#advisory

共收录 23043 条相关情报。

← 返回所有主题
安全公告2026-10-14 发布INFO

Denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthenticated...

CVE-2026-0321

Denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthenticated attacker with network

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-14 发布INFO

Dell OS Recovery Tool, versions prior to 2.4.4, contains an Insecure Storage of Sensitive...

CVE-2026-82153

Dell OS Recovery Tool, versions prior to 2.4.4, contains an Insecure Storage of Sensitive Information vulnerability. A l

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-14 发布INFO

Nexent through 2.7.0 contains a missing authorization vulnerability in check_file_access that...

CVE-2026-110775

Nexent through 2.7.0 contains a missing authorization vulnerability in check_file_access that allows authenticated users

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-14 发布INFO

Blinko through 1.8.8 contains a broken access control vulnerability in the /api/file route that...

CVE-2026-110774

Blinko through 1.8.8 contains a broken access control vulnerability in the /api/file route that allows authenticated use

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-14 发布INFO

holaOS through 2026.822.1 contains a missing authorization vulnerability in channel-gateway...

CVE-2026-110769

holaOS through 2026.822.1 contains a missing authorization vulnerability in channel-gateway connectors that allows any m

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-14 发布INFO

GrowChief through 0.3.0 contains a missing authorization vulnerability in the getAllUsers handler...

CVE-2026-110773

GrowChief through 0.3.0 contains a missing authorization vulnerability in the getAllUsers handler that allows any authen

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-14 发布INFO

Databasus 3.7.0 through 3.61.0 contains an authentication bypass vulnerability that allows...

CVE-2026-110770

Databasus 3.7.0 through 3.61.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-14 发布INFO

Microsoft.OpenApi.YamlReader vulnerable to denial of service via YAML alias expansion

CVE-2026-72923

### Impact A small YAML OpenAPI document containing nested anchors and aliases can cause uncontrolled resource consumpt

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-14 发布INFO

BBOT's Symlink guard bypass in unarchive module allows planting symlinks during extraction

CVE-2026-14966

BBOT's `unarchive` module rejects archives containing symlink entries before extraction, but for zip and 7z archives it

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-14 发布INFO

Metalama allows local code execution through DLL planting in shared temporary directories

CVE-2026-62847

## Summary Metalama loaded and executed compile-time assemblies, auxiliary executable tools, and embedded helper assemb

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-14 发布INFO

Apprise forwards configured auth headers across cross-origin HTTP redirects

CVE-2026-59180

# Summary Apprise's HTTP-based notification plugins and its HTTP attachment / config loaders (`apprise/attachment/http.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-14 发布INFO

【智能体开发平台 ADP】关于域名 TLS 版本升级公告

【智能体开发平台 ADP】关于域名 TLS 版本升级公告

历史摘要 · 未重新核验 · 腾讯云安全公告

安全公告2026-10-14 发布INFO

The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to SQL Injection via...

CVE-2026-97668

The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the guest cart persistent

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-14 发布INFO

The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to Authentication...

CVE-2026-97657

The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to Authentication Bypass via Malleable Encrypt

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-14 发布INFO

The Printcart Store (PCDesigner / NB Designer) plugin for WooCommerce is vulnerable to...

CVE-2026-93388

The Printcart Store (PCDesigner / NB Designer) plugin for WooCommerce is vulnerable to unauthenticated arbitrary file up

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-14 发布INFO

Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app,...

CVE-2026-110447

Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-14 发布INFO

The Snazzy Social Media Feed plugin for WordPress is vulnerable to Arbitrary File Upload in all...

CVE-2026-110002

The Snazzy Social Media Feed plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and incl

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-14 发布INFO

The Click to Chat for WhatsApp plugin for WordPress is vulnerable to Arbitrary Shortcode...

CVE-2026-92097

The Click to Chat for WhatsApp plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions up to, an

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-14 发布INFO

Out-of-bounds write vulnerability in Hitachi Disk Array Driver for AIX and Hitachi Disk Array...

CVE-2026-86573

Out-of-bounds write vulnerability in Hitachi Disk Array Driver for AIX and Hitachi Disk Array Driver for Virtual I/O Ser

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-14 发布INFO

TeamPlus Messenger developed by Teamplus Technology has a Code Injection vulnerability....

CVE-2026-110445

TeamPlus Messenger developed by Teamplus Technology has a Code Injection vulnerability. Unauthenticated remote attackers

历史摘要 · 未重新核验 · GitHub Advisory