#CVE

共收录 59371 条相关情报。

漏洞预警2026-10-30 发布HIGH

A flaw was found in GIMP. The PSD plug-in’s image resource header loader uses an incorrect destination size when copying a converted resource name into a fixed stack buffer. Ope...

CVE-2026-119528

A flaw was found in GIMP. The PSD plug-in’s image resource header loader uses an incorrect destination size when copying

来源摘录 · NVD

#cve #cwe-121

漏洞预警2026-10-30 发布INFO

CallBackery versions before 0.62.0 for Perl accept session cookies of any age sent in the X-Session-Cookie header. cookieConf() rejects a cookie older than 300 seconds only whe...

CVE-2026-118987

CallBackery versions before 0.62.0 for Perl accept session cookies of any age sent in the X-Session-Cookie header. cook

来源摘录 · NVD

#cve

漏洞预警2026-10-30 发布INFO

CallBackery versions before 0.62.0 for Perl allow session cookie forgery via a signing secret generated with rand(). The secret that signs session cookies is built from two cal...

CVE-2026-118986

CallBackery versions before 0.62.0 for Perl allow session cookie forgery via a signing secret generated with rand(). Th

来源摘录 · NVD

#cve #cwe-338

漏洞预警2026-10-30 发布INFO

Bitcoin Core prior to 29.5, 30.4, 31.2 and 32.1 is vulnerable to an OOM issue.

CVE-2026-117350

Bitcoin Core prior to 29.5, 30.4, 31.2 and 32.1 is vulnerable to an OOM issue.

来源摘录 · NVD

#cve

漏洞预警2026-10-30 发布MEDIUM

Skuul School Management System through version 2.6.5 is vulnerable to incorrect access control in the ResultChecker::checkResult method. An authenticated student can manipulate ...

CVE-2026-117028

Skuul School Management System through version 2.6.5 is vulnerable to incorrect access control in the ResultChecker::che

来源摘录 · NVD

#cve #cwe-639

漏洞预警2026-10-30 发布MEDIUM

A race condition in Epiphany allows a malicious website to bypass the TLS/SSL certificate warning page. Epiphany registers the main-world script message handler "tlsErrorPage" ...

CVE-2026-115683

A race condition in Epiphany allows a malicious website to bypass the TLS/SSL certificate warning page. Epiphany regist

来源摘录 · NVD

#cve #cwe-367

漏洞预警2026-10-30 发布MEDIUM

Kirki plugin for WordPress before 6.2.5 contains a reCAPTCHA bypass vulnerability that allows unauthenticated attackers to submit frontend forms without valid verification by om...

CVE-2026-112348

Kirki plugin for WordPress before 6.2.5 contains a reCAPTCHA bypass vulnerability that allows unauthenticated attackers

来源摘录 · NVD

#cve #cwe-693

漏洞预警2026-10-30 发布HIGH

Kirki plugin for WordPress before 6.4.1 contains a broken object-level access control vulnerability in its page REST API, where the PUT /wp-json/kirki/v1/pages/{page_id} route a...

CVE-2026-112347

Kirki plugin for WordPress before 6.4.1 contains a broken object-level access control vulnerability in its page REST API

来源摘录 · NVD

#cve #cwe-862

漏洞预警2026-10-30 发布MEDIUM

Dell OpenManage Enterprise, versions prior to 4.8.0, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with adjacent network acc...

CVE-2026-111500

Dell OpenManage Enterprise, versions prior to 4.8.0, contains a Missing Authentication for Critical Function vulnerabili

来源摘录 · NVD

#cve #cwe-306

漏洞预警2026-10-30 发布MEDIUM

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access...

CVE-2026-111499

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission Assignment for Critical Resource v

来源摘录 · NVD

#cve #cwe-732

漏洞预警2026-10-30 发布MEDIUM

OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Resource Locking vulnerability. A high privileged attacker with local access could potentially exploit this ...

CVE-2026-111498

OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Resource Locking vulnerability. A high privileged a

来源摘录 · NVD

#cve #cwe-413

漏洞预警2026-10-30 发布LOW

Campfire is a web-based chat application. In version 1.4.4 and earlier, when a Campfire message contains a link, the server fetches it to build an OpenGraph unfurl preview. `Res...

CVE-2026-100355

Campfire is a web-based chat application. In version 1.4.4 and earlier, when a Campfire message contains a link, the ser

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-918

漏洞预警2026-10-30 发布HIGH

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Input Validation vulnerability. A low privileged attacker with adjacent network access could potentiall...

CVE-2026-91917

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Input Validation vulnerability. A low privileg

来源摘录 · NVD

#cve #cwe-20

漏洞预警2026-10-30 发布INFO

DateTime::Lite versions before 0.8.1 for Perl allow CPU exhaustion via a per-day loop when adding seconds. _normalize_leap_seconds crosses day boundaries one day at a time, so ...

CVE-2026-87768

DateTime::Lite versions before 0.8.1 for Perl allow CPU exhaustion via a per-day loop when adding seconds. _normalize_l

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-407

漏洞预警2026-10-30 发布INFO

An improper access control vulnerability in ESET Endpoint Encryption and ESET Full Disk Encryption allow attacker with standard user permissions access a device interface belong...

CVE-2026-75882

An improper access control vulnerability in ESET Endpoint Encryption and ESET Full Disk Encryption allow attacker with s

来源摘录 · NVD

#cve #cwe-284

漏洞预警2026-10-30 发布INFO

Rejected reason: Further research determined the issue is not a vulnerability.

CVE-2026-64860

Rejected reason: Further research determined the issue is not a vulnerability.

来源摘录 · NVD

#cve

漏洞预警2026-10-30 发布INFO

CallBackery versions before 0.62.0 for Perl store user passwords as unsalted HMAC-SHA1 hashes. Passwords are hashed with hmac_sha1_sum() from Mojo::Util with no key, a single f...

CVE-2026-13576

CallBackery versions before 0.62.0 for Perl store user passwords as unsalted HMAC-SHA1 hashes. Passwords are hashed wit

来源摘录 · NVD

#cve #cwe-759 #cwe-916

漏洞预警2026-10-30 发布INFO

Business::GoCardless versions before 1.01 for Perl complete redirect flows without checking the session token, letting a leaked redirect flow ID create payments against another ...

CVE-2026-119038

Business::GoCardless versions before 1.01 for Perl complete redirect flows without checking the session token, letting a

来源摘录 · NVD

#cve #cwe-639

漏洞预警2026-10-30 发布INFO

Business::GoCardless versions before 1.01 for Perl accept forged webhooks when a configured webhook secret is undef or empty. signature_valid uses each configured secret as the...

CVE-2026-119037

Business::GoCardless versions before 1.01 for Perl accept forged webhooks when a configured webhook secret is undef or e

来源摘录 · NVD

#cve #cwe-347

漏洞预警2026-10-30 发布INFO

Business::GoCardless versions before 1.01 for Perl allow memory exhaustion by flattening legacy webhook payloads before checking their signature. A webhook body with a top-leve...

CVE-2026-119036

Business::GoCardless versions before 1.01 for Perl allow memory exhaustion by flattening legacy webhook payloads before

来源摘录 · NVD

#cve #cwe-770