#advisory

共收录 23210 条相关情报。

安全公告2026-10-01 发布INFO

stream-json: Prototype pollution: Assembler writes this.current[this.key] on plain objects

CVE-2026-104183

stream-json is a micro-library of stream components for processing JSON and JSONC with a minimal memory footprint. Prior

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-1321

安全公告2026-10-01 发布INFO

stream-json: JSONC parser and verifier re-scan the whole accumulated comment on every input chunk

CVE-2026-104182

stream-json is a micro-library of stream components for processing JSON and JSONC with a minimal memory footprint. Prior

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-407

安全公告2026-10-01 发布INFO

Filament: Multi-factor authentication (app) management actions do not require password reauthentication

CVE-2026-104181

Filament is a collection of full-stack components for accelerated Laravel development. From 4.0.0 until 4.13.3 and 5.8.3

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-306

安全公告2026-10-01 发布INFO

Out-of-bounds write in PeaZip PEA extractor allows code execution via a crafted .pea archive

CVE-2026-102514

Out-of-bounds Write (CWE-787) in the PEA archive extraction routine (pea.pas, unpea_procedure) of the first-party pea co

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-787

安全公告2026-10-01 发布INFO

Document Merge Service vulnerable to RCE via SSTI (xlsx tempaltes)

CVE-2026-53964

Document Merge Service is a document template merge service providing an API to manage templates and merge them with giv

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-1336

安全公告2026-10-01 发布INFO

OpenRun: Redirect URL validation bypass using //host paths leads to Open Redirect

CVE-2026-55252

OpenRun is an open-source, self-hosted GitOps platform for deploying web apps and internal tools to Docker or Kubernetes

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-601

安全公告2026-10-01 发布INFO

NetBox Device Type Library: Arbitrary Code Execution on CI Runner Through Malicious requirements.txt, .pre-commit-hooks-config.yaml, and .gitmodules Files

CVE-2026-55251

NetBox Device Type Library is a collection of community-sourced device type definitions for import into NetBox. Prior to

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-494 #cwe-829 #cwe-94

安全公告2026-10-01 发布INFO

pgvector buffer overflow in IVFFlat index build

CVE-2026-103484

IVFFlat index build in pgvector before 0.8.7 allows a database user to write data out-of-bounds, which can lead to arbit

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-1284 #cwe-787

安全公告2026-10-01 发布INFO

Sakai Conversations has a Stored XSS Issue

CVE-2026-54049

Sakai is a Collaboration and Learning Environment (CLE). From versions 23.0 to before 23.5, and versions 25.0 to before

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-79

安全公告2026-10-01 发布INFO

Vvveb: Server-side request forgery in Vvveb via IPv6 bypass of validateUrl() in editor oEmbed proxy

CVE-2026-55232

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to version

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-918

安全公告2026-10-01 发布INFO

Vvveb: Stored XSS in Vvveb via sanitizeHTML() filter bypass using a quoted greater-than character

CVE-2026-55230

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to version

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-79

安全公告2026-10-01 发布INFO

Vvveb: Path traversal in Vvveb via sanitizeFileName() bypass enables arbitrary file read and delete through backup tools

CVE-2026-55231

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to version

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-22

安全公告2026-10-01 发布INFO

TP-Link TL-WR841N contains an authenticated OS command injection vulnerability in the IPv6 WAN...

CVE-2026-102294

TP-Link TL-WR841N contains an authenticated OS command injection vulnerability in the IPv6 WAN configuration. A crafted