#advisory

共收录 23093 条相关情报。

← 返回所有主题
漏洞预警2026-10-28 发布HIGH

Xibo is an open source digital signage platform with a web content management system and Windows display player software. Prior to 4.4.3, missing access-control checks on `PUT/D...

CVE-2026-52729

Xibo is an open source digital signage platform with a web content management system and Windows display player software

来源摘录 · NVD / OSV.dev

漏洞预警2026-10-28 发布MEDIUM

Xibo is an open source digital signage platform with a web content management system and Windows display player software. Prior to 4.4.3, missing access-control checks on `GET /...

CVE-2026-50541

Xibo is an open source digital signage platform with a web content management system and Windows display player software

来源摘录 · NVD / OSV.dev

漏洞预警2026-10-28 发布INFO

Allocation of Resources Without Limits or Throttling vulnerability in the HTTP/2 request body reader of mtrudel bandit allows an unauthenticated remote attacker to exhaust serve...

CVE-2026-116078

Allocation of Resources Without Limits or Throttling vulnerability in the HTTP/2 request body reader of mtrudel bandit a

来源摘录 · NVD / OSV.dev

漏洞预警2026-10-28 发布INFO

A use-after-free caused by lack of lifecycle management when adding / removing XInput master devices in X.org X Server before 21.1.25 and XWayland before 24.1.14 could be used b...

CVE-2026-93516

A use-after-free caused by lack of lifecycle management when adding / removing XInput master devices in X.org X Server b

历史摘要 · 未重新核验 · NVD / OSV.dev

漏洞预警2026-10-28 发布INFO

A use-after-free in present_clear_window_notifies() in the X.org X Server before 21.1.25 and X Wayland before 24.1.14 could be used by malicious X clients to crash or potential...

CVE-2026-93515

A use-after-free in present_clear_window_notifies() in the X.org X Server before 21.1.25 and X Wayland before 24.1.14 c

历史摘要 · 未重新核验 · NVD / OSV.dev

漏洞预警2026-10-28 发布MEDIUM

Waline is a comment system with backend support. Prior to version 1.41.1, the login endpoint POST /api/token reads the email field from the request body without checking its typ...

CVE-2026-55369

Waline is a comment system with backend support. Prior to version 1.41.1, the login endpoint POST /api/token reads the e

来源摘录 · NVD / OSV.dev

漏洞预警2026-10-28 发布CRITICAL

Topluyo is a social networking platform. A vulnerability exists in Topluyo Desktop for Linux prior to version 2026.9.2410 where user-controlled URLs are unsafely processed, lead...

CVE-2026-115904

Topluyo is a social networking platform. A vulnerability exists in Topluyo Desktop for Linux prior to version 2026.9.241

来源摘录 · NVD / OSV.dev

漏洞预警2026-10-28 发布HIGH

Axel Download Accelerator 2.17.14 and earlier performs URL percent-decoding (http_decode()) on the output filename after the URL has been parsed and the filename component extra...

CVE-2026-118485

Axel Download Accelerator 2.17.14 and earlier performs URL percent-decoding (http_decode()) on the output filename after

来源摘录 · NVD / OSV.dev

漏洞预警2026-10-28 发布CRITICAL

The che-machine-exec service constructs a shell command by concatenating user-controlled input (the username and namespace fields from the /exec/init and /exec/config JSON endpo...

CVE-2026-114278

The che-machine-exec service constructs a shell command by concatenating user-controlled input (the username and namespa

来源摘录 · NVD / OSV.dev

漏洞预警2026-10-28 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: Don't reset VMBus connection state on error/exit paths In two places, current code forces vmbu...

CVE-2026-99216

In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: Don't reset VMBus connection state on

来源摘录 · NVD / OSV.dev

漏洞预警2026-10-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: power: supply: core: prevent unregistering a power supply while a callback runs Once a power supply is regi...

CVE-2026-99215

In the Linux kernel, the following vulnerability has been resolved: power: supply: core: prevent unregistering a power

历史摘要 · 未重新核验 · NVD / OSV.dev

漏洞预警2026-10-28 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: vsock: treat TCP_CLOSING as once-established Handle the TCP_ESTABLISHED -> TCP_CLOSING transition on OP_RST...

CVE-2026-99213

In the Linux kernel, the following vulnerability has been resolved: vsock: treat TCP_CLOSING as once-established Handl

来源摘录 · NVD / OSV.dev

漏洞预警2026-10-28 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: net/rds: don't let the rdma_cm destroy an id RDS still owns on route failure rds_rdma_cm_event_handler_cmn(...

CVE-2026-99212

In the Linux kernel, the following vulnerability has been resolved: net/rds: don't let the rdma_cm destroy an id RDS st

来源摘录 · NVD / OSV.dev

漏洞预警2026-10-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: accel/rocket: clear rdev on device init failure rocket_probe() stores the return value from rocket_device_i...

CVE-2026-99210

In the Linux kernel, the following vulnerability has been resolved: accel/rocket: clear rdev on device init failure ro

历史摘要 · 未重新核验 · NVD / OSV.dev

漏洞预警2026-10-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: drm/xe: skip eviction of a BO with no resource xe_evict_flags() switches on tbo->resource->mem_type to choo...

CVE-2026-99209

In the Linux kernel, the following vulnerability has been resolved: drm/xe: skip eviction of a BO with no resource xe_

历史摘要 · 未重新核验 · NVD / OSV.dev

漏洞预警2026-10-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: drm/xe/oa: Zero OA buffer at allocation ttm_bo_type_kernel BOs are not guaranteed to be zeroed on allocatio...

CVE-2026-99208

In the Linux kernel, the following vulnerability has been resolved: drm/xe/oa: Zero OA buffer at allocation ttm_bo_typ

历史摘要 · 未重新核验 · NVD / OSV.dev

漏洞预警2026-10-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: scsi: target: Disable interrupts while holding delayed_cmd_lock target_do_delayed_work() takes dev->delayed...

CVE-2026-99207

In the Linux kernel, the following vulnerability has been resolved: scsi: target: Disable interrupts while holding dela

历史摘要 · 未重新核验 · NVD / OSV.dev

漏洞预警2026-10-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: sched/core: Call wakeup_preempt() for queued tasks during class change Paul reported recent RCU changes exp...

CVE-2026-99205

In the Linux kernel, the following vulnerability has been resolved: sched/core: Call wakeup_preempt() for queued tasks

历史摘要 · 未重新核验 · NVD / OSV.dev

漏洞预警2026-10-28 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: pipe: preserve existing fasync readers on writer setup failure F_SETFL and FIOASYNC decide whether to invok...

CVE-2026-99203

In the Linux kernel, the following vulnerability has been resolved: pipe: preserve existing fasync readers on writer se

来源摘录 · NVD / OSV.dev

漏洞预警2026-10-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: net: hisilicon: hisi_femac: Move setting of netops to fix crash hisi_femac_drv_probe() connects the PHY bef...

CVE-2026-99200

In the Linux kernel, the following vulnerability has been resolved: net: hisilicon: hisi_femac: Move setting of netops

历史摘要 · 未重新核验 · NVD / OSV.dev