#advisory

共收录 23003 条相关情报。

← 返回所有主题
安全公告2026-10-15 发布INFO

FreeRDP versions 3.13.0 before 3.32.0 contain a resource retention flaw in...

CVE-2026-110831

FreeRDP versions 3.13.0 before 3.32.0 contain a resource retention flaw in drive_process_irp_create, which registers an

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-15 发布INFO

FreeRDP from 2.0.0 before 3.32.0 contains a null pointer dereference vulnerability that allows...

CVE-2026-110834

FreeRDP from 2.0.0 before 3.32.0 contains a null pointer dereference vulnerability that allows malicious RDP servers to

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-15 发布INFO

n8n before 2.41.4 and 2.42.x before 2.42.1 contains an SQL injection vulnerability in version 1...

CVE-2026-110840

n8n before 2.41.4 and 2.42.x before 2.42.1 contains an SQL injection vulnerability in version 1 of the Microsoft SQL nod

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-15 发布INFO

A weakness has been identified in sgl-project SGLang up to 0.5.19. Affected by this vulnerability...

CVE-2026-110807

A weakness has been identified in sgl-project SGLang up to 0.5.19. Affected by this vulnerability is an unknown function

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-15 发布INFO

FreeRDP shadow server from 3.0.0 before 3.32.0 dispatches input PDUs during the Confirm Active...

CVE-2026-110838

FreeRDP shadow server from 3.0.0 before 3.32.0 dispatches input PDUs during the Confirm Active state before authenticati

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-15 发布INFO

FreeRDP before 3.32.0 fails to close prior serial handles in serial_process_irp_create, allowing...

CVE-2026-110830

FreeRDP before 3.32.0 fails to close prior serial handles in serial_process_irp_create, allowing a malicious RDP server

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-15 发布INFO

FreeRDP versions from 3.0.0 before 3.32.0 contain a null pointer dereference in the rdpsnd...

CVE-2026-110829

FreeRDP versions from 3.0.0 before 3.32.0 contain a null pointer dereference in the rdpsnd channel when a fragment sets

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-15 发布INFO

FreeRDP 3.0.0 before 3.32.0 allows HTTP header injection in its proxy because a lone LF in the...

CVE-2026-110835

FreeRDP 3.0.0 before 3.32.0 allows HTTP header injection in its proxy because a lone LF in the target portion of a routi

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-15 发布INFO

FreeRDP from 2.0.0 before 3.32.0 contains a memory exhaustion vulnerability in...

CVE-2026-110832

FreeRDP from 2.0.0 before 3.32.0 contains a memory exhaustion vulnerability in wts_read_drdynvc_data_first that allows a

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-15 发布INFO

FreeRDP 3.3.0 before 3.32.0, when built with WINPR_UTILS_IMAGE_JPEG=ON, has a heap-based out-of...

CVE-2026-110839

FreeRDP 3.3.0 before 3.32.0, when built with WINPR_UTILS_IMAGE_JPEG=ON, has a heap-based out-of-bounds write in winpr_co

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-15 发布INFO

Omada Controller's MSP and OpenAPI certificate/private-key management APIs do not properly...

CVE-2026-107795

Omada Controller's MSP and OpenAPI certificate/private-key management APIs do not properly enforce administrative author

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-15 发布INFO

A vulnerability was detected in turboderp ExLlamaV2 up to 0.3.2. Affected is the function STFile...

CVE-2026-110695

A vulnerability was detected in turboderp ExLlamaV2 up to 0.3.2. Affected is the function STFile.get_tensor of the file

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-15 发布INFO

When the password reset functionality is enabled, and email is configured, an attacker could take...

CVE-2026-108335

When the password reset functionality is enabled, and email is configured, an attacker could take over any account using

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-15 发布INFO

A weakness has been identified in itsmeravitejak Online-Examination-System up to...

CVE-2026-110696

A weakness has been identified in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e244

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-15 发布INFO

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-106068

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-15 发布INFO

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-105627

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-15 发布INFO

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-106485

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-15 发布INFO

In Omada Controller MSP mode, the user-confirmation endpoint fails to enforce the required...

CVE-2026-102298

In Omada Controller MSP mode, the user-confirmation endpoint fails to enforce the required permission check. An authenti

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-15 发布INFO

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-106006

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-15 发布INFO

A security vulnerability has been detected in Praat up to 7.0.02. Affected is the function...

CVE-2026-110698

A security vulnerability has been detected in Praat up to 7.0.02. Affected is the function whisper_model_load of the fil

历史摘要 · 未重新核验 · GitHub Advisory