BookWyrm through 0.9.1 fails to validate user visibility permissions in the Favorite and...
CVE-2026-86112
BookWyrm through 0.9.1 fails to validate user visibility permissions in the Favorite and Unfavorite views, allowing auth
#severity:medium
共收录 5482 条相关情报。
← 返回所有主题The Unlimited Elements For Elementor plugin for WordPress is vulnerable to Reflected Cross-Site...
CVE-2026-75586
The Unlimited Elements For Elementor plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 'formData[
The Gallery : FooGallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via ...
CVE-2026-85414
The Gallery : FooGallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'custom_settings' Shortco
The Custom Contact Forms plugin for WordPress is vulnerable to authorization bypass in all...
CVE-2026-75018
The Custom Contact Forms plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including
The Pods – Custom Content Types and Fields plugin for WordPress is vulnerable to Stored Cross...
CVE-2026-76573
The Pods – Custom Content Types and Fields plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'not_fo
Camaleon CMS versions 2.7.5 through 2.9.1 fail to validate redirect targets when fetching remote...
CVE-2026-86100
Camaleon CMS versions 2.7.5 through 2.9.1 fail to validate redirect targets when fetching remote files in the Upload fro
A flaw was found in Flatpak. A Time-of-check to time-of-use (TOCTOU) race condition exists in the...
CVE-2026-76925
A flaw was found in Flatpak. A Time-of-check to time-of-use (TOCTOU) race condition exists in the `org.freedesktop.Flatp
PX4 Autopilot through 1.17.0 contains a use-after-free vulnerability in TemperatureCalibration:...
CVE-2026-86096
PX4 Autopilot through 1.17.0 contains a use-after-free vulnerability in TemperatureCalibration::start() due to a race co
vLLM: Incomplete CVE-2025-62164 remediation can be bypassed by concurrent prompt parts
CVE-2026-73557
## Executive Summary The follow-up protection for CVE-2025-62164 is incomplete at vLLM revision `26587f9519e22a5c4549ea
vLLM: ReDoS via structured_outputs.regex in the lm-format-enforcer backend (no compile timeout) — missed sibling of GHSA-rwxx-mrjm-wc2m
CVE-2026-73556
### Summary The fix for `GHSA-rwxx-mrjm-wc2m` ("ReDoS via `structured_outputs.regex` compiled without timeout") wrapped
vLLM: Unauthenticated Internal Path and Username Disclosure via Validation Error Messages
CVE-2026-73555
## Summary When the vLLM API receives a malformed request (e.g., invalid JSON or missing required fields), FastAPI rais
vLLM: Derender endpoints decode caller-supplied GenerateResponse token IDs without output bounds
CVE-2026-71486
## Summary The `/v1/completions/derender` and `/v1/chat/completions/derender` endpoints accept caller-supplied `Generat
A flaw has been found in ramon-victor freegpt-webui up to...
CVE-2026-85703
A flaw has been found in ramon-victor freegpt-webui up to 098db3dfeb41555c2ca9269df0f13e10ec1c35dc. Affected by this iss
A security vulnerability has been detected in ramon-victor freegpt-webui up to...
CVE-2026-85702
A security vulnerability has been detected in ramon-victor freegpt-webui up to 098db3dfeb41555c2ca9269df0f13e10ec1c35dc.
A vulnerability has been found in ramon-victor freegpt-webui up to...
CVE-2026-85701
A vulnerability has been found in ramon-victor freegpt-webui up to 098db3dfeb41555c2ca9269df0f13e10ec1c35dc. This issue
PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and...
CVE-2026-80113
PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 10
PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and...
CVE-2026-80117
PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 10
PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and...
CVE-2026-80115
PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 10
A weakness has been identified in jofpin trape 2.0. This affects an unknown part of the file core...
CVE-2026-85638
A weakness has been identified in jofpin trape 2.0. This affects an unknown part of the file core/user.py. This manipula
A security flaw has been discovered in jofpin trape 1.0.0/2.0. Affected by this issue is the...
CVE-2026-85637
A security flaw has been discovered in jofpin trape 1.0.0/2.0. Affected by this issue is the function join_room of the f