Interpretation Conflict

WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution

• pre-auth RCE
• SQL-инъекция

wordpress · wordpress17 июл. 2026 г.

Microsoft SharePoint Server Remote Code Execution Vulnerability

• RCE

microsoft · sharepoint foundation11 мая 2021 г.

URI validation failure on SVG parsing. Bypass of CVE-2023-23924

• Без аутентификации

dompdf project · dompdf7 февр. 2023 г.

Gitea before 1.11.2 is affected by Trusting HTTP Permission Methods on the Server Side when referencing the vulnerable admin or user API.

• pre-auth RCE

gitea · gitea8 февр. 2022 г.

The Lever PDF Embedder plugin 4.4 for WordPress does not block the distribution of polyglot PDF documents that are valid JAR archives.

• Без аутентификации

wp-pdf · pdf embedder5 дек. 2019 г.

The ESET AV parsing engine allows virus-detection bypass via a crafted BZ2 Checksum field in an archive.

• Без аутентификации

eset · cyber security5 мар. 2020 г.

Bref Body Parsing Inconsistency in Event-Driven Functions

• Без аутентификации

mnapoli · bref1 февр. 2024 г.

An issue was discovered in Suricata 5.0.0.

• Без аутентификации

oisf · suricata6 янв. 2020 г.

authentik: Account Takeover via SAML NameID Comment Truncation

• Без аутентификации

goauthentik · authentik18 авг. 2026 г.

url.c in GNU Wget through 1.24.5 mishandles semicolons in the userinfo subcomponent of a URI, and thus there may be insecure behavior in whi

• Без аутентификации

gnu · wget15 июн. 2024 г.

@fastify/middie vulnerable to middleware authentication bypass in child plugin scopes

• Без аутентификации
• Обход аутентификации

fastify · fastify\/middie16 апр. 2026 г.

@fastify/express vulnerable to middleware authentication bypass via URL normalization gaps (duplicate slashes and semicolons)

• Без аутентификации
• Обход аутентификации

fastify · fastify\/express15 апр. 2026 г.

@fastify/express vulnerable to middleware path doubling causing authentication bypass in child plugin scopes

• Без аутентификации
• Обход аутентификации

fastify · fastify\/express15 апр. 2026 г.

Official Clerk JavaScript SDKs: Middleware-based route protection bypass

• Без аутентификации

clerk · astro24 апр. 2026 г.

@fastify/middie vulnerable to path-scoped middleware bypass via absolute-form request target

• Без аутентификации

fastify · fastify\/middie4 сент. 2026 г.

@fastify/middie vulnerable to authorization bypass via encoded slash in path parameter values

• Без аутентификации

fastify · fastify\/middie1 июл. 2026 г.

@fastify/middie vulnerable to middleware bypass via deprecated ignoreDuplicateSlashes option

• Без аутентификации

fastify · fastify\/middie16 апр. 2026 г.

Softing Secure Integration Server Interpretation Conflict Remote Code Execution Vulnerability

• RCE

softing · secure integration server2 мая 2024 г.

Broken Authorization in ZITADEL Actions

zitadel · zitadel31 авг. 2022 г.

@cedar-policy/authorization-for-expressjs has an authorization bypass via query string manipulation

cedar-policy · authorization-for-expressjs12 авг. 2026 г.

An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service (host OS crash) or possibly gain h

• Локальное повышение привилегий

xen · xen8 дек. 2018 г.

In dbus-proxy/flatpak-proxy.c in Flatpak before 0.8.9, and 0.9.x and 0.10.x before 0.10.3, crafted D-Bus messages to the host can be used to

flatpak · flatpak2 февр. 2018 г.

An interpretation-conflict (CWE-436) vulnerability in node-forge versions 1.3.1 and earlier enables unauthenticated attackers to craft ASN.1

• Без аутентификации

digitalbazaar · forge25 нояб. 2025 г.

Network-AI ClaudeHookBridge Deny Pattern Bypass via Truncation

• RCE

jovancoding · network-ai13 авг. 2026 г.

Network-AI SandboxPolicy before 5.15.1 Blocklist Bypass via Quote Mismatch

jovancoding · network-ai13 авг. 2026 г.