#CVE

共收录 62800 条相关情报。

← 返回所有主题

漏洞预警2026-10-30 发布INFO

In Secret Server on-prem versions earlier than 12.3.1, Secret Server did not always validate the PIN or biometric check when using a FIDO2-compliant device

CVE-2026-115828

In Secret Server on-prem versions earlier than 12.3.1, Secret Server did not always validate the PIN or biometric check

来源摘录 · NVD

#cve #cwe-284

漏洞预警2026-10-30 发布HIGH

Unauthenticated Cross Site Scripting (XSS) in All In One Login <= 2.4.1 versions.

CVE-2026-94175

Unauthenticated Cross Site Scripting (XSS) in All In One Login <= 2.4.1 versions.

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-79 #severity:high

漏洞预警2026-10-30 发布CRITICAL

Unauthenticated PHP Object Injection in LeadSnap <= 1.25 versions.

CVE-2026-90888

Unauthenticated PHP Object Injection in LeadSnap <= 1.25 versions.

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-502 #severity:critical

漏洞预警2026-10-30 发布MEDIUM

WIT SynApps Runtime through 1.4.11 contains a browser-mediated cross-origin request forgery vulnerability that allows attackers to supply an arbitrary target address during cont...

CVE-2026-7005

WIT SynApps Runtime through 1.4.11 contains a browser-mediated cross-origin request forgery vulnerability that allows at

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-346 #severity:medium

漏洞预警2026-10-30 发布MEDIUM

WIT SynApps Runtime through 1.4.11 contains a pre-authentication reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject and execute arbitra...

CVE-2026-7004

WIT SynApps Runtime through 1.4.11 contains a pre-authentication reflected cross-site scripting vulnerability that allow

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-79 #severity:medium

漏洞预警2026-10-30 发布MEDIUM

WIT SynApps Runtime through 1.4.11 contains a hardcoded credentials vulnerability that allows unauthenticated attackers to recover static OAuth clientId and clientSecret values ...

CVE-2026-7003

WIT SynApps Runtime through 1.4.11 contains a hardcoded credentials vulnerability that allows unauthenticated attackers

来源摘录 · NVD

#cve #cwe-798

漏洞预警2026-10-30 发布HIGH

Contributor PHP Object Injection in GS Testimonial Slider <= 3.3.10 versions.

CVE-2026-78527

Contributor PHP Object Injection in GS Testimonial Slider <= 3.3.10 versions.

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-502 #severity:high

漏洞预警2026-10-30 发布MEDIUM

Incorrect Authorization vulnerability in the single-stage query engine of Apache Pinot. When broker access control is enabled, the single-stage query engine authorizes only the...

CVE-2026-73322

Incorrect Authorization vulnerability in the single-stage query engine of Apache Pinot. When broker access control is e

来源摘录 · NVD

#cve #cwe-863

漏洞预警2026-10-30 发布HIGH

Subscriber PHP Object Injection in Enable Media Replace <= 4.2.2 versions.

CVE-2026-73186

Subscriber PHP Object Injection in Enable Media Replace <= 4.2.2 versions.

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-502 #severity:high

漏洞预警2026-10-30 发布INFO

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-66026

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

来源摘录 · NVD / GitHub Advisory

#advisory #cve

漏洞预警2026-10-30 发布INFO

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-66025

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

来源摘录 · NVD / GitHub Advisory

#advisory #cve

漏洞预警2026-10-30 发布HIGH

praktor is a multi-agent Claude Code orchestrator with Telegram input and output, Docker isolation, and a Mission Control UI. Prior to 0.9.1, both Telegram upload sites in `inte...

CVE-2026-62331

praktor is a multi-agent Claude Code orchestrator with Telegram input and output, Docker isolation, and a Mission Contro

来源摘录 · NVD

#cve #cwe-22

漏洞预警2026-10-30 发布MEDIUM

Pistache is a high-performance REST toolkit written in C++. From 0.0.5 through 0.4.26, `SegmentTreeNode::sanitizeResource()` in `src/server/router.cc` uses `std::regex_replace()...

CVE-2026-62303

Pistache is a high-performance REST toolkit written in C++. From 0.0.5 through 0.4.26, `SegmentTreeNode::sanitizeResourc

来源摘录 · NVD

#cve #cwe-400 #cwe-674

漏洞预警2026-10-30 发布INFO

mouse07410/asn1c is an ASN.1 compiler. Prior to 1.2.5, `OPEN TYPE` decoding can dereference an unallocated member pointer and crash the consuming program. `OPEN_TYPE_aper_get` i...

CVE-2026-62298

mouse07410/asn1c is an ASN.1 compiler. Prior to 1.2.5, `OPEN TYPE` decoding can dereference an unallocated member pointe

来源摘录 · NVD

#cve #cwe-476

漏洞预警2026-10-30 发布HIGH

PDF Reader MCP is a Model Context Protocol server for reading PDF documents. In versions 2.2.0 and later prior to 3.0.1, when `MCP_TRANSPORT=http` enables the opt-in HTTP server...

CVE-2026-62264

PDF Reader MCP is a Model Context Protocol server for reading PDF documents. In versions 2.2.0 and later prior to 3.0.1,

来源摘录 · NVD

#cve #cwe-200 #cwe-287 #cwe-306

漏洞预警2026-10-30 发布INFO

Hydra is a layer-two scalability solution for Cardano. Prior to 2.1.0, the `Claim` branch in `hydra-plutus/validators/deposit.ak` checks only that `datum.head_id` matches the at...

CVE-2026-62162

Hydra is a layer-two scalability solution for Cardano. Prior to 2.1.0, the `Claim` branch in `hydra-plutus/validators/de

来源摘录 · NVD

#cve #cwe-862

漏洞预警2026-10-30 发布INFO

Daptin is a GraphQL/JSON-API headless CMS. Prior to 0.12.26, the global `LanguageMiddleware` in `server/language.go` passes the raw `Accept-Language` header from `LanguageMiddle...

CVE-2026-62160

Daptin is a GraphQL/JSON-API headless CMS. Prior to 0.12.26, the global `LanguageMiddleware` in `server/language.go` pas

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-400 #cwe-407

漏洞预警2026-10-30 发布MEDIUM

Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booktics: from n/a ...

CVE-2026-62122

Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Contr

来源摘录 · NVD

#cve #cwe-862

漏洞预警2026-10-30 发布MEDIUM

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Fre...

CVE-2026-62121

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

来源摘录 · NVD

#cve #cwe-98

漏洞预警2026-10-30 发布MEDIUM

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Fahim Reza Divi Contact Form 7 cf7-styler-for-divi allows Code Injection.This issu...

CVE-2026-62057

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Fahim Reza Divi Contact F

来源摘录 · NVD

#cve #cwe-80