#CVE

共收录 62105 条相关情报。

漏洞预警2026-10-30 发布MEDIUM

Tesseract is an open source OCR engine. Prior to 5.5.4, GENERIC_2D_ARRAY::DeSerializeSize in src/ccstruct/matrix.h reads matrix dimensions as signed int32_t values and compares ...

CVE-2026-119340

Tesseract is an open source OCR engine. Prior to 5.5.4, GENERIC_2D_ARRAY::DeSerializeSize in src/ccstruct/matrix.h reads

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-190 #cwe-681

漏洞预警2026-10-30 发布MEDIUM

Tesseract is an open source OCR engine. Prior to 5.5.4, WeightMatrix::DeSerialize trusts a mode byte from a traineddata LSTM network and calls WeightMatrix::DeSerializeOld when ...

CVE-2026-119339

Tesseract is an open source OCR engine. Prior to 5.5.4, WeightMatrix::DeSerialize trusts a mode byte from a traineddata

来源摘录 · NVD

#cve #cwe-20 #cwe-617

漏洞预警2026-10-30 发布INFO

Tesseract is an open source OCR engine. From 5.4.0 until 5.5.4, AppendLinePolygon in src/api/pagerenderer.cpp destroys the caller-owned right-to-left Pta accumulator while recei...

CVE-2026-119338

Tesseract is an open source OCR engine. From 5.4.0 until 5.5.4, AppendLinePolygon in src/api/pagerenderer.cpp destroys t

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-125 #cwe-415 #cwe-416

漏洞预警2026-10-30 发布INFO

Improper Validation of Certificate with Host Mismatch vulnerability in deadtrickster ssl_verify_fun allows an adversary in the middle to impersonate a TLS peer via a certificate...

CVE-2026-117666

Improper Validation of Certificate with Host Mismatch vulnerability in deadtrickster ssl_verify_fun allows an adversary

来源摘录 · NVD

#cve #cwe-297

漏洞预警2026-10-30 发布INFO

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in phoenixframework phoenix_html allows an attacker who controls attribute nam...

CVE-2026-117645

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in phoenixframework p

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-30 发布INFO

Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-92243. Reason: This candidate is a reservation duplicate of CVE-2026-92243. Notes: All CVE u...

CVE-2026-95673

Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-92243. Reason: This candidate is a

来源摘录 · NVD

#cve

漏洞预警2026-10-30 发布CRITICAL

Stack-based buffer overflow and missing authorization vulnerability in Thales Sentinel Keys Server on Windows allows Overflow Buffers. Sentinel Keys Server does not check the le...

CVE-2026-78403

Stack-based buffer overflow and missing authorization vulnerability in Thales Sentinel Keys Server on Windows allows Ove

来源摘录 · NVD

#cve #cwe-121 #cwe-862

漏洞预警2026-10-30 发布HIGH

Stack-based buffer overflow and out-of-bounds write vulnerability in Thales Sentinel Keys Server on Windows allows Overflow Buffers. Sentinel Keys Server does not check the ...

CVE-2026-78402

Stack-based buffer overflow and out-of-bounds write vulnerability in Thales Sentinel Keys Server on Windows allows Overf

来源摘录 · NVD

#cve #cwe-121 #cwe-787

漏洞预警2026-10-30 发布INFO

SNARK Verifier is a generic (S)NARK verifier. Prior to 0.2.5, the Halo 2 aggregation circuit can mishandle proof points encoded as the point at infinity. `EcPointLoader::multi_s...

CVE-2026-62337

SNARK Verifier is a generic (S)NARK verifier. Prior to 0.2.5, the Halo 2 aggregation circuit can mishandle proof points

来源摘录 · NVD

#cve #cwe-20

漏洞预警2026-10-30 发布INFO

OpenVM is a performant and modular zkVM framework built for customization and extensibility. Before 1.7.0 in the 1.x line and in affected 2.0 and 2.1 prereleases, `OpenVmHalo2Ve...

CVE-2026-62335

OpenVM is a performant and modular zkVM framework built for customization and extensibility. Before 1.7.0 in the 1.x lin

来源摘录 · NVD

#cve #cwe-20

漏洞预警2026-10-30 发布INFO

OpenVM is a performant and modular zkVM framework built for customization and extensibility. Before 1.7.0 in the 1.x line and in affected 2.0 and 2.1 prereleases, `OpenVmHalo2Ve...

CVE-2026-62334

OpenVM is a performant and modular zkVM framework built for customization and extensibility. Before 1.7.0 in the 1.x lin

来源摘录 · NVD

#cve #cwe-754

漏洞预警2026-10-30 发布INFO

OpenVM is a performant and modular zkVM framework built for customization and extensibility. Before 1.7.0 in the 1.x line and in affected 2.0 and 2.1 prereleases, `MemoryMerkleA...

CVE-2026-62333

OpenVM is a performant and modular zkVM framework built for customization and extensibility. Before 1.7.0 in the 1.x lin

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-20

漏洞预警2026-10-30 发布INFO

MyTube is a self-hosted downloader and player for several video websites. Prior to version 1.10.3, `server.ts` calls `registerStaticRoutes` and `registerCloudRoutes` before `reg...

CVE-2026-62302

MyTube is a self-hosted downloader and player for several video websites. Prior to version 1.10.3, `server.ts` calls `re

来源摘录 · NVD

#cve #cwe-306

漏洞预警2026-10-30 发布INFO

MyTube is a self-hosted downloader and player for several video websites. Prior to version 1.10.3, backend video access does not enforce the visitor role's intended public-only ...

CVE-2026-62301

MyTube is a self-hosted downloader and player for several video websites. Prior to version 1.10.3, backend video access

来源摘录 · NVD

#cve #cwe-862

漏洞预警2026-10-30 发布INFO

OSAC operator is a Kubernetes operator. In the affected revision identified as 8220502, the `console-proxy` `RemoteConfigResolver` parses Kubernetes Secret kubeconfig data with ...

CVE-2026-62284

OSAC operator is a Kubernetes operator. In the affected revision identified as 8220502, the `console-proxy` `RemoteConfi

来源摘录 · NVD

#cve #cwe-918 #cwe-94

漏洞预警2026-10-30 发布INFO

Kargo manages and automates the promotion of software artifacts. From 0.6.0 until 1.8.14, 1.9.9, and 1.10.8, two authorization flaws in the `project-scoped RBAC API` let an auth...

CVE-2026-61850

Kargo manages and automates the promotion of software artifacts. From 0.6.0 until 1.8.14, 1.9.9, and 1.10.8, two authori

来源摘录 · NVD

#cve #cwe-269

漏洞预警2026-10-30 发布LOW

go-xrpl is a Go implementation of the XRP Ledger protocol. In versions through the June 18, 2026 revision identified by the advisory, `ParseMPTAmountBinary` in `internal/ledger/...

CVE-2026-61694

go-xrpl is a Go implementation of the XRP Ledger protocol. In versions through the June 18, 2026 revision identified by

来源摘录 · NVD

#cve #cwe-190

漏洞预警2026-10-30 发布CRITICAL

HoneySQL turns Clojure data structures into SQL. From 2.0.0 until 2.7.1392, applications that pass user input or other arbitrary data into the HoneySQL `DSL` by calling `keyword...

CVE-2026-61620

HoneySQL turns Clojure data structures into SQL. From 2.0.0 until 2.7.1392, applications that pass user input or other a

来源摘录 · NVD

#cve #cwe-89

漏洞预警2026-10-30 发布INFO

SNARK Verifier is a generic (S)NARK verifier. Prior to 0.2.5, KZG accumulator public-instance limbs are decoded without consistently enforcing canonical limb bounds before ellip...

CVE-2026-61618

SNARK Verifier is a generic (S)NARK verifier. Prior to 0.2.5, KZG accumulator public-instance limbs are decoded without

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-20

漏洞预警2026-10-30 发布CRITICAL

PinePods is a complete, self-hosted podcast management system written in Rust. Prior to 0.9.0, an authenticated user can subscribe to an attacker-controlled RSS feed through `PO...

CVE-2026-55598

PinePods is a complete, self-hosted podcast management system written in Rust. Prior to 0.9.0, an authenticated user can

来源摘录 · NVD

#cve #cwe-918