP recvfrom() implementation. Impr
#severity:medium
共收录 5534 条相关情报。
← 返回所有主题The WSO2 Identity Server fails to enforce a default expiry time for SMS One-Time Passwords (OTPs)...
CVE-2024-8122
The WSO2 Identity Server fails to enforce a default expiry time for SMS One-Time Passwords (OTPs) used in multi-factor a
Vault's PKI secrets engine ACME server did not restrict certificate identities that ACME...
CVE-2026-105818
Vault's PKI secrets engine ACME server did not restrict certificate identities that ACME challenges do not validate when
The Aurora Heatmap plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url...
CVE-2026-94154
The Aurora Heatmap plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter in all vers
The LatePoint - Appointment Booking & Reservation plugin for WordPress is vulnerable to Insecure...
CVE-2026-17538
The LatePoint - Appointment Booking & Reservation plugin for WordPress is vulnerable to Insecure Direct Object Reference
Vault's ACL policy cache allowed namespace traversal when policy names contained path traversal...
CVE-2026-105820
Vault's ACL policy cache allowed namespace traversal when policy names contained path traversal constructs. This may all
In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, and Splunk Secure...
CVE-2026-76280
In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, and Splunk Secure Gateway versions below 3.10.1
In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user who does not hold...
CVE-2026-76275
In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user who does not hold the "admin" or "power"
In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user that holds a role...
CVE-2026-76279
In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user that holds a role with the run_collect c
In Splunk MCP Server versions below 1.2.1, Splunk MCP Server could send the Splunk platform...
CVE-2026-76286
In Splunk MCP Server versions below 1.2.1, Splunk MCP Server could send the Splunk platform authentication token of a us
In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user that holds a role...
CVE-2026-76277
In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user that holds a role with the edit_user cap
Ghost : Stored XSS via SVG Files in Content Imports
CVE-2026-105644
### Impact SVG images included in content imports were stored without sanitization. An attacker who convinced an Admini
Ghost: Regular Expression Denial of Service in External Media Inliner
CVE-2026-105645
### Impact A crafted request to the external media inliner could cause excessive CPU usage, making the Ghost server unr
Ghost: Regular Expression Denial of Service in Content Import
CVE-2026-105646
### Impact A crafted content import file could cause excessive CPU usage, making the Ghost server unresponsive. Exploit
RabbitMQ: JSONReader in the default JSON-RPC mapper never terminates on truncated input, causing DoS
CVE-2026-106121
## Summary `com.rabbitmq.tools.json.JSONReader.read()` never returns when its input ends inside a quoted string or a `/
Docling has SSRF guard bypass in remote resource fetching (DNS rebinding / multi-record resolution; no IP validation in HTML render mode)
CVE-2026-105743
### Summary When remote fetching is enabled (`enable_remote_fetch=True`, together with `fetch_images=True` or HTML `ren
Docling: Crafted DoclingDocument JSON embeds local image files into converted output
CVE-2026-105748
### Summary docling accepts serialized `DoclingDocument` JSON as an input format (`InputFormat.JSON_DOCLING`, enabled b
Docling: Unbounded table rowspan/colspan in HTML, JATS, ODS and BoxNote backends causes CPU/memory exhaustion
CVE-2026-105749
### Summary The HTML, JATS, ODS (OpenDocument spreadsheet) and BoxNote backends accept table `rowspan` / `colspan` valu
Docling imports plugin entry points before the allow_external_plugins check
CVE-2026-105745
### Summary `allow_external_plugins=False` (the default, and the CLI default) is meant to restrict docling to its own m
Langflow : Cross-user flow access and vertex execution via deprecated /api/v1/build/{flow_id}/vertices endpoints
CVE-2026-105698
### Summary Before **Langflow 1.10.1**, two deprecated but still-routed endpoints in the chat API did not check that th