A security flaw has been discovered in NASA cFS up to 7.0.1. The affected element is the function...
CVE-2026-82480
A security flaw has been discovered in NASA cFS up to 7.0.1. The affected element is the function CFE_SB_GetUserDataLeng
#severity:medium
共收录 5482 条相关情报。
← 返回所有主题A vulnerability was determined in NASA Trick 19.6.0. This issue affects the function...
CVE-2026-82478
A vulnerability was determined in NASA Trick 19.6.0. This issue affects the function JSONVariableServerThread::parse_req
A vulnerability was identified in NASA cFS up to 7.0.1. Impacted is the function OS_read of the...
CVE-2026-82479
A vulnerability was identified in NASA cFS up to 7.0.1. Impacted is the function OS_read of the file modules/protocol/tc
Memos through 0.30.0 omits the 100.64.0.0/10 carrier-grade NAT address range from SSRF protection...
CVE-2026-82476
Memos through 0.30.0 omits the 100.64.0.0/10 carrier-grade NAT address range from SSRF protection in its link-metadata f
Rodauth before 2.47.0 fails to validate protocol-relative return-to paths in confirm_password,...
CVE-2026-82467
Rodauth before 2.47.0 fails to validate protocol-relative return-to paths in confirm_password, login_return_to_requested
pac4j-core before 6.5.6 contains an open redirect vulnerability in DefaultLogoutLogic.perform()...
CVE-2026-82464
pac4j-core before 6.5.6 contains an open redirect vulnerability in DefaultLogoutLogic.perform() that accepts backslash-p
pac4j-oidc before 6.5.6 accepts OIDC callbacks carrying only an access token without...
CVE-2026-82462
pac4j-oidc before 6.5.6 accepts OIDC callbacks carrying only an access token without authorization code or ID token vali
pac4j-saml before 6.5.6 does not require signature validation of SAML LogoutRequest messages in...
CVE-2026-82465
pac4j-saml before 6.5.6 does not require signature validation of SAML LogoutRequest messages in SAML2LogoutValidator.val
Rodauth before 2.47.0 contains an authentication bypass vulnerability in the jwt_refresh route...
CVE-2026-82469
Rodauth before 2.47.0 contains an authentication bypass vulnerability in the jwt_refresh route that issues new JWT acces
Rodauth before 2.47.0 contains a time-based one-time password reuse vulnerability in the otp...
CVE-2026-82470
Rodauth before 2.47.0 contains a time-based one-time password reuse vulnerability in the otp feature that fails to track
Rodauth before 2.47.0 contains a cross-site request forgery protection bypass vulnerability in...
CVE-2026-82468
Rodauth before 2.47.0 contains a cross-site request forgery protection bypass vulnerability in the JSON request content
In MITRE SAF Heimdall 2.11.6 through 2.13.x before 2.14.0, an SSRF issue allows remote attackers...
CVE-2026-82477
In MITRE SAF Heimdall 2.11.6 through 2.13.x before 2.14.0, an SSRF issue allows remote attackers to access internal netw
Formwork through 2.3.14 contains a stored cross-site scripting vulnerability in visit tracking...
CVE-2026-82451
Formwork through 2.3.14 contains a stored cross-site scripting vulnerability in visit tracking that records the Referer
RubyGems fails to re-validate path containment after filesystem symlink resolution during gem...
CVE-2026-82455
RubyGems fails to re-validate path containment after filesystem symlink resolution during gem extraction. When a pre-exi
Cockpit CMS before 2.14.1 contains an account enumeration vulnerability in the auth check...
CVE-2026-82449
Cockpit CMS before 2.14.1 contains an account enumeration vulnerability in the auth check endpoint due to timing discrep
The Frontend Admin by DynamiApps WordPress plugin before 3.29.11 does not perform a capability...
CVE-2026-81346
The Frontend Admin by DynamiApps WordPress plugin before 3.29.11 does not perform a capability check on one of its AJAX
The User Profile Builder WordPress plugin before 4.0.1 does not validate the type of data being...
CVE-2026-76547
The User Profile Builder WordPress plugin before 4.0.1 does not validate the type of data being deserialized when impor
The Rank Math SEO WordPress plugin before 1.0.277 does not check that the user requesting an...
CVE-2026-77786
The Rank Math SEO WordPress plugin before 1.0.277 does not check that the user requesting an automated SEO fix holds th
The Stripe Payment Forms by WP Full Pay WordPress plugin before 8.5.5 does not verify that a...
CVE-2026-80311
The Stripe Payment Forms by WP Full Pay WordPress plugin before 8.5.5 does not verify that a subscription belongs to th
The MStore API WordPress plugin before 4.21.1 does not verify that the order targeted by its...
CVE-2026-18234
The MStore API WordPress plugin before 4.21.1 does not verify that the order targeted by its wallet payment handling be