#advisory

共收录 22911 条相关情报。

← 返回所有主题
漏洞预警2026-10-30 发布INFO

Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to version 2.52.1, the `course/certificate checkout` flow accepts cl...

CVE-2026-61803

Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to version

来源摘录 · NVD / OSV.dev

漏洞预警2026-10-30 发布MEDIUM

ZAC is an open-source, workflow-based Common Ground component for Dutch municipal case management. Prior to 5.2.0, by-id read endpoints in `src/main/kotlin/nl/info/zac/app/zaak/...

CVE-2026-55551

ZAC is an open-source, workflow-based Common Ground component for Dutch municipal case management. Prior to 5.2.0, by-id

来源摘录 · NVD / OSV.dev

漏洞预警2026-10-30 发布MEDIUM

SecureDrop is an open-source whistleblower submission system that media organizations can use to securely accept documents from, and communicate with anonymous sources. From 2.5...

CVE-2026-50000

SecureDrop is an open-source whistleblower submission system that media organizations can use to securely accept documen

来源摘录 · NVD / OSV.dev

漏洞预警2026-10-30 发布INFO

Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to version 2.52.0, an authenticated user with a course editing role ...

CVE-2026-39375

Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to version

来源摘录 · NVD / OSV.dev

漏洞预警2026-10-30 发布MEDIUM

gopacket provides packet processing capabilities for Go. Prior to 1.7.2, the SCTP chunk chain in layers/sctp.go passes attacker-controlled declared lengths and counts to decodeS...

CVE-2026-119299

gopacket provides packet processing capabilities for Go. Prior to 1.7.2, the SCTP chunk chain in layers/sctp.go passes a

来源摘录 · NVD / OSV.dev

漏洞预警2026-10-30 发布MEDIUM

croc is a tool that allows any two computers to simply and securely transfer files and folders. Prior to 11.5.2, the receive-side file-readiness loop in src/croc/croc.go treats ...

CVE-2026-119298

croc is a tool that allows any two computers to simply and securely transfer files and folders. Prior to 11.5.2, the rec

来源摘录 · NVD / OSV.dev

漏洞预警2026-10-30 发布HIGH

A use-after-free and double-free issue in the SetClient command handler of the kmstool-enclave sample application of AWS aws-nitro-enclaves-sdk-c before 0.4.6 may allow an appli...

CVE-2026-119116

A use-after-free and double-free issue in the SetClient command handler of the kmstool-enclave sample application of AWS

来源摘录 · NVD / OSV.dev

漏洞预警2026-10-30 发布CRITICAL

ng-antd-admin is an Angular and NestJS administration system template. Prior to 22.0, a hardcoded default `JWT` secret permits token forgery when a deployment has not replaced t...

CVE-2026-61737

ng-antd-admin is an Angular and NestJS administration system template. Prior to 22.0, a hardcoded default `JWT` secret p

来源摘录 · NVD / OSV.dev

漏洞预警2026-10-30 发布INFO

libass is a portable subtitle renderer for the `ASS`/SSA (Advanced Substation Alpha/Substation Alpha) subtitle format. Prior to 0.17.5, libass can overread and overwrite the gly...

CVE-2026-61627

libass is a portable subtitle renderer for the `ASS`/SSA (Advanced Substation Alpha/Substation Alpha) subtitle format. P

来源摘录 · NVD / OSV.dev

漏洞预警2026-10-30 发布INFO

libass is a portable subtitle renderer for the ASS/SSA (Advanced Substation Alpha/Substation Alpha) subtitle format. From 0.17.4 until 0.17.5, libass event pruning does not guar...

CVE-2026-61626

libass is a portable subtitle renderer for the ASS/SSA (Advanced Substation Alpha/Substation Alpha) subtitle format. Fro

来源摘录 · NVD / OSV.dev

漏洞预警2026-10-30 发布MEDIUM

Collabora Online is a collaborative online office suite based on LibreOffice technology. Prior to 24.04.18 and 25.04.11, the `host_session_id` query/form parameter is substitute...

CVE-2026-48164

Collabora Online is a collaborative online office suite based on LibreOffice technology. Prior to 24.04.18 and 25.04.11,

来源摘录 · NVD / OSV.dev

漏洞预警2026-10-30 发布LOW

Campfire is a web-based chat application. In version 1.4.4 and earlier, when a Campfire message contains a link, the server fetches it to build an OpenGraph unfurl preview. `Res...

CVE-2026-100355

Campfire is a web-based chat application. In version 1.4.4 and earlier, when a Campfire message contains a link, the ser

来源摘录 · NVD / OSV.dev

漏洞预警2026-10-30 发布INFO

DateTime::Lite versions before 0.8.1 for Perl allow CPU exhaustion via a per-day loop when adding seconds. _normalize_leap_seconds crosses day boundaries one day at a time, so ...

CVE-2026-87768

DateTime::Lite versions before 0.8.1 for Perl allow CPU exhaustion via a per-day loop when adding seconds. _normalize_l

来源摘录 · NVD / OSV.dev

漏洞预警2026-10-30 发布INFO

HTTP::Parser::XS versions before 0.18 for Perl truncate PATH_INFO at an encoded NUL byte in parse_http_request. The XS parser URL-decodes the request path and measures the resu...

CVE-2026-116130

HTTP::Parser::XS versions before 0.18 for Perl truncate PATH_INFO at an encoded NUL byte in parse_http_request. The XS

来源摘录 · NVD / OSV.dev

漏洞预警2026-10-30 发布INFO

Insecure Temporary File vulnerability in Mix deps.partition in Elixir allows a local user to execute code as another user via a swapped partition config file. Partitioned depend...

CVE-2026-97209

Insecure Temporary File vulnerability in Mix deps.partition in Elixir allows a local user to execute code as another use

来源摘录 · NVD / OSV.dev

漏洞预警2026-10-30 发布INFO

Improper Validation of Specified Quantity in Input vulnerability in the Elixir standard library's JSON module allows an unauthenticated attacker who supplies a JSON document to ...

CVE-2026-115274

Improper Validation of Specified Quantity in Input vulnerability in the Elixir standard library's JSON module allows an

来源摘录 · NVD / OSV.dev

漏洞预警2026-10-30 发布INFO

Improper Validation of Specified Quantity in Input vulnerability in the Elixir standard library's URI module allows an attacker who supplies a URL to cause a denial of service t...

CVE-2026-109821

Improper Validation of Specified Quantity in Input vulnerability in the Elixir standard library's URI module allows an a

来源摘录 · NVD / OSV.dev

漏洞预警2026-10-30 发布HIGH

A flaw was found in glib-networking. When establishing connections using Transport Layer Security (TLS) version 1.3, the client-side session cache does not limit the number of s...

CVE-2026-103963

A flaw was found in glib-networking. When establishing connections using Transport Layer Security (TLS) version 1.3, the

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-30 发布MEDIUM

Missing Authorization vulnerability in Drupal Xray Audit allows Forceful Browsing. This issue affects Xray Audit versions: from 0.0.0 to 1.6.3, from 2.0.0 to 2.0.4, from 3.0.0 t...

CVE-2026-96389

Missing Authorization vulnerability in Drupal Xray Audit allows Forceful Browsing. This issue affects Xray Audit version

来源摘录 · NVD / OSV.dev

漏洞预警2026-10-30 发布LOW

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Data field allows Stored XSS. This issue affects Data field versions...

CVE-2026-114555

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Data field

来源摘录 · NVD / OSV.dev