Coze Studio before 0.5.0 contains an insecure default configuration that allows any registered...
CVE-2026-77934
Coze Studio before 0.5.0 contains an insecure default configuration that allows any registered user to execute commands
2026-10-20 归档
今日共收录 730 条安全情报，包含 0 个 CVE，352 篇安全通告，以及 100 篇研究论文。
← 返回归档列表JoySafeter through 1.0.0 contains a remote code execution vulnerability that allows authenticated...
CVE-2026-109443
JoySafeter through 1.0.0 contains a remote code execution vulnerability that allows authenticated users to run operating
An access issue was addressed with improved access controls. This issue is fixed in macOS Golden...
CVE-2026-65356
An access issue was addressed with improved access controls. This issue is fixed in macOS Golden Gate 27, macOS Sequoia
The issue was addressed with additional app bundle integrity checks. This issue is fixed in macOS...
CVE-2026-28854
The issue was addressed with additional app bundle integrity checks. This issue is fixed in macOS Golden Gate 27. A mali
An authorization issue was addressed with improved state management. This issue is fixed in...
CVE-2026-28850
An authorization issue was addressed with improved state management. This issue is fixed in visionOS 27. An app may be a
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.8, macOS...
CVE-2026-28853
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be
LangAlpha through 2026.09.07 contains an improper isolation vulnerability that places all tenants...
CVE-2026-109441
LangAlpha through 2026.09.07 contains an improper isolation vulnerability that places all tenants' sandbox containers on
LangAlpha through 2026.09.07 contains an indirect prompt injection vulnerability that allows...
CVE-2026-109440
LangAlpha through 2026.09.07 contains an indirect prompt injection vulnerability that allows remote attackers to execute
IBM Sterling Connect Direct for Unix 6.3.0.0 through 6.3.0.7 and 6.4.0.0 through 6.4.0.6 could...
CVE-2026-105453
IBM Sterling Connect Direct for Unix 6.3.0.0 through 6.3.0.7 and 6.4.0.0 through 6.4.0.6 could allow a local attacker to
IBM Langflow OSS 1.0.0 through 1.12.4 contains three message endpoints that perform no ownership...
CVE-2026-107366
IBM Langflow OSS 1.0.0 through 1.12.4 contains three message endpoints that perform no ownership verification. Any authe
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker...
CVE-2026-107400
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary co
A security vulnerability has been detected in H3C Magic NX15 NX15V100R017. This impacts the...
CVE-2026-112373
A security vulnerability has been detected in H3C Magic NX15 NX15V100R017. This impacts the function sub_416874 of the f
The html_to_markdown expansion module in MISP Modules contains a server-side request forgery ...
CVE-2026-112991
The html_to_markdown expansion module in MISP Modules contains a server-side request forgery (SSRF) vulnerability in its
A weakness has been identified in H3C Magic NX15 V100R017. This affects the function...
CVE-2026-112372
A weakness has been identified in H3C Magic NX15 V100R017. This affects the function importprofile of the file /api/uplo
IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM TS4500 Tape Library/Diamondback Tape...
CVE-2025-36252
IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM TS4500 Tape Library/Diamondback Tape Library does not invalidate
IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM Diamondback Tape Library and IBM Storage...
CVE-2025-36061
IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM Diamondback Tape Library and IBM Storage TS4500 Library could al
IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker...
CVE-2026-19178
IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to gain unauthorized adm
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-57529
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 does not invalidate session after a logout...
CVE-2025-36069
IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 does not invalidate session after a logout which could allow an auth
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-57514
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.