A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project up to...
CVE-2026-100739
A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be.
#severity:medium
共收录 5477 条相关情报。
← 返回所有主题Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via...
CVE-2026-94399
Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-
Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via...
CVE-2026-94397
Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-
Uncontrolled Resource Consumption (CWE-400) in Kibana can lead denial of service via Excessive...
CVE-2026-94400
Uncontrolled Resource Consumption (CWE-400) in Kibana can lead denial of service via Excessive Allocation (CAPEC-130)
Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via...
CVE-2026-94408
Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-
Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via...
CVE-2026-94398
Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-
Missing Authorization (CWE-862) in Kibana can lead to unauthorized deletion of data via...
CVE-2026-78582
Missing Authorization (CWE-862) in Kibana can lead to unauthorized deletion of data via Exploiting Incorrectly Configure
Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via...
CVE-2026-94396
Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-
Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to unauthorized...
CVE-2026-72662
Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to unauthorized disclosure, modification,
Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via...
CVE-2026-82294
Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAP
Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via...
CVE-2026-82300
Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAP
Froxlor through 2.3.10 does not filter sensitive columns from API responses: Domains::get(),...
CVE-2026-100710
Froxlor through 2.3.10 does not filter sensitive columns from API responses: Domains::get(), Domains::listing(), SubDoma
Nodemailer versions 5.0.0 through 10.0.1 use a process-global DNS cache that is keyed only by the...
CVE-2026-100701
Nodemailer versions 5.0.0 through 10.0.1 use a process-global DNS cache that is keyed only by the DNS host, while each c
Nodemailer is a Node.js email-sending library. In versions >= 9.1.0 and < 10.0.9, the address...
CVE-2026-100699
Nodemailer is a Node.js email-sending library. In versions >= 9.1.0 and < 10.0.9, the address parser (src/addressparser)
Hugo is a static site generator. In versions from v0.56.0 through v0.165.x, content files mapped...
CVE-2026-100694
Hugo is a static site generator. In versions from v0.56.0 through v0.165.x, content files mapped to the text/org media t
Hugo versions 0.75.0 through 0.165.x contain a stored cross-site scripting vulnerability: the...
CVE-2026-100691
Hugo versions 0.75.0 through 0.165.x contain a stored cross-site scripting vulnerability: the syntax highlighter does no
Adminer 5.5.1 through 6.0.1 improperly parses the login 'server' string in the host_port()...
CVE-2026-100698
Adminer 5.5.1 through 6.0.1 improperly parses the login 'server' string in the host_port() function in adminer/include/f
Adminer 4.16.0 through 6.0.1 contain a pre-authentication Server-Side Request Forgery (SSRF)...
CVE-2026-100696
Adminer 4.16.0 through 6.0.1 contain a pre-authentication Server-Side Request Forgery (SSRF) vulnerability in the option
Adminer 6.0.0 through 6.0.1, when the official ClickHouse driver plugin (plugins/drivers...
CVE-2026-100697
Adminer 6.0.0 through 6.0.1, when the official ClickHouse driver plugin (plugins/drivers/clickhouse.php, rewritten in 6.
Adminer before 6.0.2 contains a cross-site scripting vulnerability where the CONNECTION_ID()...
CVE-2026-100695
Adminer before 6.0.2 contains a cross-site scripting vulnerability where the CONNECTION_ID() database result is interpol