#advisory

共收录 23043 条相关情报。

← 返回所有主题
安全公告2026-10-13 发布INFO

The affected code used child_process.execSync with a shell string for generator installation and...

CVE-2026-89116

The affected code used child_process.execSync with a shell string for generator installation and uninstallation. This al

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-13 发布INFO

The admin API endpoint used to retrieve CLA signature records does not consistently enforce the...

CVE-2026-89112

The admin API endpoint used to retrieve CLA signature records does not consistently enforce the required authorization c

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-13 发布INFO

Due to a Cross-Site Scripting (XSS) vulnerability in SAP Manufacturing Integration and...

CVE-2026-76972

Due to a Cross-Site Scripting (XSS) vulnerability in SAP Manufacturing Integration and Intelligence, an attacker could s

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-13 发布INFO

SAP Cloud Connector contains an improper authorization check, which could be exploited by a low...

CVE-2026-58242

SAP Cloud Connector contains an improper authorization check, which could be exploited by a low-privileged attacker thro

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-13 发布INFO

A vulnerability was detected in iMoonLab yolov13 up to 73289949533efac82bb5f72ec19b746618656bd2....

CVE-2026-108945

A vulnerability was detected in iMoonLab yolov13 up to 73289949533efac82bb5f72ec19b746618656bd2. Affected by this issue

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-13 发布INFO

A weakness has been identified in ModelTC LightX2V up to 0.5.0. Affected is the function...

CVE-2026-108943

A weakness has been identified in ModelTC LightX2V up to 0.5.0. Affected is the function AutoTokenizer.from_pretrained o

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-13 发布INFO

SAP NetWeaver and SAP Web Dispatcher do not properly validate certain fields in specially crafted...

CVE-2026-58249

SAP NetWeaver and SAP Web Dispatcher do not properly validate certain fields in specially crafted requests handled by an

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-13 发布INFO

A security flaw has been discovered in philz1337x clarity-upscaler up to...

CVE-2026-108942

A security flaw has been discovered in philz1337x clarity-upscaler up to cfbdb842c6c839c8e97741722b8cf9a4b7662d98. This

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-13 发布INFO

A security vulnerability has been detected in repository RAE up to...

CVE-2026-108944

A security vulnerability has been detected in repository RAE up to a4d18c4db766419cbe7cb8c02cd9f7ceb0ec9041. Affected by

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-13 发布INFO

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to execute arbitrary...

CVE-2026-93886

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to execute arbitrary script code due to imprope

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-13 发布INFO

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause...

CVE-2026-82101

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service due

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-13 发布INFO

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to...

CVE-2026-82110

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-13 发布INFO

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain...

CVE-2026-82103

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-13 发布INFO

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to...

CVE-2026-82108

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-13 发布INFO

IBM DataStage on Cloud Pak for Data 5.4.0.0 can allow a man-in-the-middle attacker to present a...

CVE-2026-84418

IBM DataStage on Cloud Pak for Data 5.4.0.0 can allow a man-in-the-middle attacker to present a forged TLS certificate,

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-13 发布INFO

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive...

CVE-2026-96119

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information or execute arbi

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-13 发布INFO

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to gain elevated...

CVE-2026-75782

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to gain elevated privileges due to a misc

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-13 发布INFO

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to cause a denial of...

CVE-2026-81858

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to cause a denial of service and obtain informa

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-13 发布INFO

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain...

CVE-2026-75621

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to ex

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-13 发布INFO

IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker...

CVE-2026-93891

IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive inf

历史摘要 · 未重新核验 · GitHub Advisory