#CVE

共收录 63078 条相关情报。

漏洞预警2026-10-29 发布HIGH

Insecure permissions in the NotificationHelper component of NoNonsense Notes versionCode 72600 allows unauthorized attackers to write in another user's notes via supplying a not...

CVE-2026-107037

Insecure permissions in the NotificationHelper component of NoNonsense Notes versionCode 72600 allows unauthorized attac

来源摘录 · NVD

#cve #cwe-284

漏洞预警2026-10-29 发布MEDIUM

Insecure permissions in Mission Control / AIMSICD versionCode 2026080501 allows unauthorized attackers to invoke an exported component, impacting the tracker blocker mechanism o...

CVE-2026-107036

Insecure permissions in Mission Control / AIMSICD versionCode 2026080501 allows unauthorized attackers to invoke an expo

来源摘录 · NVD

#cve #cwe-926

漏洞预警2026-10-29 发布MEDIUM

Insecure permissions in the object/Page.java component of MBasov OMN Outline notes Markdown versionCode 3400 allows unauthorized attackers to arbitrarily write content into anot...

CVE-2026-107035

Insecure permissions in the object/Page.java component of MBasov OMN Outline notes Markdown versionCode 3400 allows unau

来源摘录 · NVD

#cve #cwe-284

漏洞预警2026-10-29 发布CRITICAL

Insecure permissions in LeafPad / Leaf Note v1.21 (versionCode 21) allows unauthorized attackers to arbitrarily read another user's note data.

CVE-2026-107034

Insecure permissions in LeafPad / Leaf Note v1.21 (versionCode 21) allows unauthorized attackers to arbitrarily read ano

来源摘录 · NVD

#cve #cwe-284

漏洞预警2026-10-29 发布MEDIUM

Insecure permissions in the MirakelInternalContentProvider component of Mirakel v3.0 (versionCode 60) allows unauthorized attackers to arbitrarily read and modify another user's...

CVE-2026-107033

Insecure permissions in the MirakelInternalContentProvider component of Mirakel v3.0 (versionCode 60) allows unauthorize

来源摘录 · NVD

#cve #cwe-926

漏洞预警2026-10-29 发布CRITICAL

Insecure permissions in Bulk Share : Location Sender v2.1.0 (versionCode 5) allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and c...

CVE-2026-107032

Insecure permissions in Bulk Share : Location Sender v2.1.0 (versionCode 5) allows unauthorized attackers to invoke an e

来源摘录 · NVD

#cve #cwe-926

漏洞预警2026-10-29 发布HIGH

Insecure permissions in craftxbox YubiClip XOR fork v1.0.1 (versionCode 10003) allows unauthorized attackers to trigger the OTP-clipboard (One-Time Password) mechanism, causing ...

CVE-2026-107030

Insecure permissions in craftxbox YubiClip XOR fork v1.0.1 (versionCode 10003) allows unauthorized attackers to trigger

来源摘录 · NVD

#cve #cwe-926

漏洞预警2026-10-29 发布CRITICAL

Insecure permissions in rubenalfon Pile v1.1.3 allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and overwriting.

CVE-2026-107029

Insecure permissions in rubenalfon Pile v1.1.3 allows unauthorized attackers to invoke an exported component, leading to

来源摘录 · NVD

#cve #cwe-732

漏洞预警2026-10-29 发布CRITICAL

Insecure permissions in wbpxre150 Shopping List v11.0 (versionCode 11) allows unauthorized attackers to invoke an exported component, leading to manipulation of the shopping-lis...

CVE-2026-107028

Insecure permissions in wbpxre150 Shopping List v11.0 (versionCode 11) allows unauthorized attackers to invoke an export

来源摘录 · NVD

#cve #cwe-284

漏洞预警2026-10-29 发布CRITICAL

Insecure permissions in lz233 Tarnhelm v1.8.2 (versionCode 20250630) allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and overwrit...

CVE-2026-107027

Insecure permissions in lz233 Tarnhelm v1.8.2 (versionCode 20250630) allows unauthorized attackers to invoke an exported

来源摘录 · NVD

#cve #cwe-926

漏洞预警2026-10-29 发布HIGH

Insecure permissions in Share to Clipboard v1.14.1 (versionCode 32) allows unauthorized attackers to arbitrarily overwrite another user's clipboard content.

CVE-2026-107026

Insecure permissions in Share to Clipboard v1.14.1 (versionCode 32) allows unauthorized attackers to arbitrarily overwri

来源摘录 · NVD

#cve #cwe-732

漏洞预警2026-10-29 发布HIGH

Insecure permissions in WikiAndPad alpha/beta v0.2alpha03 (versionCode 200300) allows unauthorized attackers to export the application's data.

CVE-2026-107025

Insecure permissions in WikiAndPad alpha/beta v0.2alpha03 (versionCode 200300) allows unauthorized attackers to export t

来源摘录 · NVD

#cve #cwe-926

漏洞预警2026-10-29 发布INFO

Szafir accepts any client or server certificate without performing certificate and hostname validation, allowing HTTPS connections without authenticating the remote server. An a...

CVE-2026-106036

Szafir accepts any client or server certificate without performing certificate and hostname validation, allowing HTTPS c

来源摘录 · NVD

#cve #cwe-295

漏洞预警2026-10-29 发布CRITICAL

IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.

CVE-2026-104339

IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker to execute arbitrary code due to improper neutraliza

来源摘录 · NVD

#cve #cwe-94

漏洞预警2026-10-29 发布MEDIUM

IBM Langflow OSS 1.0.0 through 1.12.3 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system...

CVE-2026-104331

IBM Langflow OSS 1.0.0 through 1.12.3 is vulnerable to server-side request forgery (SSRF). This may allow an authenticat

来源摘录 · NVD

#cve #cwe-918

漏洞预警2026-10-29 发布HIGH

IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS comm...

CVE-2026-104328

IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary code due to impro

来源摘录 · NVD

#cve #cwe-94

漏洞预警2026-10-29 发布HIGH

IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary code due to deserialization of untrusted data.

CVE-2026-104324

IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary code due to deser

来源摘录 · NVD

#cve #cwe-502

漏洞预警2026-10-29 发布CRITICAL

IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker who could reach the message broker to execute arbitrary code on the system due to the deserialization of untr...

CVE-2026-104317

IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker who could reach the message broker to execute arbitr

来源摘录 · NVD

#cve #cwe-502

漏洞预警2026-10-29 发布MEDIUM

IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker to cancel any victim's running background workflow job by sending a single HTTP request, resulting in...

CVE-2026-104316

IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker to cancel any victim's running background wo

来源摘录 · NVD

#cve #cwe-285

漏洞预警2026-10-29 发布MEDIUM

IBM Langflow OSS 1.0.0 through 1.12.3 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system...

CVE-2026-104315

IBM Langflow OSS 1.0.0 through 1.12.3 is vulnerable to server-side request forgery (SSRF). This may allow an authenticat

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-918