#advisory

共收录 23334 条相关情报。

← 返回所有主题
安全公告2026-09-27 发布INFO

Contrast is a Kubernetes runtime for confidential containers. In versions before 1.12.1, the...

CVE-2025-71422

Contrast is a Kubernetes runtime for confidential containers. In versions before 1.12.1, the secure persistent volume fe

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-27 发布INFO

Heym before 0.0.53 Remote Code Execution via eval() Sandbox Escape

CVE-2026-101049 · CVE-2026-101050 · CVE-2026-100865

Heym before 0.0.53 evaluates workflow condition expressions using Python's eval() with insufficient sandboxing in the wo

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-27 发布INFO

AzuraCast before 0.23.8 Command Injection via Streamer Username

CVE-2026-100852

AzuraCast before 0.23.8 contains a command injection vulnerability in the Liquidsoap config generation for live recordin

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-27 发布INFO

MONAI through 1.6.0 PersistentDataset Remote Code Execution via Pickle Cache

CVE-2026-100841

In MONAI 1.6.0, PersistentDataset (monai/data/dataset.py) explicitly rejects the combination track_meta=True with weight

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-27 发布INFO

A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project up to...

CVE-2026-100739

A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-26 发布INFO

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via...

CVE-2026-94399

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-26 发布INFO

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via...

CVE-2026-94397

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-26 发布INFO

Uncontrolled Resource Consumption (CWE-400) in Kibana can lead denial of service via Excessive...

CVE-2026-94400

Uncontrolled Resource Consumption (CWE-400) in Kibana can lead denial of service via Excessive Allocation (CAPEC-130)

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-26 发布INFO

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via...

CVE-2026-94408

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-26 发布INFO

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via...

CVE-2026-94398

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-26 发布INFO

Unintended Proxy or Intermediary ('Confused Deputy') (CWE-441) in Kibana Agent Builder can lead...

CVE-2026-72668

Unintended Proxy or Intermediary ('Confused Deputy') (CWE-441) in Kibana Agent Builder can lead to privilege escalation.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-26 发布INFO

The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to Arbitrary File Upload...

CVE-2026-82901

The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to Arbitrary File Upload due to insufficient file

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-26 发布INFO

Missing Authorization (CWE-862) in Kibana can lead to unauthorized deletion of data via...

CVE-2026-78582

Missing Authorization (CWE-862) in Kibana can lead to unauthorized deletion of data via Exploiting Incorrectly Configure

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-26 发布INFO

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via...

CVE-2026-94396

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-26 发布INFO

Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to unauthorized...

CVE-2026-72662

Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to unauthorized disclosure, modification,

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-26 发布INFO

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via...

CVE-2026-82294

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAP

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-26 发布INFO

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via...

CVE-2026-82300

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAP

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-26 发布INFO

The miniOrange OTP Login, Verification and SMS Notifications plugin for WordPress is vulnerable...

CVE-2026-85984

The miniOrange OTP Login, Verification and SMS Notifications plugin for WordPress is vulnerable to Authentication Bypass

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-26 发布INFO

The Groups – Memberships and Access Control plugin for WordPress is vulnerable to Privilege...

CVE-2026-77203

The Groups – Memberships and Access Control plugin for WordPress is vulnerable to Privilege Escalation in all versions u

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-26 发布INFO

Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature...

CVE-2026-94132

Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in AcyMailing Enterpri

历史摘要 · 未重新核验 · GitHub Advisory