#CVE

共收录 63078 条相关情报。

← 返回所有主题
漏洞预警2026-10-28 发布HIGH

An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in AccessManager in Juniper Networks Session Smart Router and Session...

CVE-2026-103403

An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in AccessMan

来源摘录 · NVD

漏洞预警2026-10-28 发布HIGH

An Insufficient Verification of Data Authenticity vulnerability in PCLI in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker with write access...

CVE-2026-103402

An Insufficient Verification of Data Authenticity vulnerability in PCLI in Juniper Networks Session Smart Router and Ses

来源摘录 · NVD

漏洞预警2026-10-28 发布HIGH

An Improper Link Resolution Before File Access ('Link Following') vulnerability in the unauthenticated web server handlers in Juniper Networks Session Smart Router and Session S...

CVE-2026-103401

An Improper Link Resolution Before File Access ('Link Following') vulnerability in the unauthenticated web server handle

来源摘录 · NVD

漏洞预警2026-10-28 发布MEDIUM

An Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in the ember service in Juniper Networks Session Smart Router...

CVE-2026-103400

An Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in t

来源摘录 · NVD

漏洞预警2026-10-28 发布LOW

An Improper Initialization vulnerability in the SSR software in Juniper Networks Session Smart Router allows an attacker to decrypt traffic or cause a denial of service via secu...

CVE-2026-103394

An Improper Initialization vulnerability in the SSR software in Juniper Networks Session Smart Router allows an attacker

来源摘录 · NVD

漏洞预警2026-10-28 发布MEDIUM

An Out-of-Bounds Read vulnerability in the VRRP implementation in Juniper Networks Session Smart Router allows an L2-adjacent attacker to read stale memory contents or cause a s...

CVE-2026-103393

An Out-of-Bounds Read vulnerability in the VRRP implementation in Juniper Networks Session Smart Router allows an L2-adj

来源摘录 · NVD

漏洞预警2026-10-28 发布MEDIUM

An Out-of-Bounds Write vulnerability in the TCP header processing in Juniper Networks Session Smart Router allows an attacker to corrupt TCP payload data and potentially cause s...

CVE-2026-103392

An Out-of-Bounds Write vulnerability in the TCP header processing in Juniper Networks Session Smart Router allows an att

来源摘录 · NVD

漏洞预警2026-10-28 发布MEDIUM

An Out-of-bounds Write vulnerability in the SSR TCP proxy/optimization path in Juniper Networks Session Smart Router allows an attacker to corrupt forwarded packet data and pote...

CVE-2026-103391

An Out-of-bounds Write vulnerability in the SSR TCP proxy/optimization path in Juniper Networks Session Smart Router all

来源摘录 · NVD

漏洞预警2026-10-28 发布MEDIUM

An Out-of-Bounds Read vulnerability in the HttpParser component in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker to cause a denial of serv...

CVE-2026-103390

An Out-of-Bounds Read vulnerability in the HttpParser component in Juniper Networks Session Smart Router and Session Sma

来源摘录 · NVD

漏洞预警2026-10-28 发布HIGH

A user with permission to edit contact points but not their protected fields can change protected settings, such as a contact point's destination URL, by switching an integratio...

CVE-2026-100105

A user with permission to edit contact points but not their protected fields can change protected settings, such as a co

来源摘录 · NVD

漏洞预警2026-10-28 发布HIGH

A heap buffer overflow caused by mismatched size usage in CopyArea CPU-to-FBO path in X.Org X Server before 21.1.15 and XWayland before 24.1.14 could be used by authenticated X ...

CVE-2026-93522

A heap buffer overflow caused by mismatched size usage in CopyArea CPU-to-FBO path in X.Org X Server before 21.1.15 and

来源摘录 · NVD

漏洞预警2026-10-28 发布HIGH

A buffer overflow in RandR ChangeProviderProperty requests in X.Org X Server before 2.1.25 and XWayland before 24.4.14 could be used by authenticated X clients to crash or execu...

CVE-2026-93521

A buffer overflow in RandR ChangeProviderProperty requests in X.Org X Server before 2.1.25 and XWayland before 24.4.14 c

来源摘录 · NVD / OSV.dev

漏洞预警2026-10-28 发布HIGH

Ninja Forms plugin for WordPress before 3.15.4 contains an incomplete server-side validation vulnerability that allows unauthenticated attackers to submit arbitrary values to Ch...

CVE-2026-67187

Ninja Forms plugin for WordPress before 3.15.4 contains an incomplete server-side validation vulnerability that allows u

来源摘录 · NVD

漏洞预警2026-10-28 发布HIGH

YosemiteCrew provides organization-based service and task management. In the source-reported affected main and dev snapshots, YosemiteCrew's service and PMS task-library/templat...

CVE-2026-59979

YosemiteCrew provides organization-based service and task management. In the source-reported affected main and dev snaps

来源摘录 · NVD

漏洞预警2026-10-28 发布HIGH

Shopper is a Headless e-commerce Admin Panel. From 2.8.0 until 2.8.1, three Shopper Livewire admin components retain authorization gaps after the earlier team-settings authoriza...

CVE-2026-56828

Shopper is a Headless e-commerce Admin Panel. From 2.8.0 until 2.8.1, three Shopper Livewire admin components retain aut

来源摘录 · NVD / OSV.dev

漏洞预警2026-10-28 发布MEDIUM

Xibo is an open source digital signage platform with a web content management system and Windows display player software. Prior to 4.4.3, missing authorization on `POST /display...

CVE-2026-50543

Xibo is an open source digital signage platform with a web content management system and Windows display player software

来源摘录 · NVD / OSV.dev

漏洞预警2026-10-28 发布MEDIUM

Xibo is an open source digital signage platform with a web content management system and Windows display player software. Prior to 4.4.3, missing access-control checks on `GET /...

CVE-2026-50542

Xibo is an open source digital signage platform with a web content management system and Windows display player software

来源摘录 · NVD

漏洞预警2026-10-28 发布MEDIUM

Xibo is an open source digital signage platform with a web content management system and Windows display player software. Prior to 4.4.3, missing object-level authorization on `...

CVE-2026-50539

Xibo is an open source digital signage platform with a web content management system and Windows display player software

来源摘录 · NVD

漏洞预警2026-10-28 发布INFO

SimulationCraft is a tool to explore combat mechanics in World of Warcraft. In builds after release-820-01 and before the identified May 7, 2026 nightly, the `bcp_api.cpp` loop ...

CVE-2026-47235

SimulationCraft is a tool to explore combat mechanics in World of Warcraft. In builds after release-820-01 and before th

来源摘录 · NVD

漏洞预警2026-10-28 发布CRITICAL

XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. From 1.13 until 1.14.5, the `excerpt-include` macro does not properly...

CVE-2026-44179

XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. From 1.13 un

来源摘录 · NVD