#advisory

共收录 23530 条相关情报。

← 返回所有主题
安全公告2026-08-12 发布INFO

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0...

CVE-2026-11932

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Ident

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-12 发布INFO

CamaleonCMS contains a stored cross-site scripting vulnerability in the cama_contact_form plugin...

CVE-2026-73332

CamaleonCMS contains a stored cross-site scripting vulnerability in the cama_contact_form plugin that allows low-privile

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-12 发布INFO

CamaleonCMS contains a stored cross-site scripting vulnerability that allows authenticated low...

CVE-2026-73329

CamaleonCMS contains a stored cross-site scripting vulnerability that allows authenticated low-privileged users to execu

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-12 发布INFO

IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to arbitrary code execution...

CVE-2026-13094

IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to arbitrary code execution on Windows when install

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-12 发布INFO

CamaleonCMS 2.9.1 contains a server-side template injection vulnerability that allows...

CVE-2026-73330

CamaleonCMS 2.9.1 contains a server-side template injection vulnerability that allows authenticated administrators to ex

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-12 发布INFO

CamaleonCMS contains a missing authorization vulnerability that allows any authenticated low...

CVE-2026-73326

CamaleonCMS contains a missing authorization vulnerability that allows any authenticated low-privileged user to access a

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-12 发布INFO

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to privilege escalation...

CVE-2026-10543

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to privilege escalation with a specially crafted

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-12 发布INFO

A flaw was found in GStreamer gst-plugins-good (avidemux). In gst_avi_demux_riff_parse_vprp(),...

CVE-2026-73434

A flaw was found in GStreamer gst-plugins-good (avidemux). In gst_avi_demux_riff_parse_vprp(), the number of available g

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-12 发布INFO

CamaleonCMS 2.9.1 contains an authenticated SQL injection vulnerability that allows authenticated...

CVE-2026-73331

CamaleonCMS 2.9.1 contains an authenticated SQL injection vulnerability that allows authenticated attackers with post cr

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-12 发布INFO

A flaw was found in GStreamer gst-plugins-good (avidemux). When parsing FUJIFILM metadata in an...

CVE-2026-73433

A flaw was found in GStreamer gst-plugins-good (avidemux). When parsing FUJIFILM metadata in an AVI strd chunk, gst_avi_

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-12 发布INFO

A flaw was found in the cluster-curator-controller component. A local user, by creating a...

CVE-2026-73269

A flaw was found in the cluster-curator-controller component. A local user, by creating a ClusterCurator resource with a

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-12 发布INFO

A flaw was found in the cluster-curator-controller component of multicluster engine (MCE). A...

CVE-2026-73268

A flaw was found in the cluster-curator-controller component of multicluster engine (MCE). A tenant with create or updat

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-12 发布INFO

SiYuan versions before v3.7.4 fail to validate publish-password tier in getGraph and...

CVE-2026-72804

SiYuan versions before v3.7.4 fail to validate publish-password tier in getGraph and getLocalGraph endpoints, allowing a

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-12 发布INFO

SiYuan versions up to and including v3.7.2 (fixed in v3.7.4) contain an information disclosure...

CVE-2026-72808

SiYuan versions up to and including v3.7.2 (fixed in v3.7.4) contain an information disclosure vulnerability in the /api

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-12 发布INFO

SiYuan versions before v3.7.4 contain an authentication bypass vulnerability in the...

CVE-2026-72806

SiYuan versions before v3.7.4 contain an authentication bypass vulnerability in the FilterViewByPublishAccess filter tha

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-12 发布INFO

SiYuan versions before v3.7.4 fail to enforce publish-access checks in the getBlockAttrs and...

CVE-2026-72803

SiYuan versions before v3.7.4 fail to enforce publish-access checks in the getBlockAttrs and batchGetBlockAttrs endpoint

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-12 发布INFO

SiYuan versions <= v3.7.2 (patched in v3.7.4) contain an authentication bypass vulnerability in...

CVE-2026-72809

SiYuan versions <= v3.7.2 (patched in v3.7.4) contain an authentication bypass vulnerability in the kernel's CheckAuth f

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-12 发布INFO

SiYuan versions before v3.7.4 fail to enforce publish-access checks on getBlockBreadcrumb,...

CVE-2026-72805

SiYuan versions before v3.7.4 fail to enforce publish-access checks on getBlockBreadcrumb, getRefText, and getBlockTreeI

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-12 发布INFO

SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the...

CVE-2026-72802

SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the resolveAssetPath endpoint that retu

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-12 发布INFO

SiYuan versions before v3.7.4 contain a second-order SQL injection vulnerability in attribute...

CVE-2026-72807

SiYuan versions before v3.7.4 contain a second-order SQL injection vulnerability in attribute-view template columns that

历史摘要 · 未重新核验 · GitHub Advisory