packages_apps_Nfc_AOSP10_r33_CVE-2020-0215

This repository does not have a README...

YesWiki Archived Revision - Cross-Site Scripting

YesWiki's archived-revision view reflects the time GET parameter into a hidden HTML input in handlers/page/show.php without escaping. Because MySQL coerces malformed DATETIME strings, an attacker can append an XSS payload after a valid revision timestamp. id: CVE-2026-52773 info: name: YesWiki...

Discourse <=2026.2.0 - Hidden Post Revision Disclosure via revert_to Authorization Bypass

Discourse versions before 2026.1.2, 2026.2.1, and 2026.3.0-latest.1 contain an authorization bypass in PostsControllerdisplaypost. The controller calls post.reverttoparams:version directly whenever a version query parameter is present, without checking whether the corresponding PostRevision is...

CVE-2026-102971

CVE-2026-102971: 숨겨진 판 편집자 ID 노출 보고자: Marco Paciaroni BomboBombone. MediaWiki의 RESTBase 호환 판 응답은 이름이 숨겨진 편집자의 숫자 사용자 ID를 포함할 수 있었습니다. 응답은 여전히 usertext를 null로 설정하고 편집자를 숨김으로 표시했지만, 노출된 ID는 공개 사용자 조회 API를 통해 계정에 매핑될 수 있었습니다. 영향 및 조건 인증되지 않은 호출자가 의도적으로 숨겨진 판 편집자를 해당 편집자의 계정과 연관시킬 수 있었습니다. 이 노출은 편집자...

framework_base_AOSP10_r33_CVE-2020-0137

此存储库没有 README。...

Apple-Platform-Security-Guides

Apple 플랫폼 보안 가이드 모든 Apple 플랫폼 보안 가이드 이전 iOS 보안 가이드 및 이전 OS X/ macOS 백서 공식 Apple 문서 개정 이력 날짜| macOS| iOS| watchOS| 비고 ---|---|---|---|--- 2019년 가을| 10.15.2| 13.3| 6.1.1| 2020년 봄| 10.15.4| 13.4| 6.2| 2021년 2월| 11.1| 14.3| 7.2| 2021년 5월| 11.3| 14.5| 7.4| 2022년 5월| 12.3| 15.4| 8.5| 2022년 12월| 12.3|...

AlmaLinux 9.2 [TuxCare] Security Update: mod_dav_svn / python3-subversion / subversion / subversion-devel / etc (ALMALINUX9.2:CLSA-2025:1754941300)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1754941300 advisory. - Insufficient validation of filenames against control characters in Apache Subversion repositories served via moddavsvn allows authenticated...

CentOS Linux 6 [TuxCare] Security Update: mod_dav_svn / subversion / subversion-devel / subversion-gnome / etc (CENTOS6:CLSA-2025:1755074254)

The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2025:1755074254 advisory. - Insufficient validation of filenames against control characters in Apache Subversion repositories served via moddavsvn allows authenticated use...

CLEANSTART-2026-YR55229 Git is a revision control system

Security vulnerability affects the git package. Git is a revision control system...

CLEANSTART-2026-JB28862 Git is a revision control system

Security vulnerability affects the git package. Git is a revision control system...

CLEANSTART-2026-MV02449 Git is a revision control system

Security vulnerability affects the git package. Git is a revision control system...

CentOS Linux 8.4 [TuxCare] Security Update: mod_dav_svn / subversion / subversion-devel / subversion-gnome / etc (CENTOS8.4:CLSA-2025:1756408610)

The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2025:1756408610 advisory. - Insufficient validation of filenames against control characters in Apache Subversion repositories served via moddavsvn allows authenticated...

Rocky Linux 9.6 [TuxCare] Security Update: mod_dav_svn / python3-subversion / subversion / subversion-devel / etc (ALMALINUX9.6:CLSA-2026:1778495013)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1778495013 advisory. - Insufficient validation of filenames against control characters in Apache Subversion repositories served via moddavsvn allows authenticat...

AlmaLinux 9.6 [TuxCare] Security Update: mod_dav_svn / python3-subversion / subversion / subversion-devel / etc (ALMALINUX9.6:CLSA-2026:1778495013)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1778495013 advisory. - Insufficient validation of filenames against control characters in Apache Subversion repositories served via moddavsvn allows authenticated...

CVE-2026-100241 Private change tags exposed to anonymous users via revision-tags-change events

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - EventBus Extension allows Excavation. This issue affects Mediawiki - EventBus Extension: 1.47.0-alpha...

CVE-2026-100241

The Wikimedia Foundation Mediawiki - EventBus Extension (version 1.47.0-alpha ) is vulnerable to an Exposure of Sensitive Information to an Unauthorized Actor vulnerability. Specifically, private change tags are exposed to anonymous users via revision-tags-change events . This flaw allows for the...

CVE-2026-100241 Private change tags exposed to anonymous users via revision-tags-change events

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - EventBus Extension allows Excavation. This issue affects Mediawiki - EventBus Extension: 1.47.0-alpha...

CVE-2026-100653

A flaw was found in vLLM. When operators configure a deployment to use a specific, pinned model revision, vLLM fails to apply the revision pin to certain supporting artifacts, such as model processors and configuration files. Consequently, these components are loaded from the external repository'...

EUVD-2026-87698

ClawHub openclaw/clawhub application/backend contains a flaw in the skill report moderation flow: four distinct ordinary authenticated accounts can report a visible skill and trigger automatic hiding moderationStatus: hidden of that skill from the catalog without any moderator decision. Because t...

CVE-2026-100653: Use of Less Trusted Source

vLLM is an inference and serving engine for large language models. In versions from 0.22.1 through 0.28.0, the operator-supplied model revision pin --revision / --code-revision is not propagated to several Hugging Face artifact loads for the FunAudioChat and Tarsier2 architectures: the...