NLTK: SSRF Fail-Open in validate_network_url() via DNS Resolution Failure
CVE-2026-63311
There is an SSRF vulnerability in NLTK 3.9.4's network URL validation. The validate_network_url() function in nltk/paths
#severity:medium
共收录 5482 条相关情报。
← 返回所有主题xmldom: XML fragment injection via invalid EntityReference.nodeName during requireWellFormed serialization
CVE-2026-83610
## Summary An `EntityReference` node can be created with an invalid, attacker-controlled name through `Document.createE
fastify vulnerable to X-Forwarded-* spoofing under trustProxy hop-count
CVE-2026-16732
## Impact The fix for [CVE-2026-3635](https://www.cve.org/CVERecord?id=CVE-2026-3635) ([GHSA-444r-cwp2-x5xf](https://gi
A security vulnerability has been detected in Piwigo up to 16.3.0. Affected by this issue is some...
CVE-2026-84441
A security vulnerability has been detected in Piwigo up to 16.3.0. Affected by this issue is some unknown functionality
NocoBase fails to sanitize rich text field values in the read renderer, allowing users with...
CVE-2026-84701
NocoBase fails to sanitize rich text field values in the read renderer, allowing users with create permissions to store
A flaw was found in the first-broker-login flow of the Keycloak identity management service. When...
CVE-2026-82968
A flaw was found in the first-broker-login flow of the Keycloak identity management service. When a user links a social
Mailpit's IsInternalIP deny list function fails to block the Azure WireServer address 168.63.129...
CVE-2026-84697
Mailpit's IsInternalIP deny list function fails to block the Azure WireServer address 168.63.129.16 and the RFC 2765/614
WWBN AVideo through 30.0 contains an information disclosure vulnerability in the MobileManager...
CVE-2026-84481
WWBN AVideo through 30.0 contains an information disclosure vulnerability in the MobileManager plugin getConfiguration e
WWBN AVideo through commit 9c39d8c8 contains an incomplete authentication bypass in encryptPass...
CVE-2026-84483
WWBN AVideo through commit 9c39d8c8 contains an incomplete authentication bypass in encryptPass.json.php that allows una
AVideo Live_schedule::setTitle() and setDescription() store POST input without sanitization,...
CVE-2026-84477
AVideo Live_schedule::setTitle() and setDescription() store POST input without sanitization, allowing users with streami
A vulnerability has been found in Casdoor up to 4.0.0. This affects an unknown function of the...
CVE-2026-84423
A vulnerability has been found in Casdoor up to 4.0.0. This affects an unknown function of the file controllers/resource
WWBN AVideo contains a path traversal vulnerability in the API get_api_login_code endpoint that...
CVE-2026-84478
WWBN AVideo contains a path traversal vulnerability in the API get_api_login_code endpoint that allows unauthenticated a
A flaw was found in Ansible Automation Platform's automation-controller (AWX). The Bulk Job...
CVE-2026-84470
A flaw was found in Ansible Automation Platform's automation-controller (AWX). The Bulk Job Launch API (POST /api/v2/bul
Stack overflow vulnerabilities exist in an API endpoint of AOS-CX. Successful exploitation could...
CVE-2026-73783
Stack overflow vulnerabilities exist in an API endpoint of AOS-CX. Successful exploitation could allow an authenticated
An authenticated Path Traversal vulnerability exists in AOS-CX. Successful exploitation of this...
CVE-2026-73760
An authenticated Path Traversal vulnerability exists in AOS-CX. Successful exploitation of this vulnerability allows an
A privilege escalation vulnerability exists in the API endpoint of AOS-CX. Successful...
CVE-2026-73755
A privilege escalation vulnerability exists in the API endpoint of AOS-CX. Successful exploitation could allow an authen
Denial-of-service vulnerabilities exist in the command line interface of AOS-CX. Successful...
CVE-2026-73754
Denial-of-service vulnerabilities exist in the command line interface of AOS-CX. Successful exploitation could allow an
An out-of-bounds read vulnerability exists in the underlying operating system of AOS-CX that...
CVE-2026-73761
An out-of-bounds read vulnerability exists in the underlying operating system of AOS-CX that could lead to unauthenticat
A vulnerability in the web-based management interface of AOS-CX could allow an authenticated...
CVE-2026-73757
A vulnerability in the web-based management interface of AOS-CX could allow an authenticated remote attacker to conduct
A privilege escalation vulnerability exists in the API endpoint of AOS-CX. Successful...
CVE-2026-73758
A privilege escalation vulnerability exists in the API endpoint of AOS-CX. Successful exploitation could allow an authen