#CVE

共收录 58490 条相关情报。

漏洞预警2026-10-30 发布MEDIUM

SQLite before 3.54.0 contains an information disclosure vulnerability that allows attackers to read uninitialized page-cache memory by supplying a WAL file with an undersized pa...

CVE-2026-119375

SQLite before 3.54.0 contains an information disclosure vulnerability that allows attackers to read uninitialized page-c

来源摘录 · NVD

#cve #cwe-908

漏洞预警2026-10-30 发布HIGH

SQLite before 3.54.0 built with FTS5 contains a heap buffer overflow in fts5DoSecureDelete() that allows attackers to write past the leaf page buffer via crafted footer key offs...

CVE-2026-119374

SQLite before 3.54.0 built with FTS5 contains a heap buffer overflow in fts5DoSecureDelete() that allows attackers to wr

来源摘录 · NVD

#cve #cwe-787

漏洞预警2026-10-30 发布HIGH

SQLite before 3.54.0 built with FTS5 contains a heap buffer overflow in fts5MergeRowidLists() that undersizes the output buffer when merging detail=none prefix doclists. Attacke...

CVE-2026-119373

SQLite before 3.54.0 built with FTS5 contains a heap buffer overflow in fts5MergeRowidLists() that undersizes the output

来源摘录 · NVD

#cve #cwe-787

漏洞预警2026-10-30 发布MEDIUM

SQLite before 3.54.0 built with FTS3/FTS4 and SQLITE_ENABLE_FTS3_PARENTHESIS contains a use-after-free vulnerability in fts3BestSnippet() caused by dangling cached position-list...

CVE-2026-119372

SQLite before 3.54.0 built with FTS3/FTS4 and SQLITE_ENABLE_FTS3_PARENTHESIS contains a use-after-free vulnerability in

来源摘录 · NVD

#cve #cwe-416

漏洞预警2026-10-30 发布MEDIUM

SQLite before 3.54.0 contains a stack exhaustion vulnerability that allows attackers to bypass the SQLITE_LIMIT_EXPR_DEPTH nesting limit because common table expressions are not...

CVE-2026-119371

SQLite before 3.54.0 contains a stack exhaustion vulnerability that allows attackers to bypass the SQLITE_LIMIT_EXPR_DEP

来源摘录 · NVD

#cve #cwe-674

漏洞预警2026-10-30 发布MEDIUM

ProFTPD before 1.3.9e and 1.3.10rc5 contains an authorization bypass in the mod_sftp copy-file extension handler that skips Limit WRITE checks for new destination files. Authent...

CVE-2026-119147

ProFTPD before 1.3.9e and 1.3.10rc5 contains an authorization bypass in the mod_sftp copy-file extension handler that sk

来源摘录 · NVD

#cve #cwe-863

漏洞预警2026-10-30 发布MEDIUM

ProFTPD before 1.3.9e and 1.3.10rc5 contains a buffer overflow vulnerability in the mod_rewrite int:utf8trans RewriteMap that allows remote attackers to overwrite static buffers...

CVE-2026-119146

ProFTPD before 1.3.9e and 1.3.10rc5 contains a buffer overflow vulnerability in the mod_rewrite int:utf8trans RewriteMap

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-120

漏洞预警2026-10-30 发布HIGH

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low ...

CVE-2026-111505

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an

来源摘录 · NVD

#cve #cwe-78

漏洞预警2026-10-30 发布HIGH

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability. A high privile...

CVE-2026-111504

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Argument Delimiters in a Com

来源摘录 · NVD

#cve #cwe-88

漏洞预警2026-10-30 发布INFO

Płatnik performs client-side authentication. An attacker with access to any application instance connected to the backend server can bypass the login verification process and au...

CVE-2026-110972

Płatnik performs client-side authentication. An attacker with access to any application instance connected to the backen

来源摘录 · NVD

#cve #cwe-603

漏洞预警2026-10-30 发布INFO

Use of a weak password encoding algorithm in Płatnik software allows a user who obtains encoded password to easily decode it. This issue was fixed in metric 334 in version 10...

CVE-2026-110971

Use of a weak password encoding algorithm in Płatnik software allows a user who obtains encoded password to easily decod

来源摘录 · NVD

#cve #cwe-261

漏洞预警2026-10-30 发布INFO

Płatnik uses HTTP protocol to download updates, libraries and support files. It allows an attacker to conduct a Man-In-The-Middle attack, obtain transmitted data and replace the...

CVE-2026-110970

Płatnik uses HTTP protocol to download updates, libraries and support files. It allows an attacker to conduct a Man-In-T

来源摘录 · NVD

#cve

漏洞预警2026-10-30 发布INFO

A NULL pointer dereference vulnerability in the Qt QCborValue to JSON conversion of the Qt Core module.

CVE-2026-105924

A NULL pointer dereference vulnerability in the Qt QCborValue to JSON conversion of the Qt Core module.

来源摘录 · NVD

#cve #cwe-476

漏洞预警2026-10-30 发布HIGH

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high...

CVE-2026-101214

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an

来源摘录 · NVD

#cve #cwe-78

漏洞预警2026-10-30 发布HIGH

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Privilege Management vulnerability. A low privileged attacker with local access could potentially explo...

CVE-2026-101213

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Privilege Management vulnerability. A low priv

来源摘录 · NVD

#cve #cwe-269

漏洞预警2026-10-30 发布HIGH

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high...

CVE-2026-101210

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an

来源摘录 · NVD

#cve #cwe-78

漏洞预警2026-10-30 发布LOW

Dell OpenManage Enterprise, versions prior to 4.8.0, contains a Server-Side Request Forgery (SSRF) vulnerability. A high privileged attacker with remote access could potentially...

CVE-2026-101209

Dell OpenManage Enterprise, versions prior to 4.8.0, contains a Server-Side Request Forgery (SSRF) vulnerability. A high

来源摘录 · NVD

#cve #cwe-918

漏洞预警2026-10-30 发布INFO

ARKETEAM Protectel modules PROTECTELMAJ and BDF contain a note editor module vulnerable to Stored XSS. A low privileged attacker can inject arbitrary HTML and JS into notes, wh...

CVE-2025-68395

ARKETEAM Protectel modules PROTECTELMAJ and BDF contain a note editor module vulnerable to Stored XSS. A low privileged

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-30 发布INFO

ARKETEAM Protectel modules PROTECTELMAJ and BDF are vulnerable to SQL injection vulnerability. Improper neutralization of input provided by a low privileged user into "profilInp...

CVE-2025-68394

ARKETEAM Protectel modules PROTECTELMAJ and BDF are vulnerable to SQL injection vulnerability. Improper neutralization o

来源摘录 · NVD

#cve #cwe-89

漏洞预警2026-10-30 发布INFO

ARKETEAM Protectel modules PROTECTELMAJ and BDF are vulnerable to SQL injection vulnerability. Improper neutralization of input provided by a low privileged user into "Utilisate...

CVE-2025-68393

ARKETEAM Protectel modules PROTECTELMAJ and BDF are vulnerable to SQL injection vulnerability. Improper neutralization o

来源摘录 · NVD

#cve #cwe-89