mpp vulnerable to Gas Draining with access list
### Details When the server acts as the fee_payer, `mpp` Elixir 0.4.0 copies the client-supplied EIP-2930 access list ve
#severity:medium
共收录 5477 条相关情报。
← 返回所有主题Containerd has image-pull DoS via crafted OCI index graph amplification
CVE-2026-53493
### Impact A vulnerability exists in containerd's image pull handlers where a crafted OCI image index containing deeply
madpsy ka9q_ubersdr before 0.1.58 has a stored cross-site scripting (XSS) vulnerability in the...
CVE-2026-97723
madpsy ka9q_ubersdr before 0.1.58 has a stored cross-site scripting (XSS) vulnerability in the chat message rendering fu
A prototype pollution vulnerability in Software Mansion React Native Worklets before 0.12.2...
CVE-2026-97724
A prototype pollution vulnerability in Software Mansion React Native Worklets before 0.12.2 allows an attacker-controlle
A weakness has been identified in ningzichun student-management-system up to...
CVE-2026-97646
A weakness has been identified in ningzichun student-management-system up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. T
Incomplete property masking in the SANnav logging subsystem permits SNMP authentication and...
CVE-2026-85417
Incomplete property masking in the SANnav logging subsystem permits SNMP authentication and privacy passwords to be reco
A security vulnerability has been detected in ningzichun student-management-system up to...
CVE-2026-97647
A security vulnerability has been detected in ningzichun student-management-system up to 98760f5711cf6dc8b4adca53a9e207c
Secure Folder 1.2 stores files selected for its password-protected vault as unencrypted files in...
CVE-2026-84283
Secure Folder 1.2 stores files selected for its password-protected vault as unencrypted files in the Android shared-stor
The Botslab G980H dash camera firmware contains an out of bounds write vulnerability in its...
CVE-2026-87118
The Botslab G980H dash camera firmware contains an out of bounds write vulnerability in its command processing functiona
The Botslab G980H dash camera firmware does not require authenticated pairing or client binding...
CVE-2026-84403
The Botslab G980H dash camera firmware does not require authenticated pairing or client binding before permitting access
copyparty contains a volume restriction bypass vulnerability in its SFTP front end that allows...
CVE-2026-93353
copyparty contains a volume restriction bypass vulnerability in its SFTP front end that allows authenticated SFTP users
A logic flaw in Java cache key handling object comparison handling could lead to improper...
CVE-2026-14441
A logic flaw in Java cache key handling object comparison handling could lead to improper identifier resolution when pro
A weakness has been identified in songxinjianqwe Chat up to...
CVE-2026-97326
A weakness has been identified in songxinjianqwe Chat up to ac63d25297079eed5e4ba7e88d3b7a032637150d. Affected by this i
A vulnerability was identified in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. Affected is...
CVE-2026-97324
A vulnerability was identified in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. Affected is the function updateDemoO
An information exposure vulnerability in the job scheduling component of SANnav allows sensitive...
CVE-2026-14442
An information exposure vulnerability in the job scheduling component of SANnav allows sensitive credentials to be writt
The Botslab G980H dash camera firmware includes sensitive configuration information, including...
CVE-2026-82716
The Botslab G980H dash camera firmware includes sensitive configuration information, including WiFi credentials, in diag
The Botslab G980H dash camera firmware uses a hard-coded cryptographic key and initialization...
CVE-2026-75558
The Botslab G980H dash camera firmware uses a hard-coded cryptographic key and initialization vector to protect WiFi cre
Krayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that...
CVE-2026-48543
Krayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that allows authenticated attack
Krayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that...
CVE-2026-48540
Krayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that allows authenticated attack
Krayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that...
CVE-2026-48541
Krayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that allows authenticated attack