758 matches found
GHSA-3V7F-55P6-F55P vulnerabilities
Vulnerabilities for packages: saf, vitess, renovate, nextcloud-server, gitlab-rails-ce-fips, kibana, langfuse-fips, tileserver-gl, opensearch-dashboards, kubeflow-pipelines, node-gyp, opensearch-dashboards-fips, vite, pulumi, emscripten, ts-patch, langfuse, prism, argo-workflows, wazuh-dashboard,...
CVE-2026-33672 vulnerabilities
Vulnerabilities for packages: saf, vitess, renovate, nextcloud-server, gitlab-rails-ce-fips, kibana, langfuse-fips, tileserver-gl, opensearch-dashboards, kubeflow-pipelines, node-gyp, opensearch-dashboards-fips, vite, pulumi, emscripten, ts-patch, langfuse, prism, argo-workflows, wazuh-dashboard,...
GHSA-C2C7-RCM5-VVQJ vulnerabilities
Vulnerabilities for packages: saf, vitess, renovate, nextcloud-server, gitlab-rails-ce-fips, kibana, langfuse-fips, tileserver-gl, opensearch-dashboards, kubeflow-pipelines, node-gyp, opensearch-dashboards-fips, vite, pulumi, emscripten, ts-patch, langfuse, prism, argo-workflows, wazuh-dashboard,...
CVE-2026-33750 vulnerabilities
Vulnerabilities for packages: saf, py3-captum, vitess, renovate, nextcloud-server, gitlab-rails-ce-fips, kibana, langfuse-fips, tensorflow-cpu-jupyter, kubeflow-centraldashboard, tileserver-gl, opensearch-dashboards, opensearch-dashboards-fips, pulumi, authentik-fips, emscripten, authentik,...
CVE-2026-33671 vulnerabilities
Vulnerabilities for packages: saf, vitess, renovate, nextcloud-server, gitlab-rails-ce-fips, kibana, langfuse-fips, tileserver-gl, opensearch-dashboards, kubeflow-pipelines, node-gyp, opensearch-dashboards-fips, vite, pulumi, emscripten, ts-patch, langfuse, prism, argo-workflows, wazuh-dashboard,...
GHSA-48C2-RRV3-QJMP vulnerabilities
Vulnerabilities for packages: saf, vitess, nextcloud-server, gitlab-rails-ce-fips, kibana, langfuse-fips, tileserver-gl, opensearch-dashboards, opensearch-dashboards-fips, langfuse, prism, argo-workflows, wazuh-dashboard, gemini-cli, gitlab-rails-ce, tileserver-gl-fips, kubeflow-katib, lerna,...
CVE-2026-33532 vulnerabilities
Vulnerabilities for packages: saf, vitess, nextcloud-server, gitlab-rails-ce-fips, kibana, langfuse-fips, tileserver-gl, opensearch-dashboards, opensearch-dashboards-fips, langfuse, prism, argo-workflows, wazuh-dashboard, gemini-cli, gitlab-rails-ce, tileserver-gl-fips, kubeflow-katib, lerna,...
CVE-2026-26795
GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a command injection vulnerability via the module parameter in the M.getsystemlog function. This vulnerability allows attackers to execute arbitrary commands via a crafted input...
CVE-2026-26791
GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a command injection vulnerability via the string port parameter in the enableechoserver function. This vulnerability allows attackers to execute arbitrary commands via a crafted input...
CVE-2026-26793
GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a command injection vulnerability via the setconfig function. This vulnerability allows attackers to execute arbitrary commands via a crafted input...
CVE-2026-26794
GL-iNet GL-AR300M16 v4.3.11 was discovered to contain a SQL injection vulnerability via the addgroup function. This vulnerability allows attackers to execute arbitrary SQL database operations via a crafted HTTP request...
CVE-2026-26792
GL-iNet GL-AR300M16 v4.3.11 was discovered to contain multiple command injection vulnerabilities in the setupgrade function via the modemurl, targetversion, currentversion, firmwareupload, hashtype, hashvalue, and upgradetype parameters. These vulnerabilities allow attackers to execute arbitrary...
CVE-2026-32293
The GL-iNet Comet GL-RM1 KVM connects to a GL-iNet site during boot-up to provision client and CA certificates. The GL-RM1 does not verify certificates used for this connection, allowing an attacker-in-the-middle to serve invalid client and CA certificates. The GL-RM1 will attempt to use the...
CVE-2026-32291
The GL-iNet Comet GL-RM1 KVM before 1.8.2 does not require authentication on the UART serial console. This attack requires physically opening the device and connecting to the UART pins...
CVE-2026-32290
The GL-iNet Comet GL-RM1 KVM before version 1.8.2 does not sufficiently verify the authenticity of uploaded firmware files. An attacker-in-the-middle or a compromised update server could modify the firmware and the corresponding MD5 hash to pass verification...
CVE-2026-32292
The GL-iNet Comet GL-RM1 KVM web interface does not limit login requests, enabling brute-force attempts to guess credentials...
cgltf 安全漏洞
CGLTF is a library developed by Johannes Kuhlmann from Germany, used for loading and processing GLTF 3D model formats. Versions of CGLTF prior to 1.15 contained security vulnerabilities. These vulnerabilities stemmed from integer overflows in the cgltfvalidate function during the validation of...
9 Critical IP KVM Flaws Enable Unauthenticated Root Access Across Four Vendors
Cybersecurity researchers have warned about the risks posed by low-cost IP KVM Keyboard, Video, Mouse over Internet Protocol devices, which can grant attackers extensive control over compromised hosts. The nine vulnerabilities, discovered by Eclypsium , span four different products from GL-iNet...
