mall4j through 4.0 fails to implement authentication controls on the DELETE /prodComm endpoint in...
CVE-2026-102362
mall4j through 4.0 fails to implement authentication controls on the DELETE /prodComm endpoint in ProdCommController. Un
#severity:medium
共收录 5477 条相关情报。
← 返回所有主题ZoneMinder before 1.38.4 fails to apply per-monitor access restrictions in the FramesController...
CVE-2026-102297
ZoneMinder before 1.38.4 fails to apply per-monitor access restrictions in the FramesController index endpoint. Authenti
A security vulnerability has been detected in Netcore POWER13 2.0.240730.162638. This issue...
CVE-2026-101188
A security vulnerability has been detected in Netcore POWER13 2.0.240730.162638. This issue affects the function routerd
Cotonti through 1.0.0 contains a cross-site request forgery vulnerability in admin.users.php that...
CVE-2026-101093
Cotonti through 1.0.0 contains a cross-site request forgery vulnerability in admin.users.php that allows attackers to de
SiYuan before v3.8.4 fails to enforce publish-access checks in the getCurrentAttrViewImages...
CVE-2026-101092
SiYuan before v3.8.4 fails to enforce publish-access checks in the getCurrentAttrViewImages endpoint, allowing publish r
Nodemailer: Process-global DNS cache reuses TLS `servername` across transports, enabling cross-tenant SMTP credential disclosure
### Summary Nodemailer's process-global DNS cache is keyed only by `host`, but each cache entry also stores the caller-
undici vulnerable to Denial of Service via unhandled error in WebSocket permessage-deflate decompression
CVE-2026-85024
## Impact undici's WebSocket client (including Node.js's bundled `globalThis.WebSocket`) crashes the entire Node.js pro
multer vulnerable to Denial of Service via orphaned disk writes on aborted uploads
CVE-2026-88932
### Impact Multer's `diskStorage` can leave complete, orphaned files on disk when a multipart upload is aborted in the
morgan vulnerable to Log Injection via unescaped double quote in quoted log fields
CVE-2026-87859
### Impact Morgan writes attacker-controlled request data to the access log. Its escaping (added in 1.11.0 and 1.12.0)
Wind River VxWorks 7 24.03 through 26.03, a memory leak occurs under specific, non-default...
CVE-2026-102005
Wind River VxWorks 7 24.03 through 26.03, a memory leak occurs under specific, non-default configuration states when pro
In Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the process...
CVE-2026-102006
In Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the process management subsystem fa
Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the IPNET...
CVE-2026-97686
Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the IPNET subsystem failing to properl
Insufficient validation of untrusted input in Codecs in Google Chrome prior to 147.0.7727.55...
CVE-2026-13018
Insufficient validation of untrusted input in Codecs in Google Chrome prior to 147.0.7727.55 allowed a remote attacker t
Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Vehicle Manager (Free) < 6.5...
CVE-2026-101109
Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Vehicle Manager (Free) tag, to be injected into the
Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Book Library (Free) < 6.4.6 -...
CVE-2026-101111
Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Book Library (Free) < 6.4.6 - The public book-detail
Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Real Estate Manager (Free) <...
CVE-2026-100753
Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Real Estate Manager (Free) element to execute in th
jackson-databind: Comparable missing from DefaultBaseTypeLimitingValidator's unsafe base types (incomplete PolymorphicTypeValidator denylist)
CVE-2026-83557
### Summary `DefaultBaseTypeLimitingValidator` — the `PolymorphicTypeValidator` used automatically whenever `@JsonTypeIn
ip-address: Address6.isLinkLocal() recognizes fe80::/64 rather than fe80::/10, allowing SSRF and trust-boundary bypass to on-link hosts
CVE-2026-101913
### Summary `Address6.isLinkLocal()` recognizes `fe80::/64` rather than `fe80::/10`. Link-local unicast is the whole `/
ip-address: no classifier recognizes the NAT64 local-use range 64:ff9b:1::/48, allowing SSRF and trust-boundary bypass
CVE-2026-101910
### Summary No classifier on `Address6` recognizes the NAT64 local-use range `64:ff9b:1::/48` (RFC 8215). `isPrivate()`
jackson-databind: Path Deserialization Missing Scheme Allowlist for FileSystemProvider Resolution
CVE-2026-19032
### Summary A `java.nio.file.Path` field bound from untrusted JSON reaches `JDKFromStringDeserializer.NioPathHelper.des