CVE-2026-56654

Privilege Escalation via Access Token Scope Escalation in API...

GHSA-WVCX-J62Q-45QW one-api Cross-site Scripting vulnerability

A vulnerability was found in songquanpeng one-api up to 0.6.10. It has been classified as problematic. This affects an unknown part of the component System Setting Handler. The manipulation of the argument Homepage Content leads to cross site scripting. It is possible to initiate the attack...

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

CVE-2012-2395 cobbler: command injection flaw in the power management XML-RPC API...

Information Disclosure

mysql is vulnerable to information disclosure. The vulnerability exists in C API through multiple unspecified vulnerabilities...