#CVE

共收录 63078 条相关情报。

← 返回所有主题
漏洞预警2026-10-28 发布MEDIUM

Xibo is an open source digital signage platform with a web content management system and Windows display player software. Prior to 4.4.3, missing access-control checks on `GET /...

CVE-2026-50541

Xibo is an open source digital signage platform with a web content management system and Windows display player software

来源摘录 · NVD / OSV.dev

漏洞预警2026-10-28 发布HIGH

Deserialization of Untrusted Data vulnerability in stepasyuk Filter Everything — WordPress & WooCommerce Filters filter-everything allows Object Injection.This issue af...

CVE-2026-116390

Deserialization of Untrusted Data vulnerability in stepasyuk Filter Everything — WordPress & WooCommerce Filter

来源摘录 · NVD

漏洞预警2026-10-28 发布HIGH

Deserialization of Untrusted Data vulnerability in crossi72 Phoenix Media Rename phoenix-media-rename allows Object Injection.This issue affects Phoenix Media Rename: from n/a t...

CVE-2026-116389

Deserialization of Untrusted Data vulnerability in crossi72 Phoenix Media Rename phoenix-media-rename allows Object Inje

来源摘录 · NVD

漏洞预警2026-10-28 发布INFO

Allocation of Resources Without Limits or Throttling vulnerability in the HTTP/2 request body reader of mtrudel bandit allows an unauthenticated remote attacker to exhaust serve...

CVE-2026-116078

Allocation of Resources Without Limits or Throttling vulnerability in the HTTP/2 request body reader of mtrudel bandit a

来源摘录 · NVD

漏洞预警2026-10-28 发布CRITICAL

Deserialization of Untrusted Data vulnerability in Ultimate Member Ultimate Member ultimate-member allows Object Injection.This issue affects Ultimate Member: from n/a through 2...

CVE-2026-115968

Deserialization of Untrusted Data vulnerability in Ultimate Member Ultimate Member ultimate-member allows Object Injecti

来源摘录 · NVD

漏洞预警2026-10-28 发布HIGH

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Advanced Ads GmbH Advanced Ads – Tracking advanced-ads-tracking allows Blin...

CVE-2026-115603

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Advanced Ads GmbH

来源摘录 · NVD

漏洞预警2026-10-28 发布HIGH

Deserialization of Untrusted Data vulnerability in weDevs Dokan dokan-lite allows Object Injection.This issue affects Dokan: from n/a through 5.3.1.

CVE-2026-115590

Deserialization of Untrusted Data vulnerability in weDevs Dokan dokan-lite allows Object Injection.This issue affects Do

来源摘录 · NVD

漏洞预警2026-10-28 发布INFO

Wing FTP Server does not verify user's base folder. An attacker with admin privileges can add user directories via scripts, allowing the added directories to escape the base fol...

CVE-2026-105420

Wing FTP Server does not verify user's base folder. An attacker with admin privileges can add user directories via scrip

来源摘录 · NVD

漏洞预警2026-10-28 发布MEDIUM

A use-after-free caused by lack of lifecycle management when adding / removing XInput master devices in X.org X Server before 21.1.25 and XWayland before 24.1.14 could be used b...

CVE-2026-93516

A use-after-free caused by lack of lifecycle management when adding / removing XInput master devices in X.org X Server b

来源摘录 · NVD

漏洞预警2026-10-28 发布INFO

A use-after-free in present_clear_window_notifies() in the X.org X Server before 21.1.25 and X Wayland before 24.1.14 could be used by malicious X clients to crash or potential...

CVE-2026-93515

A use-after-free in present_clear_window_notifies() in the X.org X Server before 21.1.25 and X Wayland before 24.1.14 c

来源摘录 · NVD

漏洞预警2026-10-28 发布MEDIUM

HCL BigFix AEX is affected by an Information Disclosure vulnerability due to improper handling of errors or exceptional conditions. This could allow an attacker to obtain sensit...

CVE-2026-67080

HCL BigFix AEX is affected by an Information Disclosure vulnerability due to improper handling of errors or exceptional

来源摘录 · NVD

漏洞预警2026-10-28 发布MEDIUM

HCL BigFix AEX is affected by a Clickjacking vulnerability, which could allow an attacker to embed the application within a malicious web page or iframe and trick users into per...

CVE-2026-67079

HCL BigFix AEX is affected by a Clickjacking vulnerability, which could allow an attacker to embed the application withi

来源摘录 · NVD

漏洞预警2026-10-28 发布MEDIUM

HCL BigFix AEX is affected by a Server-Side Request Forgery vulnerability, which could allow an attacker to cause the application to send unauthorized requests to external resou...

CVE-2026-67077

HCL BigFix AEX is affected by a Server-Side Request Forgery vulnerability, which could allow an attacker to cause the ap

来源摘录 · NVD

漏洞预警2026-10-28 发布CRITICAL

HCL BigFix AEX is affected by a Remote Code Execution Vulnerability . It may allow attackers to execute code with the privileges of the affected application or service, potentia...

CVE-2026-67074

HCL BigFix AEX is affected by a Remote Code Execution Vulnerability . It may allow attackers to execute code with the pr

来源摘录 · NVD

漏洞预警2026-10-28 发布HIGH

HCL BigFix AEX is affected by an Unrestricted File Upload and Improper Access Control vulnerability. This could allow an attacker to upload malicious or unauthorized files and d...

CVE-2026-67073

HCL BigFix AEX is affected by an Unrestricted File Upload and Improper Access Control vulnerability. This could allow an

来源摘录 · NVD

漏洞预警2026-10-28 发布MEDIUM

Waline is a comment system with backend support. Prior to version 1.41.1, the login endpoint POST /api/token reads the email field from the request body without checking its typ...

CVE-2026-55369

Waline is a comment system with backend support. Prior to version 1.41.1, the login endpoint POST /api/token reads the e

来源摘录 · NVD

漏洞预警2026-10-28 发布LOW

HCL BigFix AEX product is affected by a vulnerability in the aws-sdk package.. It may cause AWS API requests to be sent to unintended or non‐AWS endpoints.

CVE-2026-21830

HCL BigFix AEX product is affected by a vulnerability in the aws-sdk package.. It may cause AWS API requests to be sent

来源摘录 · NVD

漏洞预警2026-10-28 发布HIGH

In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, improper verification of cryptographic signatures and improper certificate validation in RadPdf...

CVE-2026-118040

In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, improper verification of cryptographic

来源摘录 · NVD

漏洞预警2026-10-28 发布HIGH

In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, an XML external entity reference vulnerability in SVG image processing allows an unauthenticate...

CVE-2026-118039

In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, an XML external entity reference vulne

来源摘录 · NVD

漏洞预警2026-10-28 发布HIGH

In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, a path traversal vulnerability in the Convert and Merge AI agent tools allows an authenticated ...

CVE-2026-118038

In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, a path traversal vulnerability in the

来源摘录 · NVD