#advisory

共收录 23507 条相关情报。

← 返回所有主题
安全公告2026-08-26 发布INFO

A stack-based buffer overflow vulnerability exists in BlueZ, the Linux Bluetooth protocol stack....

CVE-2026-80186

A stack-based buffer overflow vulnerability exists in BlueZ, the Linux Bluetooth protocol stack. A remote user within Bl

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-26 发布INFO

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting")...

CVE-2026-16638

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Media Folde

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-26 发布INFO

BlueZ sdp-xml.c type confusion via RegisterProfile(ServiceRecord) can crash bluetoothd (local DoS...

CVE-2026-80185

BlueZ sdp-xml.c type confusion via RegisterProfile(ServiceRecord) can crash bluetoothd (local DoS): a crafted nested Ser

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-26 发布INFO

Incorrect Authorization vulnerability in Drupal Webform REST allows Forceful Browsing. This issue...

CVE-2026-16644

Incorrect Authorization vulnerability in Drupal Webform REST allows Forceful Browsing. This issue affects Webform REST v

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-26 发布INFO

Vulnerability in Drupal Email Login OTP. This issue affects Email Login OTP versions: *.*.

CVE-2026-16642

Vulnerability in Drupal Email Login OTP. This issue affects Email Login OTP versions: *.*.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-26 发布INFO

In OpenStack Keystone before 29.0.3, tokens obtained via delegated authentication mechanisms ...

CVE-2026-80184

In OpenStack Keystone before 29.0.3, tokens obtained via delegated authentication mechanisms (OAuth1 access tokens, appl

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-26 发布INFO

In OpenStack Keystone before 29.0.3, tokens obtained via OAuth1 access token, application...

CVE-2026-80182

In OpenStack Keystone before 29.0.3, tokens obtained via OAuth1 access token, application credential, or trust-scoped au

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-26 发布INFO

A vulnerability was identified in code-projects Simple Inventory System 1.0. This vulnerability...

CVE-2026-79845

A vulnerability was identified in code-projects Simple Inventory System 1.0. This vulnerability affects unknown code of

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-26 发布INFO

A vulnerability was found in SililaWijesinghe Food Ordering System up to...

CVE-2026-79804

A vulnerability was found in SililaWijesinghe Food Ordering System up to ba314e897e3365600461e5ea59432e39ceaa0fa5. Affec

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-26 发布INFO

Authentication Bypass by Capture-replay vulnerability in Apache Tomcat's DIGEST authenticator. If...

CVE-2026-65905

Authentication Bypass by Capture-replay vulnerability in Apache Tomcat's DIGEST authenticator. If, before windowSize req

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-26 发布INFO

Insufficient Session Expiration vulnerability in Apache Tomcat meant that if the session ID for...

CVE-2026-73180

Insufficient Session Expiration vulnerability in Apache Tomcat meant that if the session ID for an authenticated HTTP se

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-26 发布INFO

Improper Authorization vulnerability in Apache Tomcat cause by security-role-ref definitions...

CVE-2026-66422

Improper Authorization vulnerability in Apache Tomcat cause by security-role-ref definitions being incorrectly used as r

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-26 发布INFO

Punk::Plugin::TOTP versions before 0.05 for Perl allow the second-factor attempt limit to be...

CVE-2026-78655

Punk::Plugin::TOTP versions before 0.05 for Perl allow the second-factor attempt limit to be reset by replaying an earli

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-26 发布INFO

Punk::Plugin::TOTP versions before 0.05 for Perl accept another account's recovery code at the...

CVE-2026-78619

Punk::Plugin::TOTP versions before 0.05 for Perl accept another account's recovery code at the two-factor challenge beca

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-26 发布INFO

Incorrect Authorization vulnerability in Apache Tomcat's FORM authentication process allows the...

CVE-2026-68525

Incorrect Authorization vulnerability in Apache Tomcat's FORM authentication process allows the bypassing of a security

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-26 发布INFO

Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Apache Tomcat when creating...

CVE-2026-65183

Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Apache Tomcat when creating unix domain sockets allow

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-26 发布INFO

Improper Access Control, Incorrect Authorization vulnerability in Apache Tomcat leads to security...

CVE-2026-65182

Improper Access Control, Incorrect Authorization vulnerability in Apache Tomcat leads to security constraint bypass if a

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-26 发布INFO

Off-by-one Error vulnerability in Apache Tomcat impacting the [N] flag on the rewrite valves...

CVE-2026-65927

Off-by-one Error vulnerability in Apache Tomcat impacting the [N] flag on the rewrite valves causes rewrite processing t

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-26 发布INFO

Improper Input Validation vulnerability in Apache Tomcat due to incomplete fix for CVE-2026-32990...

CVE-2026-65637

Improper Input Validation vulnerability in Apache Tomcat due to incomplete fix for CVE-2026-32990. This issue affects

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-26 发布INFO

Uncontrolled Resource Consumption vulnerability in Apache Tomcat via an allocation leak in the...

CVE-2026-68763

Uncontrolled Resource Consumption vulnerability in Apache Tomcat via an allocation leak in the HTTP/2 backlog tracking w

历史摘要 · 未重新核验 · GitHub Advisory