EUVD-2026-35345

Spring HATEOAS's internal PropertyUtils.createObjectFromProperties method, used by the Collection+JSON and UBER media type deserializers, performs bean property binding via reflection without consulting Jackson access-control annotations. Affected versions: Spring HATEOAS 1.5.0 through 1.5.6; 2.3...

CVE-2026-41980

Permission control vulnerability in the file preview module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

EUVD-2026-35341

Permission control vulnerability in the file preview module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2026-41980

Permission control vulnerability in the file preview module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2026-41980

Technical details are not publicly available in the provided documents. This CVE entry lacks specifics on affected product/version, root cause, or remediation. Monitor for updates from Huawei advisories and the CVE record.

EUVD-2026-35329

Permission control vulnerability in the print module. Impact: Successful exploitation of this vulnerability may affect integrity and confidentiality...

CVE-2026-41979

Permission control vulnerability in the print module. Impact: Successful exploitation of this vulnerability may affect integrity and confidentiality...

CVE-2026-41979

Permission control vulnerability in the print module. Impact: Successful exploitation of this vulnerability may affect integrity and confidentiality...

CVE-2026-41979

CVE-2026-41979 describes a permission-control vulnerability in the print module. The impact is stated as potentially affecting integrity and confidentiality, with CVSSv3.1 indicating a MEDIUM base score (5.5) and a LOCAL attack vector requiring user interaction (no privileges required, low attack...

EUVD-2026-35323

Permission control vulnerability in the clone module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2026-41978

Permission control vulnerability in the clone module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2026-41978

Permission control vulnerability in the clone module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2026-41978

The CVE-2026-41978 entry documents a permission-control vulnerability in the clone module with potential confidentiality impact. CVSS v3.1 metrics indicate a MEDIUM severity (4.4), LOCAL attack vector, LOW confidentiality impact, and REQUIREMENT for user interaction. No exploit details or remedia...

MAL-2026-5341 Malicious code in void-ulid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17c8bf4c8a22f2c86dcf8af482d28d5fccfc1d5971289e4f06afedc17c0585a9 void-ulid impersonates the legitimate ulid/ulidx ULID generator its package.json reuses the upstream github.com/ulid/javascript repo URL but ships a...

389 Directory Server 代码问题漏洞

389 Directory Server is an open-source implementation of a highly available, fully functional, reliable, and secure LDAP server. There is a code vulnerability in 389 Directory Server, which stems from the control plugin’s failure to check for allocation failures before using BER structures. This...

PT-2026-48026

Inclusion of functionality from untrusted control sphere in Visual Studio Code allows an unauthorized attacker to elevate privileges locally...

PT-2026-48153

The RemoteControl API methods invite participants and remind participants pass a caller-supplied token-ID array into TokenDynamic::findUninvited, which concatenates the values directly into a tid IN '...' SQL clause without parameterization or input validation. A remote, authenticated attacker...

PT-2026-47670

Permission control vulnerability in the file preview module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

PT-2026-47867

Name of the Vulnerable Software and Affected Versions DedeCMS version 5.7.118 Description Command execution is possible within the 'file manage control.php' file. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...

CVE-2026-38615

DedeCMS V5.7.118 is vulnerable to Command Execution in filemanagecontrol.php...