Netcore NR255-V version 1.5.130703 contains a null pointer dereference vulnerability in the QoS...
CVE-2026-76865
Netcore NR255-V version 1.5.130703 contains a null pointer dereference vulnerability in the QoS setter CGI handlers filt
#severity:medium
共收录 5477 条相关情报。
← 返回所有主题Netcore NR255-V version 1.5.130703 contains a stored cross-site scripting vulnerability in...
CVE-2026-76858
Netcore NR255-V version 1.5.130703 contains a stored cross-site scripting vulnerability in ddns_wan_list_show.cgi caused
On affected platforms running Arista EOS with VRRPv2 IP Authentication Header (IP-AH)...
CVE-2026-73444
On affected platforms running Arista EOS with VRRPv2 IP Authentication Header (IP-AH) authentication configured, an unau
On affected platforms running Arista EOS with Dynamic Host Configuration Protocol (DHCP) relay...
CVE-2026-73437
On affected platforms running Arista EOS with Dynamic Host Configuration Protocol (DHCP) relay configured, an unauthenti
Uninitialized resource in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker...
CVE-2026-91740
Uninitialized resource in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origin
Integer overflow in Compositing in Google Chrome prior to 153.0.8010.47 allowed a remote attacker...
CVE-2026-91746
Integer overflow in Compositing in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origin
Race condition in PlatformIntegration in Google Chrome on on Mac prior to 153.0.8010.47 allowed a...
CVE-2026-91744
Race condition in PlatformIntegration in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who ha
QloApps through 1.7.0 reflects unescaped child feature names into back-office validation error...
CVE-2026-92234
QloApps through 1.7.0 reflects unescaped child feature names into back-office validation error messages in the Hotel Res
Out of bounds read in WebGL in Google Chrome on on Android prior to 153.0.8010.47 allowed a...
CVE-2026-91726
Out of bounds read in WebGL in Google Chrome on on Android prior to 153.0.8010.47 allowed a remote attacker to read memo
Missing authorization in Android in Google Chrome on on Android prior to 153.0.8010.47 allowed a...
CVE-2026-91717
Missing authorization in Android in Google Chrome on on Android prior to 153.0.8010.47 allowed a local attacker to obtai
Uninitialized resource in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker...
CVE-2026-91720
Uninitialized resource in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to read memory outside
Http4s: ResourceService and Webjar Service path escape via percent-encoded separators
CVE-2026-69201
The static content handlers `ResourceService` and `WebjarService` URL decode each path segment and then reject only segm
Http4s: Ember chunk parser lenience (TE.TE request smuggling)
CVE-2026-69216
## Summary Ember's chunk decoder parses the size token leniently: it strips leading and trailing whitespace and accepts
Http4s: CookieJar middleware matches by substring, leaking cookies cross-origin
CVE-2026-69215
The `CookieJar` client middleware decides whether to attach a cookie to an outgoing request using an unanchored substrin
Http4s: CookieJar middleware accepts arbitrary Set-Cookie domain
CVE-2026-69214
When processing a `Set-Cookie` from a response, the `CookieJar` client middleware trusts the server-supplied `Domain` at
Http4s: DigestAuth allows replay of captured requests
CVE-2026-69206
The `DigestAuth` replay defence stores `lastNc + 1` rather than the nonce-count (`nc`) value it just accepted. When a le
Netmaker has a boolean‑based SQL Injection
CVE-2026-32599
# SQL Injection in Netmaker SQLite Database Backend ## Summary The `sqliteDeleteRecord` function in Netmaker's databas
ZITADEL: Improper Role Revocation on Granted Projects during Multiple Role Deletions
CVE-2026-76081
### Summary A bug in how ZITADEL updates permissions when multiple project roles are deleted at the same time can cause
aiosmtplib before 5.1.3 fails to properly validate email addresses supplied by callers, allowing...
CVE-2026-90467
aiosmtplib before 5.1.3 fails to properly validate email addresses supplied by callers, allowing attackers to inject ESM
QloApps through 1.7.0 renders back-office list filter POST parameters into HTML input value...
CVE-2026-89268
QloApps through 1.7.0 renders back-office list filter POST parameters into HTML input value attributes without escaping