#CVE

共收录 63078 条相关情报。

← 返回所有主题

漏洞预警2026-10-29 发布MEDIUM

On Linux, an authenticated, low-privileged Nessus user with scan-creation rights could read arbitrary text files on the scanner host with the privileges of the nessusd process b...

CVE-2026-119317

On Linux, an authenticated, low-privileged Nessus user with scan-creation rights could read arbitrary text files on the

来源摘录 · NVD

#cve #cwe-284

漏洞预警2026-10-29 发布HIGH

GraphQL-core is a Python port of the GraphQL.js reference implementation. From 3.3.0a3 until 3.3.1, validate() reuses a module-level ValidationAbortedError when a document excee...

CVE-2026-119286

GraphQL-core is a Python port of the GraphQL.js reference implementation. From 3.3.0a3 until 3.3.1, validate() reuses a

来源摘录 · NVD / GitHub Advisory / OSV.dev

#advisory #cve #cwe-400 #cwe-401 #pip #severity:high

漏洞预警2026-10-29 发布MEDIUM

Fiber is an Express inspired web framework written in Go. From 2.52.1 until 2.52.3, the CORS middleware's validateDomain wildcard matcher in middleware/cors/utils.go strips the ...

CVE-2026-119285

Fiber is an Express inspired web framework written in Go. From 2.52.1 until 2.52.3, the CORS middleware's validateDomain

来源摘录 · NVD

#cve #cwe-346 #cwe-942

漏洞预警2026-10-29 发布INFO

joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption (JOSE) standards. Prior to 1.7.6, joserfc compact JWS deserialization c...

CVE-2026-119284

joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption (JOSE) standar

来源摘录 · NVD

#cve #cwe-400

漏洞预警2026-10-29 发布HIGH

joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption (JOSE) standards. Prior to 1.7.5, joserfc.jwe.decrypt_json() accepts a ...

CVE-2026-119283

joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption (JOSE) standar

来源摘录 · NVD

#cve #cwe-400

漏洞预警2026-10-29 发布INFO

Nx is a monorepo solution for TypeScript and polyglot codebases. From 22.0.2 until 22.7.9 and 23.1.2 for @nx/maven, and from 21.0.0 until 22.7.9 and 23.1.2 for @nx/gradle, the p...

CVE-2026-119282

Nx is a monorepo solution for TypeScript and polyglot codebases. From 22.0.2 until 22.7.9 and 23.1.2 for @nx/maven, and

来源摘录 · NVD

#cve #cwe-78 #cwe-88

漏洞预警2026-10-29 发布CRITICAL

Spreadsheet::XLSX versions before 0.19 for Perl allow code execution via string eval of number format conditions in ExcelFmt. When a number format has a condition such as [>100...

CVE-2026-115943

Spreadsheet::XLSX versions before 0.19 for Perl allow code execution via string eval of number format conditions in Exce

来源摘录 · NVD

#cve #cwe-95

漏洞预警2026-10-29 发布INFO

Lightdash is an open source business intelligence platform. In affected versions through 0.3213.0, the dbt Cloud webhook `POST /api/v1/projects/{projectUuid}/dbt-cloud/webhook` ...

CVE-2026-61576

Lightdash is an open source business intelligence platform. In affected versions through 0.3213.0, the dbt Cloud webhook

来源摘录 · NVD

#cve #cwe-22

漏洞预警2026-10-29 发布HIGH

HashiCorp Boundary and Boundary Enterprise are vulnerable to a server-side request forgery in the Vault credential store integration that may allow an authenticated user with pe...

CVE-2026-13303

HashiCorp Boundary and Boundary Enterprise are vulnerable to a server-side request forgery in the Vault credential store

来源摘录 · NVD

#cve #cwe-918

漏洞预警2026-10-29 发布HIGH

Bricks Theme 2.4 and before for WordPress contains an unauthenticated broken access control vulnerability in the load_popup_content REST endpoint that allows anonymous attackers...

CVE-2026-119325

Bricks Theme 2.4 and before for WordPress contains an unauthenticated broken access control vulnerability in the load_po

来源摘录 · NVD

#cve #cwe-639

漏洞预警2026-10-29 发布MEDIUM