#advisory

共收录 23494 条相关情报。

← 返回所有主题
安全公告2026-09-20 发布INFO

Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after...

CVE-2026-94055

Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-20 发布INFO

Mistral Vibe before 2.25.5 contains a remote code execution vulnerability in the worktree...

CVE-2026-93993

Mistral Vibe before 2.25.5 contains a remote code execution vulnerability in the worktree creation process that executes

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-20 发布INFO

Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent...

CVE-2026-94057

Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent message, and instead dep

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-20 发布INFO

Gopeed through 2.0.0-beta.3 contains a path traversal vulnerability in archive extraction that...

CVE-2026-93992

Gopeed through 2.0.0-beta.3 contains a path traversal vulnerability in archive extraction that allows attackers to write

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-20 发布INFO

Expat through 2.8.4 fails to validate low surrogates following high surrogates in UTF-16 input,...

CVE-2026-93990

Expat through 2.8.4 fails to validate low surrogates following high surrogates in UTF-16 input, allowing malformed UTF-1

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-20 发布INFO

QloApps through 1.7.0 contains a path traversal vulnerability in the getEmailHTML action of admin...

CVE-2026-93988

QloApps through 1.7.0 contains a path traversal vulnerability in the getEmailHTML action of admin/ajax.php that allows a

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-20 发布INFO

vLLM through 0.29.0 fails to properly validate bad_words token indices against the model's...

CVE-2026-93989

vLLM through 0.29.0 fails to properly validate bad_words token indices against the model's generation output width in Sa

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-20 发布INFO

A vulnerability was detected in grimmory-tools grimmory up to 3.3.3/3.4.1. Affected by this...

CVE-2026-93955

A vulnerability was detected in grimmory-tools grimmory up to 3.3.3/3.4.1. Affected by this vulnerability is the functio

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-20 发布INFO

A flaw has been found in olivier-ls PHP-FTS up to 1.1.2. Affected by this issue is the function...

CVE-2026-93956

A flaw has been found in olivier-ls PHP-FTS up to 1.1.2. Affected by this issue is the function SearchEngine::buildHighl

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-20 发布INFO

Argo Workflows versions 4.1.0 through 4.1.3 contain an authorization bypass vulnerability in...

CVE-2026-93991

Argo Workflows versions 4.1.0 through 4.1.3 contain an authorization bypass vulnerability in ListArchivedWorkflows that

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-20 发布INFO

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-89155

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-20 发布INFO

A security vulnerability has been detected in grimmory-tools grimmory up to 3.3.3/3.4.1. Affected...

CVE-2026-93954

A security vulnerability has been detected in grimmory-tools grimmory up to 3.3.3/3.4.1. Affected is the function AppSet

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-19 发布INFO

Pod::Text versions before 6.1.1 for Perl allow CPU and memory exhaustion formatting a POD...

CVE-2026-82560

Pod::Text versions before 6.1.1 for Perl allow CPU and memory exhaustion formatting a POD document whose =over nesting d

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-19 发布INFO

A flaw was found in the Admin REST API of Keycloak, an open-source identity and access management...

CVE-2026-94001

A flaw was found in the Admin REST API of Keycloak, an open-source identity and access management solution. The endpoint

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-19 发布INFO

A flaw was found in the OIDC protocol implementation of Keycloak, an open-source identity and...

CVE-2026-93999

A flaw was found in the OIDC protocol implementation of Keycloak, an open-source identity and access management solution

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-19 发布INFO

A flaw was found in the Admin REST API of Keycloak, an open-source identity and access management...

CVE-2026-94000

A flaw was found in the Admin REST API of Keycloak, an open-source identity and access management solution. The issue oc

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-19 发布INFO

Pod::Text versions before 6.1.1 for Perl allow CPU and memory exhaustion formatting a POD document whose =over nesting drives the margin to the output width

CVE-2026-82560

Pod::Text versions before 6.1.1 for Perl allow CPU and memory exhaustion formatting a POD document whose =over nesting d

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-19 发布INFO

OpenPanel js-runtime through commit bad75bdd contains a sandbox escape vulnerability in the...

CVE-2026-93985

OpenPanel js-runtime through commit bad75bdd contains a sandbox escape vulnerability in the JavaScript webhook template

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-19 发布INFO

OpenPanel through commit bad75bdd writes Model Context Protocol authentication tokens from URL...

CVE-2026-93982

OpenPanel through commit bad75bdd writes Model Context Protocol authentication tokens from URL query parameters to plain

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-19 发布INFO

rclone versions 1.56.0 through 1.75.0 contain a path traversal vulnerability in the `rclone serve...

CVE-2026-93987

rclone versions 1.56.0 through 1.75.0 contain a path traversal vulnerability in the `rclone serve docker` volume plugin.

历史摘要 · 未重新核验 · GitHub Advisory