#advisory

共收录 23717 条相关情报。

← 返回所有主题
安全公告2026-08-30 发布INFO

A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. Affected is an...

CVE-2026-82540

A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the fi

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-30 发布INFO

A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. Affected by...

CVE-2026-82541

A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-30 发布INFO

A vulnerability was determined in TOTOLINK A720R 4.1.5cu.630_B20250509. This impacts the function...

CVE-2026-82539

A vulnerability was determined in TOTOLINK A720R 4.1.5cu.630_B20250509. This impacts the function setMacFilterRules of t

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-30 发布INFO

A vulnerability was identified in Beetel 450TC3 01.00.00_01. This vulnerability affects unknown...

CVE-2026-82488

A vulnerability was identified in Beetel 450TC3 01.00.00_01. This vulnerability affects unknown code of the component Us

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-30 发布INFO

A vulnerability was found in SiteServer SSCMS 7.4.0. Affected by this issue is some unknown...

CVE-2026-82486

A vulnerability was found in SiteServer SSCMS 7.4.0. Affected by this issue is some unknown functionality of the compone

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-30 发布INFO

A vulnerability was determined in Beetel 450TC3 01.00.00_01. This affects an unknown part....

CVE-2026-82487

A vulnerability was determined in Beetel 450TC3 01.00.00_01. This affects an unknown part. Executing a manipulation can

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-30 发布INFO

Pake arbitrary file write via unsanitized download_file filename

CVE-2026-82635

Pake before 3.13.1 joins the JavaScript-supplied filename for the download_file Tauri command onto the user's Downloads

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-08-30 发布INFO

exists/2 predicate silently dropped on limited relationships with a parent() filter in AshSql

CVE-2026-77454

Incorrect Authorization vulnerability in ash-project ash_sql allows a caller to bypass a scoping or authorization filter

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-08-30 发布INFO

Same-named aggregates with differing filters are conflated in AshSql

CVE-2026-81316

Incorrect Authorization vulnerability in ash-project ash_sql allows a caller to receive an aggregate value computed over

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-08-30 发布INFO

Distinct-query aggregate drops the tenant schema prefix, leaking across tenants in AshSql

CVE-2026-81318

Incorrect Authorization vulnerability in ash-project ash_sql allows a caller in a schema-based multitenant application t

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-08-30 发布INFO

Unescaped backslash allows LIKE wildcard injection in AshSql string search

CVE-2026-78691

Improper Neutralization of Special Elements in Data Query Logic vulnerability in ash-project ash_sql allows a user who s

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-08-30 发布INFO

SQL string_trim removes only spaces, diverging from in-memory trimming in AshSql

CVE-2026-80227

Incorrect Comparison vulnerability in ash-project ash_sql allows a user to pad a string field with tab, newline, carriag

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-08-30 发布INFO

Unbounded handle_error recursion enables denial of service in AshOban triggers

CVE-2026-78228

Uncontrolled Recursion vulnerability in ash-project ash_oban allows a user who can drive a trigger's on_error action to

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-08-30 发布INFO

Job argument injection via :args overrides primary_key and tenant in AshOban

CVE-2026-78038

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in ash-project ash_oban all

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-08-30 发布INFO

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Affected by this...

CVE-2026-82485

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unkn

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-30 发布INFO

A security vulnerability has been detected in coppermine-gallery Coppermine Photo Gallery up to 1...

CVE-2026-82482

A security vulnerability has been detected in coppermine-gallery Coppermine Photo Gallery up to 1.6.28. This affects an

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-30 发布INFO

The Really Simple Security WordPress plugin before 9.8.0 does not check that the user is allowed...

CVE-2026-81766

The Really Simple Security WordPress plugin before 9.8.0 does not check that the user is allowed to install Really Simp

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-30 发布INFO

The Groundhogg — CRM, Newsletters, and Marketing Automation WordPress plugin before 4.5.13 does...

CVE-2026-81660

The Groundhogg — CRM, Newsletters, and Marketing Automation WordPress plugin before 4.5.13 does not validate or escape v

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-30 发布INFO

A flaw has been found in itsourcecode Sales and Inventory System 1.0. Affected is an unknown...

CVE-2026-82484

A flaw has been found in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-30 发布INFO

A vulnerability was detected in coppermine-gallery Coppermine Photo Gallery up to 1.6.28. This...

CVE-2026-82483

A vulnerability was detected in coppermine-gallery Coppermine Photo Gallery up to 1.6.28. This impacts an unknown functi

历史摘要 · 未重新核验 · GitHub Advisory