A user account with permission to deploy artifacts to a hosted Maven repository could upload a...
CVE-2026-77121
A user account with permission to deploy artifacts to a hosted Maven repository could upload a POM file containing an ov
2026-09-03 归档
今日共收录 1407 条安全情报，包含 491 个 CVE，487 篇安全通告，以及 120 篇研究论文。
← 返回归档列表claude-skill-antivirus fails to analyze executable files when scanning local skill directories,...
CVE-2026-84810
claude-skill-antivirus fails to analyze executable files when scanning local skill directories, reading only SKILL.md wh
Tencent AI-Infra-Guard's skill-scan component excludes compiled Python bytecode files from...
CVE-2026-84809
Tencent AI-Infra-Guard's skill-scan component excludes compiled Python bytecode files from analysis by hardcoding __pyca
agentverus-scanner fails to analyze compiled Python bytecode files in companion code directories,...
CVE-2026-84811
agentverus-scanner fails to analyze compiled Python bytecode files in companion code directories, allowing attackers to
A vulnerability in Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco...
CVE-2026-20281
A vulnerability in Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 that ar
Missing permission checks in Jenkins XebiaLabs XL Deploy Plugin 26.1.0 and earlier allow...
CVE-2026-84674
Missing permission checks in Jenkins XebiaLabs XL Deploy Plugin 26.1.0 and earlier allow attackers with Overall/Read per
Jenkins Parameterized Remote Trigger Plugin 3.2.2 and earlier stores tokens unencrypted in job...
CVE-2026-84676
Jenkins Parameterized Remote Trigger Plugin 3.2.2 and earlier stores tokens unencrypted in job config.xml files on the J
Jenkins update-center2 3.18.3 and earlier does not escape plugin-provided values (plugin names,...
CVE-2026-84677
Jenkins update-center2 3.18.3 and earlier does not escape plugin-provided values (plugin names, descriptions, and versio
Jenkins Customizable Header Plugin 295.v2544b_ca_19b_97 and earlier allows overwriting the plugin...
CVE-2026-84673
Jenkins Customizable Header Plugin 295.v2544b_ca_19b_97 and earlier allows overwriting the plugin's appearance configura
A flaw was found in rpmuncompress. This command injection vulnerability allows a local attacker...
CVE-2026-84838
A flaw was found in rpmuncompress. This command injection vulnerability allows a local attacker to execute arbitrary com
Jenkins Microsoft Entra ID (previously Azure AD) Plugin 710.v0b_ff8e9cc2d2 and earlier grants...
CVE-2026-84672
Jenkins Microsoft Entra ID (previously Azure AD) Plugin 710.v0b_ff8e9cc2d2 and earlier grants Entra group permissions us
A flaw was found in rpm. An attacker can exploit a command injection vulnerability by influencing...
CVE-2026-84837
A flaw was found in rpm. An attacker can exploit a command injection vulnerability by influencing the path or filename o
OS command injection vulnerability in Jenkins TICS Plugin 2025.1.1 and earlier allows attackers...
CVE-2026-84675
OS command injection vulnerability in Jenkins TICS Plugin 2025.1.1 and earlier allows attackers able to control build en
Jenkins File Parameter Plugin 425.v3fa_801681b_5e and earlier allows writing files to arbitrary...
CVE-2026-84671
Jenkins File Parameter Plugin 425.v3fa_801681b_5e and earlier allows writing files to arbitrary locations on the Jenkins
Jenkins Performance Plugin 1015.v09ca_52b_3370e and earlier does not restrict the classes that...
CVE-2026-84670
Jenkins Performance Plugin 1015.v09ca_52b_3370e and earlier does not restrict the classes that can be instantiated when
A path traversal vulnerability in Jenkins Allure Plugin 2.35.2 and earlier allows attackers with...
CVE-2026-84669
A path traversal vulnerability in Jenkins Allure Plugin 2.35.2 and earlier allows attackers with Item/Read permission on
Jenkins ThinBackup Plugin 2.1.4 and earlier allows overwriting the plugin's backup configuration...
CVE-2026-84667
Jenkins ThinBackup Plugin 2.1.4 and earlier allows overwriting the plugin's backup configuration through Stapler data bi
A cross-site request forgery (CSRF) vulnerability in Jenkins Pipeline: Groovy Libraries Plugin...
CVE-2026-84663
A cross-site request forgery (CSRF) vulnerability in Jenkins Pipeline: Groovy Libraries Plugin 798.v5cc688825312 and ear
Jenkins GitLab Plugin 1.9.16 and earlier allows overwriting the global GitLab connection...
CVE-2026-84664
Jenkins GitLab Plugin 1.9.16 and earlier allows overwriting the global GitLab connection configuration through Stapler d
Jenkins SonarQube Scanner Plugin 2.18.3 and earlier does not limit URL schemes for the dashboard...
CVE-2026-84665
Jenkins SonarQube Scanner Plugin 2.18.3 and earlier does not limit URL schemes for the dashboard links it creates based