#CVE

共收录 56389 条相关情报。

漏洞预警2026-10-30 发布INFO

Improper certificate validation in the HTTPS listener in Canonical LXD 4.0.14, 5.0.10, 5.21.8, 6.9 before 4.0.15, 5.0.11, 5.21.9, 6.10.1 allows an unauthenticated attacker to au...

CVE-2026-112816

Improper certificate validation in the HTTPS listener in Canonical LXD 4.0.14, 5.0.10, 5.21.8, 6.9 before 4.0.15, 5.0.11

来源摘录 · NVD

#cve #cwe-295

漏洞预警2026-10-30 发布MEDIUM

A security vulnerability exists in the authorization handling for the local (management) cluster shell feature of SUSE Rancher Manager 2.15.0 up to 2.15.3, 2.14.0 up to 2.14.7, ...

CVE-2026-104623

A security vulnerability exists in the authorization handling for the local (management) cluster shell feature of SUSE R

来源摘录 · NVD

#cve #cwe-290

漏洞预警2026-10-30 发布INFO

An issue was discovered in Keyfactor EJBCA 9. When an administrator is removed from its administrator role while having a valid TLS session, EJBCA may, in certain circumstances,...

CVE-2025-49602

An issue was discovered in Keyfactor EJBCA 9. When an administrator is removed from its administrator role while having

来源摘录 · NVD

#cve

漏洞预警2026-10-30 发布MEDIUM

Missing Authorization vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fluent...

CVE-2026-62141

Missing Authorization vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Exploiting Incorrectly Configured

来源摘录 · NVD

#cve #cwe-862

漏洞预警2026-10-30 发布HIGH

Blender before 4.5.15 and 5.x before 5.2.3 contains a heap out-of-bounds access vulnerability in read_struct() that skips size validation when a .blend file's SDNA struct layout...

CVE-2026-119722

Blender before 4.5.15 and 5.x before 5.2.3 contains a heap out-of-bounds access vulnerability in read_struct() that skip

来源摘录 · NVD

#cve #cwe-125

漏洞预警2026-10-30 发布MEDIUM

Blender before 4.5.15 and 5.x before 5.2.3 contains an out-of-bounds read vulnerability in blo_bhead_id_* accessors in readfile.cc that read ID fields without block length check...

CVE-2026-119721

Blender before 4.5.15 and 5.x before 5.2.3 contains an out-of-bounds read vulnerability in blo_bhead_id_* accessors in r

来源摘录 · NVD

#cve #cwe-125

漏洞预警2026-10-30 发布MEDIUM

Blender before 4.5.15 and 5.x before 5.2.3 contains a heap out-of-bounds read vulnerability in read_file_dna() that reads a GLOB block field without validating its declared leng...

CVE-2026-119720

Blender before 4.5.15 and 5.x before 5.2.3 contains a heap out-of-bounds read vulnerability in read_file_dna() that read

来源摘录 · NVD

#cve #cwe-125

漏洞预警2026-10-30 发布HIGH

Blender before 4.5.15 and 5.x before 5.2.3 contains a heap buffer overflow vulnerability in the blend file thumbnail extractor caused by 32-bit integer overflow in thumb_data_ve...

CVE-2026-119719

Blender before 4.5.15 and 5.x before 5.2.3 contains a heap buffer overflow vulnerability in the blend file thumbnail ext

来源摘录 · NVD

#cve #cwe-190

漏洞预警2026-10-30 发布HIGH

Blender before 4.5.15 and 5.x before 5.2.3 contains a heap buffer overflow vulnerability caused by integer overflow in ptcache_data_alloc() when reading point cache files. Attac...

CVE-2026-119718

Blender before 4.5.15 and 5.x before 5.2.3 contains a heap buffer overflow vulnerability caused by integer overflow in p

来源摘录 · NVD

#cve #cwe-190

漏洞预警2026-10-30 发布HIGH

pybars4 through 0.9.13 contains a code injection vulnerability in pybars/_compiler.py that allows attackers to execute Python code via unescaped bracketed path segments in Handl...

CVE-2026-119717

pybars4 through 0.9.13 contains a code injection vulnerability in pybars/_compiler.py that allows attackers to execute P

来源摘录 · NVD

#cve #cwe-94

漏洞预警2026-10-30 发布HIGH

pybars3 through 0.9.7 contains a code injection vulnerability in pybars/_compiler.py that allows template authors to execute Python code via unescaped bracketed path segments. A...

CVE-2026-119716

pybars3 through 0.9.7 contains a code injection vulnerability in pybars/_compiler.py that allows template authors to exe

来源摘录 · NVD

#cve #cwe-94

漏洞预警2026-10-30 发布MEDIUM

NocoDB before 2026.08.0 contains a clickjacking vulnerability that allows any origin to frame the authenticated interface because no X-Frame-Options or CSP frame-ancestors heade...

CVE-2026-119715

NocoDB before 2026.08.0 contains a clickjacking vulnerability that allows any origin to frame the authenticated interfac

来源摘录 · NVD

#cve #cwe-1021

漏洞预警2026-10-30 发布MEDIUM

My Calendar WordPress plugin 3.8.8 before 3.8.11 contains a shortcode injection vulnerability that allows unauthenticated attackers to execute registered shortcodes via the mcs ...

CVE-2026-119714

My Calendar WordPress plugin 3.8.8 before 3.8.11 contains a shortcode injection vulnerability that allows unauthenticate

来源摘录 · NVD

#cve #cwe-94

漏洞预警2026-10-30 发布HIGH

Paperclip 2026.403.0 before 2026.416.0 contains a remote code execution vulnerability that allows agent API key holders to set cleanupCommand and teardownCommand via PATCH /api/...

CVE-2026-119713

Paperclip 2026.403.0 before 2026.416.0 contains a remote code execution vulnerability that allows agent API key holders

来源摘录 · NVD

#cve #cwe-78

漏洞预警2026-10-30 发布MEDIUM

PipesHub before 0.10.0 contains a server-side request forgery vulnerability in ImageParser._fetch_single_url that allows attackers to make the indexing service fetch internal ad...

CVE-2026-119712

PipesHub before 0.10.0 contains a server-side request forgery vulnerability in ImageParser._fetch_single_url that allows

来源摘录 · NVD

#cve #cwe-918

漏洞预警2026-10-30 发布MEDIUM

PipesHub before 0.10.0 contains a rate limit bypass vulnerability in getClientIp() that allows unauthenticated attackers to evade per-IP throttling by spoofing X-Forwarded-For o...

CVE-2026-119711

PipesHub before 0.10.0 contains a rate limit bypass vulnerability in getClientIp() that allows unauthenticated attackers

来源摘录 · NVD

#cve #cwe-348

漏洞预警2026-10-30 发布HIGH

PipesHub 0.3.0 before 0.10.0 contains an event type injection vulnerability that allows authenticated users with only the crawl:write scope to delete connectors by injecting int...

CVE-2026-119710

PipesHub 0.3.0 before 0.10.0 contains an event type injection vulnerability that allows authenticated users with only th

来源摘录 · NVD

#cve #cwe-862

漏洞预警2026-10-30 发布MEDIUM

Grimoire before 1.0.0 contains an unauthenticated server-side request forgery vulnerability in the /api/fetch-metadata POST handler that passes user-supplied URLs to getMetadata...

CVE-2026-119709

Grimoire before 1.0.0 contains an unauthenticated server-side request forgery vulnerability in the /api/fetch-metadata P

来源摘录 · NVD

#cve #cwe-918

漏洞预警2026-10-30 发布MEDIUM

abp-next-admin 10.4.0 through 10.7.0 contains a cross-tenant authorization bypass in the BlobManagement download-by-name endpoint, letting authenticated users read other tenants...

CVE-2026-119708

abp-next-admin 10.4.0 through 10.7.0 contains a cross-tenant authorization bypass in the BlobManagement download-by-name

来源摘录 · NVD

#cve #cwe-639

漏洞预警2026-10-30 发布HIGH

SonicJS through 3.0.0 contains a missing authorization vulnerability in the /api/:collection and /api/content write routes that only check coarse role labels. Authenticated auth...

CVE-2026-119707

SonicJS through 3.0.0 contains a missing authorization vulnerability in the /api/:collection and /api/content write rout

来源摘录 · NVD

#cve #cwe-862