#CVE

共收录 63078 条相关情报。

漏洞预警2026-10-29 发布MEDIUM

Improper verification of cryptographic signature in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-88078

Improper verification of cryptographic signature in Microsoft Edge (Chromium-based) allows an unauthorized attacker to p

来源摘录 · NVD

#cve #cwe-347

漏洞预警2026-10-29 发布HIGH

Integer overflow or wraparound in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-88077

Integer overflow or wraparound in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges

来源摘录 · NVD

#cve #cwe-190

漏洞预警2026-10-29 发布HIGH

Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges over a network.

CVE-2026-85899

Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges over a network.

来源摘录 · NVD

#cve #cwe-416

漏洞预警2026-10-29 发布HIGH

Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

CVE-2026-85897

Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a net

来源摘录 · NVD

#cve #cwe-122

漏洞预警2026-10-29 发布HIGH

Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

CVE-2026-85890

Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

来源摘录 · NVD

#cve #cwe-415

漏洞预警2026-10-29 发布MEDIUM

Incorrect authorization in Microsoft Edge for Android allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-85330

Incorrect authorization in Microsoft Edge for Android allows an unauthorized attacker to bypass a security feature over

来源摘录 · NVD

#cve #cwe-863

漏洞预警2026-10-29 发布MEDIUM

Multi-Factor Authentication Bypass vulnerability in SSH component in Progress Software WS_FTP Server versions prior to 2024.0.6, and 2025.0.3 on Windows allows authenticated use...

CVE-2026-84296

Multi-Factor Authentication Bypass vulnerability in SSH component in Progress Software WS_FTP Server versions prior to 2

来源摘录 · NVD

#cve #cwe-287 #cwe-303

漏洞预警2026-10-29 发布CRITICAL

Improper authentication in Progress Software WS_FTP Server versions prior to 2024.0.6 and 2025.0.3 on Windows could allow an unauthenticated remote attacker to access sensitive ...

CVE-2026-84295

Improper authentication in Progress Software WS_FTP Server versions prior to 2024.0.6 and 2025.0.3 on Windows could allo

来源摘录 · NVD

#cve #cwe-287 #cwe-522

漏洞预警2026-10-29 发布HIGH

Improper limitation of pathname in the Ad Hoc Transfer component of Progress Software WS_FTP Server versions prior to 2024.0.6 and 2025.0.3 on Windows could allow an authenticat...

CVE-2026-84294

Improper limitation of pathname in the Ad Hoc Transfer component of Progress Software WS_FTP Server versions prior to 20

来源摘录 · NVD

#cve #cwe-22

漏洞预警2026-10-29 发布MEDIUM

IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to overwrite arbitrary files due to improper limitation of a pathname to a restricted directory.

CVE-2026-77819

IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to overwrite arbitrary files due to im

来源摘录 · NVD

#cve #cwe-22

漏洞预警2026-10-29 发布MEDIUM

IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to obtain sensitive information due to improper sanitization of secrets during flow and project...

CVE-2026-77817

IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to obtain sensitive information due to

来源摘录 · NVD

#cve #cwe-200

漏洞预警2026-10-29 发布INFO

Zimbra is vulnerable to Stored Cross-Site Scripting (XSS) via the From email header during HTML reply composition in Classic UI. Due to insufficient sanitization of the From hea...

CVE-2026-66912

Zimbra is vulnerable to Stored Cross-Site Scripting (XSS) via the From email header during HTML reply composition in Cla

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-29 发布INFO

Zimbra is vulnerable to stored cross-site scripting (XSS) via the Content-Location MIME header in email attachments. Due to lack of sanitization of the Content-Location header, ...

CVE-2026-66911

Zimbra is vulnerable to stored cross-site scripting (XSS) via the Content-Location MIME header in email attachments. Due

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-29 发布CRITICAL

Unauthenticated PHP Object Injection in Zoho Flow <= 2.14.5 versions.

CVE-2026-62131

Unauthenticated PHP Object Injection in Zoho Flow <= 2.14.5 versions.

来源摘录 · NVD

#cve #cwe-502

漏洞预警2026-10-29 发布CRITICAL

Unauthenticated PHP Object Injection in Gunslinger <= 1.11 versions.

CVE-2026-62018

Unauthenticated PHP Object Injection in Gunslinger <= 1.11 versions.

来源摘录 · NVD

#cve #cwe-502

漏洞预警2026-10-29 发布CRITICAL

Unauthenticated PHP Object Injection in Good Homes <= 1.3.13 versions.

CVE-2026-62017

Unauthenticated PHP Object Injection in Good Homes <= 1.3.13 versions.

来源摘录 · NVD

#cve #cwe-502

漏洞预警2026-10-29 发布CRITICAL

Unauthenticated PHP Object Injection in Gamic <= 1.19 versions.

CVE-2026-62016

Unauthenticated PHP Object Injection in Gamic <= 1.19 versions.

来源摘录 · NVD

#cve #cwe-502

漏洞预警2026-10-29 发布CRITICAL

Unauthenticated PHP Object Injection in Gamezone <= 1.1.11 versions.

CVE-2026-62015

Unauthenticated PHP Object Injection in Gamezone <= 1.1.11 versions.

来源摘录 · NVD

#cve #cwe-502

漏洞预警2026-10-29 发布CRITICAL

Unauthenticated PHP Object Injection in EmojiNation <= 1.0.12 versions.

CVE-2026-62014

Unauthenticated PHP Object Injection in EmojiNation <= 1.0.12 versions.

来源摘录 · NVD

#cve #cwe-502

漏洞预警2026-10-29 发布CRITICAL

Unauthenticated PHP Object Injection in Edge Decor <= 2.9 versions.

CVE-2026-62013

Unauthenticated PHP Object Injection in Edge Decor <= 2.9 versions.

来源摘录 · NVD

#cve #cwe-502