Shopper: Negative discount values accepted and propagated through order calculation pipeline
CVE-2026-56831
## Summary The Shopper Framework discount management functionality accepts negative discount values without server-side
#severity:medium
共收录 5477 条相关情报。
← 返回所有主题Central Dogma: LDAP injection in SearchFirstActiveDirectoryRealm enables authentication confusion and audit log evasion
CVE-2026-11748
# Vulnerability `SearchFirstActiveDirectoryRealm.findUserDn()` substitutes the user-supplied username from the login fo
libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2 state...
CVE-2026-78135
libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2 state machine. Because CREATE_CH
A flaw was found in GStreamer's gst-plugins-good isomp4 plugin. When processing a specially...
CVE-2026-88914
A flaw was found in GStreamer's gst-plugins-good isomp4 plugin. When processing a specially crafted MP4 or MOV file cont
The nscd service in the GNU C Library 2.3.4 onwards may crash due to a stack overflow when a...
CVE-2026-89092
The nscd service in the GNU C Library 2.3.4 onwards may crash due to a stack overflow when a malicious DNS server retur
strongSwan 4.6.2 through 6.0.7 has an infinite loop in PKCS#5 decryption.
CVE-2026-78129
strongSwan 4.6.2 through 6.0.7 has an infinite loop in PKCS#5 decryption.
strongSwan 5.0.2 through 6.0.7 has an Expired Pointer Dereference in PKCS#7 parsing in the...
CVE-2026-78123
strongSwan 5.0.2 through 6.0.7 has an Expired Pointer Dereference in PKCS#7 parsing in the openssl plugin.
strongSwan 4.1.10 through 6.0.7 allows a NULL pointer dereference in the eap-aka plugin.
CVE-2026-78126
strongSwan 4.1.10 through 6.0.7 allows a NULL pointer dereference in the eap-aka plugin.
An information disclosure vulnerability in the SAML Single Sign-On (SSO) functionality of Omada...
CVE-2026-84941
An information disclosure vulnerability in the SAML Single Sign-On (SSO) functionality of Omada Controller allows an aut
Concrete CMS below 9.5.3 stores user validation hashes for multiple purposes (email/registration...
CVE-2026-81905
Concrete CMS below 9.5.3 stores user validation hashes for multiple purposes (email/registration validation, password re
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow an authenticated user to...
CVE-2026-86087
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow an authenticated user to send a specially crafted r
Concrete CMS 9.5.2 and below is vulnerable to an authorization bypass (IDOR) because the frontend...
CVE-2026-18121
Concrete CMS 9.5.2 and below is vulnerable to an authorization bypass (IDOR) because the frontend calendar lightbox endp
Netskope was notified of an out-of-bounds heap read affecting the Endpoint DLP (EPDLP) service of...
CVE-2026-16172
Netskope was notified of an out-of-bounds heap read affecting the Endpoint DLP (EPDLP) service of the Netskope Client. A
Concrete CMS OAuth callback login path prior to version 9.5.3 did not check whether an account...
CVE-2026-81906
Concrete CMS OAuth callback login path prior to version 9.5.3 did not check whether an account was active or email-valid
IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to obtain...
CVE-2026-79723
IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to obtain sensitive information due to
IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to read...
CVE-2026-79725
IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to read arbitrary files due to imprope
Open WebUI: Users denied by the OAuth role policy can still sign in via token exchange
CVE-2026-88006
## Summary Open WebUI's OAuth token exchange endpoint issues a session for a provider access token without running the O
rclone archive/zip: Zip Slip via unsanitized zip entry names lets a malicious archive escape its own namespace
CVE-2026-88014
### Summary `backend/archive` mounts a zip file as a browsable, syncable rclone `Fs` (e.g. `rclone lsf :zip:downloaded.z
rclone: Directory metadata (chmod/chown/chtimes) applied through a planted symlink in rclone local --links escapes the destination
CVE-2026-88016
## Summary With `-l/--links`, rclone's local backend recreates a source `.rclonelink` object as a real symlink at the de
rclone local: crafted Range request against a translated symlink panics (DoS)
CVE-2026-88015
### Summary When `backend/local` is used with `--links`/`-l` (or the `links=true` config option), each symlink is expose