A flaw was found in the Ansible Automation Platform automation-controller. The unauthenticated...
CVE-2026-84717
A flaw was found in the Ansible Automation Platform automation-controller. The unauthenticated Bitbucket Data Center web
#severity:medium
共收录 5477 条相关情报。
← 返回所有主题A flaw was found in the automation-controller notification subsystem. Although...
CVE-2026-84713
A flaw was found in the automation-controller notification subsystem. Although NotificationTemplate.no
A flaw was found in the automation-controller API. The unauthenticated health...
CVE-2026-84712
A flaw was found in the automation-controller API. The unauthenticated health-check endpoint /api/v2/p
Authorization Bypass Through User-Controlled Key vulnerability in YITH YITH WooCommerce Request A...
CVE-2026-95602
Authorization Bypass Through User-Controlled Key vulnerability in YITH YITH WooCommerce Request A Quote allows Exploitin
An out-of-bounds heap read flaw was found in GIMP's TIM image loader. When a user opens a crafted...
CVE-2026-96545
An out-of-bounds heap read flaw was found in GIMP's TIM image loader. When a user opens a crafted 4bpp TIM image that ca
Mesop: Unauthenticated ANSI Escape Sequence Injection in CSP Reporting Endpoint
CVE-2026-93421
### Summary The `/__csp__` endpoint accepts unauthenticated JSON reports and logs user-controlled values directly to st
Sulu: JCR-SQL2 injection via `categories` query parameter (unauthenticated)
CVE-2026-92692
### Impact An unauthenticated JCR-SQL2 injection exists in the Smart Content category filter of the 2.x content query b
JLine: ReDoS in Nano Editor Regex Search Mode
CVE-2026-77421
### Summary When regex search mode is enabled in the JLine3 `nano` editor, the user-supplied search term is compiled di
9router: Kiro region injection allows authenticated SSRF with Authorization header forwarding
CVE-2026-56678
### Summary The Kiro API-key validation endpoint builds an upstream URL using a user-controlled `region` value. By supp
JLine: ReDoS via `HISTORY_IGNORE` Configuration Variable
CVE-2026-77420
### Summary The JLine3 `HISTORY_IGNORE` variable is converted into a Java regular expression with only partial escaping
Solspace Freeform: Limited Twig template injection via submitted field values
CVE-2026-73858
### Summary A limited server-side Twig template injection issue was identified in Solspace Freeform for Craft CMS. In a
A security vulnerability has been detected in iFlytek astron-agent up to 1.0.6. Affected by this...
CVE-2026-95930
A security vulnerability has been detected in iFlytek astron-agent up to 1.0.6. Affected by this vulnerability is the fu
A weakness has been identified in iFlytek astron-agent up to 1.0.7. Affected is an unknown...
CVE-2026-95929
A weakness has been identified in iFlytek astron-agent up to 1.0.7. Affected is an unknown function of the file console/
A vulnerability was identified in SourceCodester Online Reviewer Management System 1.0. This...
CVE-2026-95927
A vulnerability was identified in SourceCodester Online Reviewer Management System 1.0. This affects an unknown function
Ghidra before 12.1.4 fails to validate the TYPE_COL byte in OptionsDB.createUnregisteredOption(),...
CVE-2026-96273
Ghidra before 12.1.4 fails to validate the TYPE_COL byte in OptionsDB.createUnregisteredOption(), causing an ArrayIndexO
A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. The...
CVE-2026-95926
A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. The impacted element is an unkno
A security flaw has been discovered in JusticeRage Manalyze 1.0.0. Impacted is the function PE:...
CVE-2026-95958
A security flaw has been discovered in JusticeRage Manalyze 1.0.0. Impacted is the function PE::_parse_relocations of th
A vulnerability was found in SourceCodester Online Reviewer Management System 1.0. The affected...
CVE-2026-95925
A vulnerability was found in SourceCodester Online Reviewer Management System 1.0. The affected element is an unknown fu
A vulnerability has been found in SourceCodester Online Reviewer Management System 1.0. Impacted...
CVE-2026-95924
A vulnerability has been found in SourceCodester Online Reviewer Management System 1.0. Impacted is an unknown function
OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 uses an administrator password-reset...
CVE-2026-92930
OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 uses an administrator password-reset unlock-code design tha