#advisory

共收录 23508 条相关情报。

← 返回所有主题
安全公告2026-08-21 发布INFO

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2019-25715

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-21 发布INFO

The Brushfire platform's video content streaming application (https://online.brushfire.com)...

CVE-2026-75928

The Brushfire platform's video content streaming application (https://online.brushfire.com) exposes database path in req

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-21 发布INFO

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2025-3127

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-21 发布INFO

In ONNX before 1.21.0, the 'save_external_data' function builds the external-data file path from...

CVE-2026-49114

In ONNX before 1.21.0, the 'save_external_data' function builds the external-data file path from the model's external_da

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-21 发布INFO

A vulnerability in the Calix EXOS firmware for the GS7 XGS (GS5239XG) residential router allows...

CVE-2026-75501

A vulnerability in the Calix EXOS firmware for the GS7 XGS (GS5239XG) residential router allows unauthenticated remote a

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-21 发布INFO

DJI drones transmit DUML (DJI Universal Markup Language) protocol messages over BLE (Bluetooth...

CVE-2026-77812

DJI drones transmit DUML (DJI Universal Markup Language) protocol messages over BLE (Bluetooth Low Energy) without encry

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-21 发布INFO

Paperclip before 0.3.1 in default local_trusted mode fails to validate Host headers, allowing...

CVE-2026-77087

Paperclip before 0.3.1 in default local_trusted mode fails to validate Host headers, allowing attackers to execute arbit

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-21 发布INFO

to_abs_path in scripts/iib/tool.py normalised the requested path with os.path.normpath, which...

CVE-2026-77815

to_abs_path in scripts/iib/tool.py normalised the requested path with os.path.normpath, which collapses dot segments but

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-21 发布INFO

is_path_trusted in scripts/iib/api.py compares the requested path against each allowed parent...

CVE-2026-77814

is_path_trusted in scripts/iib/api.py compares the requested path against each allowed parent directory with path.starts

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-21 发布INFO

vault token disclosure via unvalidated postMessage vulnerability in N-able PassPortal allows...

CVE-2026-15580

vault token disclosure via unvalidated postMessage vulnerability in N-able PassPortal allows Authentication Abuse. This

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-21 发布INFO

Joomla Extension - yootheme.com - Unauthenticated arbitrary directory listing via the Gallery...

CVE-2026-76611

Joomla Extension - yootheme.com - Unauthenticated arbitrary directory listing via the Gallery element in Zoo < 4.1.66.

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-21 发布HIGH

Incus is a system container and virtual machine manager. Prior to version 7.2.0, missing authorization checks exist for instance copying where an attacker knowing the name of a ...

CVE-2026-55622

Incus is a system container and virtual machine manager. Prior to version 7.2.0, missing authorization checks exist for

来源摘录 · NVD / OSV.dev

安全公告2026-08-21 发布INFO

【智能体开发平台 ADP】关于 youtu-mrc-standard 模型升级及切换安排的公告

【智能体开发平台 ADP】关于 youtu-mrc-standard 模型升级及切换安排的公告

历史摘要 · 未重新核验 · 腾讯云安全公告

安全公告2026-08-21 发布INFO

SPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code, as...

CVE-2026-77647

SPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-21 发布INFO

A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill and PTC...

CVE-2026-77645

A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill and PTC FlexPLM. The vulnerabili

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-21 发布INFO

Path traversal in apport-unpack in Canonical Apport before 2.36.0, 2.34.2, and 2.28.4 on Linux...

CVE-2026-77113

Path traversal in apport-unpack in Canonical Apport before 2.36.0, 2.34.2, and 2.28.4 on Linux allows an attacker to cre

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-21 发布INFO

Improper input validation and Exposure of sensitive information through data queries...

CVE-2026-16520

Improper input validation and Exposure of sensitive information through data queries vulnerability in Genians Genian NAC

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-21 发布INFO

A critical bypass access control vulnerability has been reported in PTC Windchill Risk and...

CVE-2026-77644

A critical bypass access control vulnerability has been reported in PTC Windchill Risk and Reliability (WRR) Enterprise

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-21 发布INFO

In OpenStack Glance through 32.0.0, the /v2/tasks API accepts type=import tasks that bypass...

CVE-2026-77648

In OpenStack Glance through 32.0.0, the /v2/tasks API accepts type=import tasks that bypass import_filtering_opts, allow

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-21 发布INFO

A Server-Side Request Forgery (SSRF) vulnerability has been reported in PTC Windchill PDMLink and...

CVE-2026-77646

A Server-Side Request Forgery (SSRF) vulnerability has been reported in PTC Windchill PDMLink and PTC FlexPLM. The vulne

历史摘要 · 未重新核验 · GitHub Advisory