#advisory

共收录 23075 条相关情报。

← 返回所有主题
安全公告2026-10-10 发布INFO

SiteOrigin Widgets Bundle <= 1.74.3 - Authenticated (Contributor+) Arbitrary File Read via LESS Injection via [siteorigin_widget] Shortcode 'value' JSON Instance (design.colors ...

CVE-2026-97348

The SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and inclu

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-10 发布INFO

【腾讯云认证】专有云交付运维工程师 - 腾讯云TBDS认证升级公告

【腾讯云认证】专有云交付运维工程师 - 腾讯云TBDS认证升级公告

历史摘要 · 未重新核验 · 腾讯云安全公告

安全公告2026-10-10 发布INFO

The Academy LMS – AI Course Builder, Quizzes, Certificates & eLearning plugin for WordPress is...

CVE-2026-104915

The Academy LMS – AI Course Builder, Quizzes, Certificates & eLearning plugin for WordPress is vulnerable to authorizati

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-10 发布INFO

The Academy LMS – AI Course Builder, Quizzes, Certificates & eLearning plugin for WordPress is...

CVE-2026-104022

The Academy LMS – AI Course Builder, Quizzes, Certificates & eLearning plugin for WordPress is vulnerable to Privilege E

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-10 发布INFO

The Advanced Classifieds & Directory Pro plugin for WordPress is vulnerable to Stored Cross-Site...

CVE-2026-93883

The Advanced Classifieds & Directory Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'phon

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-10 发布INFO

In JetBrains Exposed before 1.5.1 sQL injection was possible via unescaped string arguments of...

CVE-2026-108474

In JetBrains Exposed before 1.5.1 sQL injection was possible via unescaped string arguments of several SQL functions

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-10 发布INFO

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-103755

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-10 发布INFO

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-16681

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-10 发布INFO

Trident versions v25.02.1 through v26.06.1 are susceptible to a vulnerability that could allow an...

CVE-2026-22061

Trident versions v25.02.1 through v26.06.1 are susceptible to a vulnerability that could allow an authenticated attacker

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-10 发布INFO

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-18524

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-09 发布INFO

An issue in iStoreOS istoreos-24.10.7 and before allows a remote attacker to execute arbitrary...

CVE-2026-78797

An issue in iStoreOS istoreos-24.10.7 and before allows a remote attacker to execute arbitrary code via the task_id in t

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-09 发布INFO

Rocket Software Rocket Remote Desktop 18.0.8583.1 is vulnerable to Insufficiently Protected...

CVE-2026-78835

Rocket Software Rocket Remote Desktop 18.0.8583.1 is vulnerable to Insufficiently Protected Credentials.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-09 发布INFO

OpENer v2.3/commit 76b95cf, contains an integer underflow in the server-side EtherNet/IP...

CVE-2026-75352

OpENer v2.3/commit 76b95cf, contains an integer underflow in the server-side EtherNet/IP ForwardOpen connection-path par

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-09 发布INFO

OpENer v2.3/ commit 76b95cf, contains an out-of-bounds read in the server-side EtherNet/IP...

CVE-2026-75353

OpENer v2.3/ commit 76b95cf, contains an out-of-bounds read in the server-side EtherNet/IP ForwardOpen connection-path p

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-09 发布INFO

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2025-8457

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-09 发布INFO

OpENer v2.3/commit 76b95cf, contains an out-of-bounds read in the server-side EtherNet/IP...

CVE-2026-75351

OpENer v2.3/commit 76b95cf, contains an out-of-bounds read in the server-side EtherNet/IP ForwardOpen connection-path pa

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-09 发布INFO

Vikunja: Permissive Cross-domain Security Policy trusts every localhost origin which should not be trusted

## Summary Vikunja ships with `cors.origins` defaulting to `http://127.0.0.1:*` and `http://localhost:*`, and sends `Ac

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-09 发布INFO

Vikunja: Write-level project members can delete admin-tier link shares through an unloaded permission check

## Summary A project member with Write permission can delete an admin-tier link share on that project. The deletion aut

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-09 发布INFO

Vikunja: Explicit lower-permission share on a sub-project is silently overridden by an inherited parent permission (broken access control / privilege-management regression in v2...

## Description ### Summary In Vikunja v2.6.0 the project-permission engine resolves a user's effective permission on a

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-09 发布INFO

Vikunja: Webhooks and link shares survive every revocation path, so a removed collaborator keeps a live feed

## Summary A collaborator removed from a project keeps a **live, automatic feed** of that project's contents, because n

历史摘要 · 未重新核验 · GitHub Advisory