starlette-admin versions 0.16.1 through 0.17.1 fail to enforce the searchable_fields allowlist...
CVE-2026-89267
starlette-admin versions 0.16.1 through 0.17.1 fail to enforce the searchable_fields allowlist when configured as an emp
#severity:medium
共收录 5477 条相关情报。
← 返回所有主题Requests from the reverse proxy to the identity-provider service for token discovery,...
CVE-2026-90452
Requests from the reverse proxy to the identity-provider service for token discovery, introspection, and credential exch
When a particular authentication mode is configured, the reverse proxy forwards requests for a...
CVE-2026-90449
When a particular authentication mode is configured, the reverse proxy forwards requests for a bundled third-party admin
A file-upload handler redirects the authenticated client's browser to a URL taken directly from...
CVE-2026-90453
A file-upload handler redirects the authenticated client's browser to a URL taken directly from that same request's Refe
A prior update that raised a bundled HTTP client library to a version remediating known...
CVE-2026-90455
A prior update that raised a bundled HTTP client library to a version remediating known vulnerabilities was later revert
The administrative password is hashed using a comparatively weak, fast algorithm for the...
CVE-2026-90457
The administrative password is hashed using a comparatively weak, fast algorithm for the credential store backing one au
OpenStack Ironic through 38.0.0 may send a username and password to an unexpected remote host...
CVE-2026-90461
OpenStack Ironic through 38.0.0 may send a username and password to an unexpected remote host when Image Service is conf
A deployment mode intended to expose only read access to a bundled packet-analysis component's...
CVE-2026-90454
A deployment mode intended to expose only read access to a bundled packet-analysis component's interface denies a list o
The application's role-authorization lookup defaults to granting access when a request handler's...
CVE-2026-90450
The application's role-authorization lookup defaults to granting access when a request handler's name is not present in
A web interface reflects a portion of the request URL into a script context and a hyperlink...
CVE-2026-90443
A web interface reflects a portion of the request URL into a script context and a hyperlink attribute without adequate e
An application programming interface endpoint accepts a user-supplied value and interpolates it...
CVE-2026-90446
An application programming interface endpoint accepts a user-supplied value and interpolates it directly into the path o
ZITADEL: Auto-linking by email: IdP-side email verification is not checked
CVE-2026-56666
### Summary A flaw in the external identity provider handler allows unauthorized account linking to occur under specifi
@Mockoon/commons-server: Path traversal in templated `filePath` lets a request escape the served directory (prefix-only base check)
CVE-2026-59149
## Summary A `FILE` response whose `filePath` embeds request data (e.g. `"/srv/public/{{queryParam 'name'}}"`, the docu
ZITADEL: Missing Token Expiration (`exp`) Validation in JWT IdP Provider
CVE-2026-56665
### Summary A token lifecycle validation vulnerability was discovered in ZITADEL's external JWT Identity Provider (IdP)
Concrete CMS below 9.5.3 is vulnerable to Stored XSS via the Date Format field in the Page...
CVE-2026-81918
Concrete CMS below 9.5.3 is vulnerable to Stored XSS via the Date Format field in the Page Attribute Display block. A us
Concrete CMS below 9.5.3 does not apply HTML output escaping to the file description and tags...
CVE-2026-81917
Concrete CMS below 9.5.3 does not apply HTML output escaping to the file description and tags fields when rendering the
Concrete CMS Area API's block-create endpoint in versions 9.2.0 to 9.5.2 did not invoke the block...
CVE-2026-68535
Concrete CMS Area API's block-create endpoint in versions 9.2.0 to 9.5.2 did not invoke the block type controller's vali
Concrete CMS 9.5.2 and below is vulnerable to Cross-Site Request Forgery (CSRF) in the Express ...
CVE-2026-81907
Concrete CMS 9.5.2 and below is vulnerable to Cross-Site Request Forgery (CSRF) in the Express "Clear Entries" function
Shopper: Media sub-form store() still lacks authorization (Incomplete fix for GHSA-h4mp-g9c6-xwph)
CVE-2026-56830
## Title Missing authorization on Media sub-form store action allows unpermissioned product media update ## Descriptio
Shopping privilege escalation through missing authorization in Settings components
CVE-2026-56826
## Summary Four Livewire components in the Settings area expose destructive Filament actions (`delete` / `edit`) that p