e621ng versions before 26.09.16 pass untrusted request parameters directly to Rails url_for in...
CVE-2026-95813
e621ng versions before 26.09.16 pass untrusted request parameters directly to Rails url_for in PaginatorComponent and co
#severity:medium
共收录 5477 条相关情报。
← 返回所有主题Autonomy Logic OpenPLC 3 is susceptible to an improper neutralization of input during web page...
CVE-2026-88020
Autonomy Logic OpenPLC 3 is susceptible to an improper neutralization of input during web page generation vulnerability
An authorization bypass vulnerability was identified in GitHub Enterprise Server that allowed any...
CVE-2026-75101
An authorization bypass vulnerability was identified in GitHub Enterprise Server that allowed any authenticated user of
Multiple vulnerabilities exist in the Analytics and Location Engine (ALE) that may allow for...
CVE-2026-76716
Multiple vulnerabilities exist in the Analytics and Location Engine (ALE) that may allow for unauthorized access or deni
A vulnerability exists in the Analytics and Location Engine (ALE) API that may allow for the...
CVE-2026-76717
A vulnerability exists in the Analytics and Location Engine (ALE) API that may allow for the disclosure of sensitive inf
Home Assistant: mDNS Server-Side Request Forgery
CVE-2026-91129
## Summary Home Assistant Green is vulnerable to a Server-Side Request Forgery (SSRF) via the mDNS/Zeroconf IPP integra
Traefik: BasicAuth singleflight coalescing reintroduces an unauthenticated username-enumeration timing oracle
CVE-2026-88010
## Summary Traefik's BasicAuth middleware coalesces concurrent credential checks through a `singleflight.Group` to avoi
Hatchet DurableTask WorkerStatus gRPC resolves caller-supplied durable-task UUIDs via ListSatisfiedEntries with no tenant_id filter
CVE-2026-88978
# Cross-tenant disclosure risk on `DurableTask` bidi RPC This is a low-severity, low-risk cross-tenant data exposure vu
Cloudreve: SSRF guard bypass: checkIP does not decode IPv6-transition wrappers (NAT64, IPv4-compatible, 6to4) reaching internal and cloud-metadata addresses
CVE-2026-79913
**Summary** Cloudreve's server-side request forgery guard `ValidateExternalURL` (`pkg/request/ssrf.go`) resolves a user
Gardener: Authorization Bypass via Group Subject Injection
CVE-2026-79767
## Overview The `manage-members` custom verb authorization check in the Gardener API server's `customverbauthorizer` adm
lightrag-hku: Stored Cross-Site Scripting (XSS) in the LightRAG WebUI chat/answer renderer via ingested content
CVE-2026-86062
### Summary The LightRAG WebUI renders assistant/answer chat content as **raw HTML** — `react-markdown` is configured wi
lightrag-hku: Plaintext Passwords Compared Without Constant-Time Function
CVE-2026-85725
### Summary When plaintext passwords are stored in AUTH_ACCOUNTS, the comparison uses Python's == operator which is not
lightrag-hku: Sensitive Information Exposure Through Raw Exception Messages in API Error Responses
CVE-2026-85709
### Summary The LightRAG API server passes raw Python exception messages directly into HTTP error responses across 30+
Nautobot: Authorization bypass in approval workflow REST API allows self-approval and unauthorized activation of scheduled jobs
CVE-2026-83805
### Impact This is an authorization bypass that escalates into unauthorized server-side job execution. 1. Primary impac
Nautobot: Stored cross-site scripting (XSS) in object create/edit form help text
CVE-2026-83801
### Impact _What kind of vulnerability is it? Who is impacted?_ It has two related instances that share the same root c
Autobahn Python permessage-deflate bypasses maxMessagePayloadSize after inflation
CVE-2026-77528
### Summary Autobahn Python enforces `maxMessagePayloadSize` against the compressed WebSocket frame length before permes
Nuclei: Environment Variable Disclosure via Response-Derived Data in DAST/Fuzz Mode
CVE-2026-76805
A vulnerability in Nuclei's DAST/fuzz expression evaluation path allows a malicious target server to trigger disclosure
Nuclei: Local File Read via Workflow File-Protocol Gate Bypass
CVE-2026-76804
A vulnerability in Nuclei's workflow template loader allows `file:` protocol templates to execute without the `-file` fl
Nuclei: Local File Read via MySQL Client Sandbox Bypass
CVE-2026-76803
A vulnerability in Nuclei's JavaScript MySQL client library allows arbitrary local file reads that bypass the `-allow-lo
Nuclei: Arbitrary Command Execution via DAST Code Signature Bypass
CVE-2026-76802
A vulnerability in Nuclei's DAST template loading path allows unsigned `code:` protocol templates to execute, bypassing