#advisory

共收录 22969 条相关情报。

← 返回所有主题
安全公告2026-10-16 发布INFO

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-2937

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-16 发布INFO

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-5819

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-16 发布INFO

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-8311

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-16 发布INFO

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2025-3778

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-16 发布INFO

A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33...

CVE-2026-16754

A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusive

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-16 发布INFO

A potential vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the...

CVE-2026-16755

A potential vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that c

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-16 发布INFO

The Apache Airflow SFTP provider's deferrable code paths (`SFTPTrigger`, `SFTPHookAsync`, ...

CVE-2026-94135

The Apache Airflow SFTP provider's deferrable code paths (`SFTPTrigger`, `SFTPHookAsync`, `SFTPClientPool`) disable SSH

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-16 发布INFO

ClassroomIO through 1.0.0 contains an incorrect authorization vulnerability in the PUT and DELETE...

CVE-2026-111369

ClassroomIO through 1.0.0 contains an incorrect authorization vulnerability in the PUT and DELETE /:lessonId lesson rout

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-16 发布INFO

The Apache Airflow Keycloak auth manager did not end the session on logout: the logout route...

CVE-2026-96806

The Apache Airflow Keycloak auth manager did not end the session on logout: the logout route revoked the presented token

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-16 发布INFO

The Apache Airflow SSH provider hook disables SSH host-key verification by default: unless ...

CVE-2026-94134

The Apache Airflow SSH provider hook disables SSH host-key verification by default: unless `host_key` is configured or `

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-16 发布INFO

ClassroomIO through 1.0.0 contains an insecure direct object reference vulnerability in the Hono...

CVE-2026-111368

ClassroomIO through 1.0.0 contains an insecure direct object reference vulnerability in the Hono API course submission r

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-16 发布INFO

BillionMail through 4.9 contains a hard-coded cryptographic key vulnerability that allows...

CVE-2026-111367

BillionMail through 4.9 contains a hard-coded cryptographic key vulnerability that allows unauthenticated attackers to f

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-16 发布INFO

cool-admin-midway through 8.0.0 contains an authorization bypass vulnerability that allows...

CVE-2026-111366

cool-admin-midway through 8.0.0 contains an authorization bypass vulnerability that allows department-limited admins to

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-16 发布INFO

The Apache Airflow Keycloak provider's multi-team provisioning (`_attach_team_permissions`)...

CVE-2026-92228

The Apache Airflow Keycloak provider's multi-team provisioning (`_attach_team_permissions`) granted every team role glob

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-16 发布INFO

BISHENG through 3.0.0-beta4 contains an insecure direct object reference vulnerability that...

CVE-2026-111363

BISHENG through 3.0.0-beta4 contains an insecure direct object reference vulnerability that allows authenticated low-pri

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-16 发布INFO

Peppermint through 0.5.5 contains a missing authorization vulnerability that allows any...

CVE-2026-111353

Peppermint through 0.5.5 contains a missing authorization vulnerability that allows any authenticated user to create tim

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-16 发布INFO

MacCMS v10 through 2026.1000.4056 does not limit attempts on the six-digit password recovery code...

CVE-2026-111356

MacCMS v10 through 2026.1000.4056 does not limit attempts on the six-digit password recovery code, allowing unauthentica

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-16 发布INFO

zhontai Admin.Core through 10.1.0 contains an authorization bypass vulnerability that allows...

CVE-2026-111355

zhontai Admin.Core through 10.1.0 contains an authorization bypass vulnerability that allows authenticated users to igno

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-16 发布INFO

MinDoc through 2.2-beta.2 contains an insecure direct object reference vulnerability in...

CVE-2026-111364

MinDoc through 2.2-beta.2 contains an insecure direct object reference vulnerability in DocumentController.Content that

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-16 发布INFO

SendPortal sendportal-core through 4.0.1 contains an authorization bypass vulnerability that...

CVE-2026-111358

SendPortal sendportal-core through 4.0.1 contains an authorization bypass vulnerability that allows authenticated worksp

历史摘要 · 未重新核验 · GitHub Advisory