#advisory

共收录 23334 条相关情报。

← 返回所有主题
安全公告2026-09-18 发布INFO

A vulnerability was found in Totolink A3002MU Hh-B20211125.1046. This affects the function...

CVE-2026-93738

A vulnerability was found in Totolink A3002MU Hh-B20211125.1046. This affects the function formSchedule of the file /boa

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-18 发布INFO

A flaw was found in Netty's `netty-codec-http` component. A remote attacker could exploit this...

CVE-2026-93574

A flaw was found in Netty's `netty-codec-http` component. A remote attacker could exploit this vulnerability by sending

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-18 发布INFO

A flaw was found in Netty's HTTP/1 decoder. Incomplete validation of malformed Transfer-Encoding...

CVE-2026-93562

A flaw was found in Netty's HTTP/1 decoder. Incomplete validation of malformed Transfer-Encoding headers allows a remote

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-18 发布INFO

The WP Cloud Plugins Use-your-Drive, Out-of-the-Box, Share-one-Drive, and Lets-Box plugins for...

CVE-2026-93031

The WP Cloud Plugins Use-your-Drive, Out-of-the-Box, Share-one-Drive, and Lets-Box plugins for WordPress are vulnerable

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-18 发布INFO

LightLLM through 1.2.0 contains an authentication bypass vulnerability in the /pd_register...

CVE-2026-93839

LightLLM through 1.2.0 contains an authentication bypass vulnerability in the /pd_register WebSocket endpoint that allow

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-18 发布INFO

IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary code due to...

CVE-2026-84108

IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary code due to improper neutralization

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-18 发布INFO

Cotonti through 1.0.0 derives password recovery validation tokens from md5(microtime()) in users...

CVE-2026-93868

Cotonti through 1.0.0 derives password recovery validation tokens from md5(microtime()) in users.passrecover.php, creati

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-18 发布INFO

vLLM through 0.29.0 contains a memory corruption vulnerability in the Triton _bincount_kernel...

CVE-2026-93841

vLLM through 0.29.0 contains a memory corruption vulnerability in the Triton _bincount_kernel where prompt token IDs ind

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-18 发布INFO

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to obtain sensitive...

CVE-2026-84105

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to obtain sensitive information due to imp

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-18 发布INFO

Cotonti through 1.0.0 fails to validate redirect destinations in page bodies prefixed with redir:...

CVE-2026-93871

Cotonti through 1.0.0 fails to validate redirect destinations in page bodies prefixed with redir:, allowing authenticate

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-18 发布INFO

Cotonti through 1.0.0 fails to validate anti-CSRF tokens in the contact plugin submission handler...

CVE-2026-93873

Cotonti through 1.0.0 fails to validate anti-CSRF tokens in the contact plugin submission handler, allowing attackers to

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-18 发布INFO

vLLM before 0.29.0 validates allowed_token_ids against tokenizer length instead of model output...

CVE-2026-93840

vLLM before 0.29.0 validates allowed_token_ids against tokenizer length instead of model output logits width in Sampling

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-18 发布INFO

IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions...

CVE-2026-84241

IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to improper authoriz

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-18 发布INFO

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to obtain sensitive...

CVE-2026-84239

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to obtain sensitive information due to imp

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-18 发布INFO

Cotonti through 1.0.0 fails to validate anti-CSRF tokens in the ratings plugin AJAX handler,...

CVE-2026-93870

Cotonti through 1.0.0 fails to validate anti-CSRF tokens in the ratings plugin AJAX handler, allowing attackers to forge

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-18 发布INFO

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute...

CVE-2026-84106

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-18 发布INFO

Cotonti through 1.0.0 contains an open redirect vulnerability in the cot_url_check() function...

CVE-2026-93869

Cotonti through 1.0.0 contains an open redirect vulnerability in the cot_url_check() function that validates redirect de

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-18 发布INFO

A flaw was found in cockpit-files. A local unprivileged attacker can exploit a race condition...

CVE-2026-91205

A flaw was found in cockpit-files. A local unprivileged attacker can exploit a race condition during directory creation

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-18 发布INFO

IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary OS commands...

CVE-2026-84085

IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary OS commands due to improper neutral

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-18 发布INFO

Cotonti 1.0.0 passes the base64-decoded cb parameter to unserialize() without allowed_classes...

CVE-2026-93872

Cotonti 1.0.0 passes the base64-decoded cb parameter to unserialize() without allowed_classes restriction in the comment

历史摘要 · 未重新核验 · GitHub Advisory