#CVE

共收录 63078 条相关情报。

← 返回所有主题
漏洞预警2026-10-29 发布HIGH

Incomplete list of disallowed inputs in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-96196

Incomplete list of disallowed inputs in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a secu

来源摘录 · NVD

漏洞预警2026-10-29 发布HIGH

Use after free in Microsoft Edge for iOS allows an unauthorized attacker to execute code over a network.

CVE-2026-96192

Use after free in Microsoft Edge for iOS allows an unauthorized attacker to execute code over a network.

来源摘录 · NVD

漏洞预警2026-10-29 发布HIGH

Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.

CVE-2026-96187

Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized

来源摘录 · NVD

漏洞预警2026-10-29 发布CRITICAL

IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to bypass security restrictions due to improper authentication.

CVE-2026-93680

IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to bypass security restrictions due to improper auth

来源摘录 · NVD

漏洞预警2026-10-29 发布INFO

Szafir is vulnerable to Path Traversal in the uploaded filename. A man-in-the-middle attacker who can reroute update request to their server can prepare arbitrary XML file that ...

CVE-2026-93571

Szafir is vulnerable to Path Traversal in the uploaded filename. A man-in-the-middle attacker who can reroute update req

来源摘录 · NVD

漏洞预警2026-10-29 发布INFO

Szafir and Szafir Weryfikująca are vulnerable to XML External Entity (XXE) injection. When a user signs or verify a crafted XML file containing a `DOCTYPE` with an external DTD ...

CVE-2026-93570

Szafir and Szafir Weryfikująca are vulnerable to XML External Entity (XXE) injection. When a user signs or verify a craf

来源摘录 · NVD

漏洞预警2026-10-29 发布MEDIUM

IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to cause a denial of service due to allocation of resources without limits or throttling.

CVE-2026-90991

IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to cause a denial of service due to al

来源摘录 · NVD

漏洞预警2026-10-29 发布MEDIUM

Improper neutralization of directives in dynamically evaluated code in the Manager web console of Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Wind...

CVE-2026-90872

Improper neutralization of directives in dynamically evaluated code in the Manager web console of Progress Software WS_F

来源摘录 · NVD

漏洞预警2026-10-29 发布MEDIUM

Improper limitation of a pathname to a restricted directory in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow an unauthenticated ...

CVE-2026-90871

Improper limitation of a pathname to a restricted directory in Progress Software WS_FTP Server versions prior to 2024.0.

来源摘录 · NVD

漏洞预警2026-10-29 发布MEDIUM

A missing release of backend receiver sessions in the Ad Hoc Transfer component of Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could lead ...

CVE-2026-90870

A missing release of backend receiver sessions in the Ad Hoc Transfer component of Progress Software WS_FTP Server versi

来源摘录 · NVD

漏洞预警2026-10-29 发布HIGH

A remote attacker who knows a valid account's enrolled SSH public key can terminate the shared SSH service in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025...

CVE-2026-90869

A remote attacker who knows a valid account's enrolled SSH public key can terminate the shared SSH service in Progress S

来源摘录 · NVD

漏洞预警2026-10-29 发布CRITICAL

An OS command injection vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow arbitrary command execution under certain...

CVE-2026-90868

An OS command injection vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Wind

来源摘录 · NVD

漏洞预警2026-10-29 发布HIGH

Improper access control in the Web Admin console of Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could expose administrative functionality ...

CVE-2026-90867

Improper access control in the Web Admin console of Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.

来源摘录 · NVD

漏洞预警2026-10-29 发布CRITICAL

A path traversal vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow a delegated Host Administrator to access locatio...

CVE-2026-90866

A path traversal vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows cou

来源摘录 · NVD

漏洞预警2026-10-29 发布CRITICAL

An OS command injection vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow arbitrary command execution with elevated...

CVE-2026-90865

An OS command injection vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Wind

来源摘录 · NVD

漏洞预警2026-10-29 发布CRITICAL

A path traversal vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow a delegated Host Administrator to access or modi...

CVE-2026-90864

A path traversal vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows cou

来源摘录 · NVD

漏洞预警2026-10-29 发布CRITICAL

Missing authorization in the administrative interface of Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow a delegated Host Administ...

CVE-2026-90863

Missing authorization in the administrative interface of Progress Software WS_FTP Server versions prior to 2024.0.7 and

来源摘录 · NVD

漏洞预警2026-10-29 发布MEDIUM

Improper authentication in the Web Transfer Module of Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow an attacker with a user’s pa...

CVE-2026-90862

Improper authentication in the Web Transfer Module of Progress Software WS_FTP Server versions prior to 2024.0.7 and 202

来源摘录 · NVD

漏洞预警2026-10-29 发布MEDIUM

Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows may expose a user's password in clear text to another administrator, who could use it to gain ...

CVE-2026-90861

Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows may expose a user's password in clear

来源摘录 · NVD

漏洞预警2026-10-29 发布MEDIUM

Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-88090

Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized

来源摘录 · NVD