#CVE

共收录 56389 条相关情报。

漏洞预警2026-11-01 发布LOW

A flaw has been found in Typemill up to 2.26.0. The impacted element is the function ControllerApiImage::saveImage of the file system/typemill/Models/SvgSanitizer.php. Executing...

CVE-2026-120218

A flaw has been found in Typemill up to 2.26.0. The impacted element is the function ControllerApiImage::saveImage of th

来源摘录 · NVD

#cve #cwe-79 #cwe-94

漏洞预警2026-11-01 发布MEDIUM

A vulnerability was detected in Delgan loguru 0.7.3. The affected element is the function AnsiParser.feed of the file loguru/_colorizer.py of the component ANSI Color-Markup Par...

CVE-2026-120217

A vulnerability was detected in Delgan loguru 0.7.3. The affected element is the function AnsiParser.feed of the file lo

来源摘录 · NVD

#cve #cwe-1333 #cwe-400

漏洞预警2026-11-01 发布CRITICAL

A flaw has been found in WAVLINK WL-WN530HG4B M_V260724. This impacts the function port_forward of the file /cgi-bin/wapi.cgi. This manipulation of the argument Name causes os c...

CVE-2026-120197

A flaw has been found in WAVLINK WL-WN530HG4B M_V260724. This impacts the function port_forward of the file /cgi-bin/wap

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-77 #cwe-78 #severity:high

漏洞预警2026-11-01 发布CRITICAL

A vulnerability was detected in WAVLINK WN579X3-D V250402. This affects the function port_forward of the file /cgi-bin/wapi.cgi. The manipulation of the argument Name results in...

CVE-2026-120196

A vulnerability was detected in WAVLINK WN579X3-D V250402. This affects the function port_forward of the file /cgi-bin/w

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-77 #cwe-78 #severity:high

漏洞预警2026-11-01 发布CRITICAL

A security vulnerability has been detected in WAVLINK WL-WN579A3-A 2026-03-10-94f93d4. The impacted element is the function set_wzdgwMesh of the file /cgi-bin/adm.cgi of the com...

CVE-2026-120195

A security vulnerability has been detected in WAVLINK WL-WN579A3-A 2026-03-10-94f93d4. The impacted element is the funct

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-77 #cwe-78 #severity:critical

漏洞预警2026-11-01 发布MEDIUM

A security vulnerability has been detected in Presenton up to 0.9.11-beta. This affects an unknown part of the file /app_data of the component Desktop Authentication Middleware....

CVE-2026-120192

A security vulnerability has been detected in Presenton up to 0.9.11-beta. This affects an unknown part of the file /app

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-200 #cwe-284 #severity:medium

漏洞预警2026-11-01 发布MEDIUM

imagecodecs 2023.1.23 through 2026.10.10 contains a stack-based buffer overflow vulnerability in the lossless JPEG Define Huffman Table parser in decode_jpegsof3(). Attackers ca...

CVE-2026-120252

imagecodecs 2023.1.23 through 2026.10.10 contains a stack-based buffer overflow vulnerability in the lossless JPEG Defin

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-121 #severity:medium

漏洞预警2026-11-01 发布MEDIUM

imagecodecs 2026.3.6 through 2026.10.10 contains an infinite loop vulnerability in ccitt_fax4_decode_size() that allows attackers to hang the calling process by supplying a craf...

CVE-2026-120251

imagecodecs 2026.3.6 through 2026.10.10 contains an infinite loop vulnerability in ccitt_fax4_decode_size() that allows

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-835 #severity:medium

漏洞预警2026-11-01 发布MEDIUM

OpenAlgo 1.0.0.29 before 2.0.3.1 contains an improper certificate validation vulnerability in utils/email_utils.py and utils/email_debug.py that disables TLS hostname and certif...

CVE-2026-120250

OpenAlgo 1.0.0.29 before 2.0.3.1 contains an improper certificate validation vulnerability in utils/email_utils.py and u

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-295 #severity:medium

漏洞预警2026-11-01 发布MEDIUM

Thelia Back-office Default Twig Template before 1.1.1 contains a cross-site request forgery vulnerability in the /admin/product/combinations/update and /admin/product/default-pr...

CVE-2026-120249

Thelia Back-office Default Twig Template before 1.1.1 contains a cross-site request forgery vulnerability in the /admin/

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-352 #severity:medium

漏洞预警2026-11-01 发布MEDIUM

Thelia before 3.1.1 contains a stored cross-site scripting vulnerability that allows authenticated back-office administrators with store update permission to inject scripts by u...

CVE-2026-120248

Thelia before 3.1.1 contains a stored cross-site scripting vulnerability that allows authenticated back-office administr

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-79 #severity:medium

漏洞预警2026-11-01 发布MEDIUM

FFmpeg 2.3 through 9.0.2 contains a use of uninitialized resource vulnerability in the Huffyuv decoder that allows attackers to leak heap memory into decoded pixels via short pa...

CVE-2026-120247

FFmpeg 2.3 through 9.0.2 contains a use of uninitialized resource vulnerability in the Huffyuv decoder that allows attac

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-908 #severity:medium

漏洞预警2026-11-01 发布MEDIUM

FFmpeg 4.4 through 9.0.2 contains a use of uninitialized variable vulnerability in the CDXL decoder that leaks stack memory into decoded pixels via unfilled HAM palette entries....

CVE-2026-120246

FFmpeg 4.4 through 9.0.2 contains a use of uninitialized variable vulnerability in the CDXL decoder that leaks stack mem

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-457 #severity:medium

漏洞预警2026-11-01 发布MEDIUM

FFmpeg 0.10 through 9.0.2 contains a use of uninitialized resource vulnerability in sunrast_decode_frame() that leaks heap memory when decoding truncated 1-bit and 4-bit palette...

CVE-2026-120245

FFmpeg 0.10 through 9.0.2 contains a use of uninitialized resource vulnerability in sunrast_decode_frame() that leaks he

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-908 #severity:medium

漏洞预警2026-11-01 发布MEDIUM

FFmpeg 2.1 through 9.0.2 contains a use of uninitialized resource vulnerability in the PCX decoder that allows attackers to leak heap memory through truncated RLE scanlines. Att...

CVE-2026-120244

FFmpeg 2.1 through 9.0.2 contains a use of uninitialized resource vulnerability in the PCX decoder that allows attackers

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-908 #severity:medium

漏洞预警2026-11-01 发布MEDIUM

FFmpeg 2.0 through 9.0.2 contains a use of uninitialized variable vulnerability in the Go2Meeting decoder that allows attackers to leak stack memory through out-of-range palette...

CVE-2026-120243

FFmpeg 2.0 through 9.0.2 contains a use of uninitialized variable vulnerability in the Go2Meeting decoder that allows at

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-457 #severity:medium

漏洞预警2026-11-01 发布HIGH

A weakness has been identified in Presenton up to 0.9.11-beta. Affected by this issue is some unknown functionality of the component API. This manipulation causes missing authen...

CVE-2026-120191

A weakness has been identified in Presenton up to 0.9.11-beta. Affected by this issue is some unknown functionality of t

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-287 #cwe-306 #severity:medium

漏洞预警2026-11-01 发布LOW

A security flaw has been discovered in PostyBirb Plus up to 3.1.75. Affected by this vulnerability is an unknown functionality of the file ui/src/views/submissions/submission-fo...

CVE-2026-120190

A security flaw has been discovered in PostyBirb Plus up to 3.1.75. Affected by this vulnerability is an unknown functio

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-79 #cwe-94 #severity:low

漏洞预警2026-11-01 发布CRITICAL

A vulnerability was identified in D-Link DIR-505 1.10B02. Affected is the function save_upload_file/mp_upload_file of the file /usr/bin/tftpd of the component TFTP Upload Filena...

CVE-2026-120189

A vulnerability was identified in D-Link DIR-505 1.10B02. Affected is the function save_upload_file/mp_upload_file of th

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-119 #cwe-121 #severity:critical

漏洞预警2026-11-01 发布INFO

XS::libbrotli versions before 1.2.1.0 for Perl bundle a brotli library with an out-of-bounds write in the decoder. Affected versions compile a bundled brotli into static archiv...

CVE-2026-115946

XS::libbrotli versions before 1.2.1.0 for Perl bundle a brotli library with an out-of-bounds write in the decoder. Affe

来源摘录 · NVD / GitHub Advisory

#advisory #cve