#advisory

共收录 23093 条相关情报。

← 返回所有主题
安全公告2026-10-27 发布INFO

llama.cpp b5899 before b10261 contains a heap out-of-bounds write vulnerability in...

CVE-2026-116816

llama.cpp b5899 before b10261 contains a heap out-of-bounds write vulnerability in llm_tokenizer_plamo2::build that allo

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-27 发布INFO

llama.cpp b10398 before b11301 contains an integer overflow vulnerability in...

CVE-2026-116829

llama.cpp b10398 before b11301 contains an integer overflow vulnerability in gguf_init_from_reader that allows attackers

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-27 发布INFO

YesWiki before 4.7.0 contains a server-side request forgery vulnerability in the Bazar CSV import...

CVE-2026-116827

YesWiki before 4.7.0 contains a server-side request forgery vulnerability in the Bazar CSV import copyUrlToLocalFile() f

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-27 发布INFO

YesWiki before 4.7.0 contains a server-side request forgery vulnerability in DuplicationManager:...

CVE-2026-116826

YesWiki before 4.7.0 contains a server-side request forgery vulnerability in DuplicationManager::downloadFile() that all

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-27 发布INFO

YesWiki before 4.7.0 contains a stored cross-site scripting vulnerability in handlers/page...

CVE-2026-116824

YesWiki before 4.7.0 contains a stored cross-site scripting vulnerability in handlers/page/referrers_sites.php that allo

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-27 发布INFO

YesWiki from 4.6.2 before 4.7.0 lacks replay protection in HttpSignatureService::verifySignature(...

CVE-2026-116825

YesWiki from 4.6.2 before 4.7.0 lacks replay protection in HttpSignatureService::verifySignature(), which never validate

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-27 发布INFO

YesWiki before 4.7.0 contains a sql injection vulnerability in despam.php where the from...

CVE-2026-116828

YesWiki before 4.7.0 contains a sql injection vulnerability in despam.php where the from parameter is escaped but placed

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-27 发布INFO

YesWiki before 4.7.0 contains a read-ACL bypass in AclService::updateRequestWithACL, which...

CVE-2026-116821

YesWiki before 4.7.0 contains a read-ACL bypass in AclService::updateRequestWithACL, which interpolates usernames into S

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-27 发布INFO

YesWiki from 4.6.0 before 4.7.0 contains an information disclosure vulnerability that allows...

CVE-2026-116820

YesWiki from 4.6.0 before 4.7.0 contains an information disclosure vulnerability that allows unauthenticated attackers t

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-27 发布INFO

YesWiki before 4.7.0 contains a reflected cross-site scripting vulnerability that allows...

CVE-2026-116823

YesWiki before 4.7.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to in

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-27 发布INFO

YesWiki before 4.7.0 contains a path traversal vulnerability in BazarListeAction that allows...

CVE-2026-116822

YesWiki before 4.7.0 contains a path traversal vulnerability in BazarListeAction that allows unauthenticated attackers t

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-27 发布INFO

OpenPanel before 3.0.0 contains an information disclosure vulnerability that allows read-level...

CVE-2026-116819

OpenPanel before 3.0.0 contains an information disclosure vulnerability that allows read-level project members to obtain

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-27 发布INFO

OpenPanel before 3.0.0 contains an unauthenticated ClickHouse sql injection vulnerability that...

CVE-2026-116818

OpenPanel before 3.0.0 contains an unauthenticated ClickHouse sql injection vulnerability that allows remote attackers t

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-27 发布INFO

OpenPanel before 3.0.0 contains a sandbox escape vulnerability in the js-runtime validator that...

CVE-2026-116811

OpenPanel before 3.0.0 contains a sandbox escape vulnerability in the js-runtime validator that allows a project member

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-27 发布INFO

OpenPanel before 3.0.0 contains an improper escaping vulnerability in sankey.service.ts that...

CVE-2026-116815

OpenPanel before 3.0.0 contains an improper escaping vulnerability in sankey.service.ts that allows authenticated projec

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-27 发布INFO

OpenPanel before 3.0.0 contains an sql injection vulnerability that allows authenticated users to...

CVE-2026-116808

OpenPanel before 3.0.0 contains an sql injection vulnerability that allows authenticated users to read cross-tenant data

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-27 发布INFO

OpenPanel before 3.0.0 contains a sql injection vulnerability in profileColumnAccess in cohort...

CVE-2026-116812

OpenPanel before 3.0.0 contains a sql injection vulnerability in profileColumnAccess in cohort.service.ts that allows pr

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-27 发布INFO

OpenPanel before 3.0.0 contains a missing authentication vulnerability that allows...

CVE-2026-116817

OpenPanel before 3.0.0 contains a missing authentication vulnerability that allows unauthenticated attackers to access t

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-27 发布INFO

OpenPanel before 3.0.0 contains a missing authorization vulnerability in the onboarding.project...

CVE-2026-116806

OpenPanel before 3.0.0 contains a missing authorization vulnerability in the onboarding.project tRPC mutation that allow

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-27 发布INFO

OpenPanel before 3.0.0 contains a missing authorization vulnerability that allows unauthenticated...

CVE-2026-116810

OpenPanel before 3.0.0 contains a missing authorization vulnerability that allows unauthenticated attackers to read any

历史摘要 · 未重新核验 · GitHub Advisory