A missing authorization vulnerability exists in the internal API `/api/v1/secrets/` of some of...
CVE-2026-109812
A missing authorization vulnerability exists in the internal API `/api/v1/secrets/` of some of Moxa's industrial computi
2026-10-16 归档
今日共收录 833 条安全情报，包含 0 个 CVE，434 篇安全通告，以及 100 篇研究论文。
← 返回归档列表The Popup Box plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions 6.4...
CVE-2026-100159
The Popup Box plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions 6.4.1 to 6.4.2. This is du
A hard-coded cryptographic key vulnerability exists in the `/usr/bin/sysman` of some of Moxa's...
CVE-2026-109813
A hard-coded cryptographic key vulnerability exists in the `/usr/bin/sysman` of some of Moxa's industrial computing prod
A potential improper authorization vulnerability was reported in Lenovo Baiying PC Client,...
CVE-2026-92629
A potential improper authorization vulnerability was reported in Lenovo Baiying PC Client, distributed exclusively in th
A potential vulnerability was reported in some Lenovo Tablets that could allow a user with...
CVE-2026-92777
A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocke
A potential out-of-bounds write vulnerability was reported in the Lenovo Energy Management driver...
CVE-2026-89062
A potential out-of-bounds write vulnerability was reported in the Lenovo Energy Management driver that could allow a loc
A flaw was found in WildFly. A user with the `Monitor` role, which is the lowest standard Role...
CVE-2026-84823
A flaw was found in WildFly. A user with the `Monitor` role, which is the lowest standard Role-Based Access Control (RBA
A potential authentication bypass vulnerability was reported in some Lenovo tablets that could...
CVE-2026-89057
A potential authentication bypass vulnerability was reported in some Lenovo tablets that could allow a user with physica
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-107172
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
A potential vulnerability was reported in the Lenovo Legion Zone application, distributed...
CVE-2026-75941
A potential vulnerability was reported in the Lenovo Legion Zone application, distributed exclusively in the Chinese mar
A vulnerability was determined in bitcoinj up to 0.17. Affected is the function url...
CVE-2026-111210
A vulnerability was determined in bitcoinj up to 0.17. Affected is the function url.openConnection of the file PaymentSe
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-107316
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-2937
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-5819
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-8311
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2025-3778
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33...
CVE-2026-16754
A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusive
A potential vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the...
CVE-2026-16755
A potential vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that c
The Apache Airflow SSH provider hook disables SSH host-key verification by default: unless ...
CVE-2026-94134
The Apache Airflow SSH provider hook disables SSH host-key verification by default: unless `host_key` is configured or `
ClassroomIO through 1.0.0 contains an insecure direct object reference vulnerability in the Hono...
CVE-2026-111368
ClassroomIO through 1.0.0 contains an insecure direct object reference vulnerability in the Hono API course submission r