#CVE

共收录 62800 条相关情报。

漏洞预警2026-11-01 发布HIGH

A vulnerability was identified in Ruijie RG-ES205GC, RG-ES206GC-P, RG-ES208GC, RG-ES210GC-LP and RG-ES210GS-P ESW_1.0(1)B1P48. Impacted is an unknown function of the file httpup...

CVE-2026-120241

A vulnerability was identified in Ruijie RG-ES205GC, RG-ES206GC-P, RG-ES208GC, RG-ES210GC-LP and RG-ES210GS-P ESW_1.0(1)

来源摘录 · NVD

#cve #cwe-119 #cwe-120

漏洞预警2026-11-01 发布CRITICAL

A vulnerability was determined in WAVLINK WN553X1-B V260403_2.0.0. This issue affects the function sub_41A748 of the file /bin/ioos of the component WireGuard CLI Group Handler....

CVE-2026-120240

A vulnerability was determined in WAVLINK WN553X1-B V260403_2.0.0. This issue affects the function sub_41A748 of the fil

来源摘录 · NVD

#cve #cwe-77 #cwe-78

漏洞预警2026-11-01 发布CRITICAL

A vulnerability was found in WAVLINK WN553X1-B V260403_2.0.0. This vulnerability affects the function sub_419DA8 of the file /bin/ioos of the component WireGuard CLI Handler. Pe...

CVE-2026-120239

A vulnerability was found in WAVLINK WN553X1-B V260403_2.0.0. This vulnerability affects the function sub_419DA8 of the

来源摘录 · NVD

#cve #cwe-77 #cwe-78

漏洞预警2026-11-01 发布CRITICAL

A vulnerability has been found in WAVLINK WN553X1-B 260403_2.0.0. This affects the function sub_4162A8 of the file /bin/ioos of the component ovpn_file Handler. Such manipulatio...

CVE-2026-120238

A vulnerability has been found in WAVLINK WN553X1-B 260403_2.0.0. This affects the function sub_4162A8 of the file /bin/

来源摘录 · NVD

#cve #cwe-77 #cwe-78

漏洞预警2026-11-01 发布MEDIUM

A flaw has been found in ag-ui-protocol ag-ui up to 0.0.58. Affected by this issue is the function isInterruptExpired of the file sdks/typescript/packages/client/src/interrupts/...

CVE-2026-120237

A flaw has been found in ag-ui-protocol ag-ui up to 0.0.58. Affected by this issue is the function isInterruptExpired of

来源摘录 · NVD

#cve #cwe-400 #cwe-404

漏洞预警2026-11-01 发布HIGH

Google::Auth versions from 0.11 through 0.12 for Perl accept an authorization code from any local process because the gcloud-auth login callback does not check the OAuth state. ...

CVE-2026-74760

Google::Auth versions from 0.11 through 0.12 for Perl accept an authorization code from any local process because the gc

来源摘录 · NVD

#cve #cwe-346

漏洞预警2026-11-01 发布CRITICAL

Google::Auth versions 0.12 for Perl allow server side request forgery via unvalidated credential_source URLs in AWS external account credentials. An external_account configurat...

CVE-2026-74759

Google::Auth versions 0.12 for Perl allow server side request forgery via unvalidated credential_source URLs in AWS exte

来源摘录 · NVD

#cve #cwe-918

漏洞预警2026-11-01 发布MEDIUM

A vulnerability was detected in ag-ui-protocol ag-ui up to 0.0.58. Affected by this vulnerability is an unknown functionality of the component Transport Decoder Handler. The man...

CVE-2026-120236

A vulnerability was detected in ag-ui-protocol ag-ui up to 0.0.58. Affected by this vulnerability is an unknown function

来源摘录 · NVD

#cve #cwe-20

漏洞预警2026-11-01 发布HIGH

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nickboss WordPress File Upload wp-file-upload allows Stored XSS.This issue ...

CVE-2026-66570

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nickboss WordPress

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-11-01 发布CRITICAL

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Liquid Web / StellarWP BookIt bookit allows SQL Injection.This issue affect...

CVE-2026-62048

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Liquid Web / Stell

来源摘录 · NVD

#cve #cwe-89

漏洞预警2026-11-01 发布CRITICAL

Prefab UI's Generative UI sandbox runs caller-supplied Python inside Pyodide, Python compiled to WebAssembly, in a Deno subprocess. The feature is documented as isolation for un...

CVE-2026-120338

Prefab UI's Generative UI sandbox runs caller-supplied Python inside Pyodide, Python compiled to WebAssembly, in a Deno

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-269 #cwe-693 #cwe-94

漏洞预警2026-11-01 发布MEDIUM

A security vulnerability has been detected in ag-ui-protocol ag-ui up to 0.0.58. Affected is the function parseSSEStream of the file sdks/typescript/packages/client/src/transfor...

CVE-2026-120235

A security vulnerability has been detected in ag-ui-protocol ag-ui up to 0.0.58. Affected is the function parseSSEStream

来源摘录 · NVD

#cve #cwe-400 #cwe-404

漏洞预警2026-11-01 发布MEDIUM

A weakness has been identified in ag-ui-protocol ag-ui up to 0.0.58. This impacts the function e.text of the component HTTP Transport. Executing a manipulation can lead to resou...

CVE-2026-120234

A weakness has been identified in ag-ui-protocol ag-ui up to 0.0.58. This impacts the function e.text of the component H

来源摘录 · NVD

#cve #cwe-400 #cwe-404

漏洞预警2026-11-01 发布MEDIUM

A security flaw has been discovered in ag-ui-protocol ag-ui up to 0.0.58. This affects an unknown function of the file sdks/typescript/packages/client/src/agent/http.ts of the c...

CVE-2026-120233

A security flaw has been discovered in ag-ui-protocol ag-ui up to 0.0.58. This affects an unknown function of the file s

来源摘录 · NVD

#cve #cwe-200 #cwe-284

漏洞预警2026-11-01 发布MEDIUM

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Crocoblock JetFormBuilder jetformbuilder allows Path Traversal.This issue affects...

CVE-2026-119480

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Crocoblock JetFormBuilde

来源摘录 · NVD

#cve #cwe-22

漏洞预警2026-11-01 发布HIGH

A vulnerability was identified in Horizon DataSys Reboot Restore Standard up to 13.2. The impacted element is the function sub_23908 in the library shield.sys of the component K...

CVE-2026-120232

A vulnerability was identified in Horizon DataSys Reboot Restore Standard up to 13.2. The impacted element is the functi

来源摘录 · NVD

#cve #cwe-119

漏洞预警2026-11-01 发布CRITICAL

A vulnerability was determined in WAVLINK WN553X1-B V260403_2.0.0. The affected element is the function sub_416568 of the file /bin/ioos of the component OpenVPN CLI Handler. Th...

CVE-2026-120231

A vulnerability was determined in WAVLINK WN553X1-B V260403_2.0.0. The affected element is the function sub_416568 of th

来源摘录 · NVD

#cve #cwe-77 #cwe-78

漏洞预警2026-11-01 发布CRITICAL

A vulnerability was found in WAVLINK WN701AE 260105. Impacted is the function del_vlan_group of the component ioos Web Backend. The manipulation of the argument vlan_name result...

CVE-2026-120230

A vulnerability was found in WAVLINK WN701AE 260105. Impacted is the function del_vlan_group of the component ioos Web B

来源摘录 · NVD

#cve #cwe-77 #cwe-78

漏洞预警2026-11-01 发布CRITICAL

A vulnerability has been found in WAVLINK WN553X1-B 260403_2.0.0. This issue affects the function sub_416B50 of the file /bin/ioos. The manipulation of the argument file_id lead...

CVE-2026-120229

A vulnerability has been found in WAVLINK WN553X1-B 260403_2.0.0. This issue affects the function sub_416B50 of the file

来源摘录 · NVD

#cve #cwe-77 #cwe-78

漏洞预警2026-11-01 发布CRITICAL

A flaw has been found in WAVLINK WN553X1-B V260403_2.0.0. This vulnerability affects the function sub_416D88 of the file /bin/ioos of the component ioos Service. Executing a man...

CVE-2026-120228

A flaw has been found in WAVLINK WN553X1-B V260403_2.0.0. This vulnerability affects the function sub_416D88 of the file

来源摘录 · NVD

#cve #cwe-77 #cwe-78