共收录 5477 条相关情报。
← 返回所有主题CVE-2026-61709
### Description In OpenFGA, the ListUsers API could incorrectly return a user who should have been excluded. ### Prec
CVE-2026-58657
## Summary Grav 2.0.0-rc.9 and the current 2.0 branch still allow stored CSS injection through Markdown image media act
CVE-2026-61453
## Summary The XSS blueprint validator (`Security::detectXss()`) runs on the **raw page content before Twig processing*
CVE-2026-57173
### Summary The audio decode-duration guard (`max_duration_s`, env `VLLM_MAX_AUDIO_DECODE_DURATION_S`, default 600s) tha
CVE-2026-59193
### Summary An authenticated admin.super user can crash Grav or fill the disk by uploading a specially crafted ZIP archi
CVE-2026-61589
### Impact The WebSocket `handle_mount` and `ViewRuntime._build_request` rebuild an `HttpRequest` via `RequestFactory().
CVE-2026-61588
### Impact When a Django `Model` instance is assigned to a **public** view attribute, djust serialized it to the client
CVE-2026-61597
### Impact Many djust built-in component template tags (`djust.components.templatetags.*`) render a developer/user-suppl
CVE-2026-92810
PrestaShop blockwishlist through 3.0.2 fails to validate wishlist ownership in the getUrlByIdWishListAction method, allo
CVE-2026-92813
Metabase through 0.63.18 fails to properly validate the unspecified address 0.0.0.0 in custom GeoJSON URLs, allowing una
CVE-2026-76438
A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot Application Software could allow an
CVE-2026-92809
PrestaShop psgdpr versions through 1.4.3 fail to validate that GDPR consent log entries are attributed to the authentica
CVE-2026-92802
kan through 0.6.0 fails to properly validate board creation permissions in the GitHub project import endpoint, allowing
CVE-2026-92803
LibreTranslate through 1.9.6 omits the access_check decorator from the download_file route, allowing unauthenticated acc
CVE-2026-92790
Higress before 2.2.4 panics when processing a Cookie header segment without an equals sign, causing the plugin wrapper t
CVE-2026-92781
Builder.io Gen2 SDKs through versions 5.2.11 and 0.25.13 contain a prototype pollution vulnerability in the unflatten he
CVE-2026-92778
CMAK through 3.0.0.6 fails to apply the scheduled leader election feature toggle to HTML form routes, allowing attackers
CVE-2026-92774
Wiki.js through 2.5.314 omits page tags from authorization checks in multiple GraphQL resolvers, allowing tag-based acce
CVE-2026-92764
OpenCVE before 3.1.0 fails to properly scope the organizations API endpoint to the token's organization, instead returni
CVE-2026-76450
A vulnerability in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow a