#CVE

共收录 63078 条相关情报。

漏洞预警2026-10-28 发布CRITICAL

The ei_git_repo_url parameter in the Git remote configuration endpoint of KaliFast is vulnerable to OS Command Injection. This OS Command Injection vulnerability allows an authe...

CVE-2026-118477

The ei_git_repo_url parameter in the Git remote configuration endpoint of KaliFast is vulnerable to OS Command Injection

来源摘录 · NVD

#cve #cwe-78

漏洞预警2026-10-28 发布MEDIUM

Missing Authorization vulnerability in wphocus My auctions allegro my-auctions-allegro-free-edition allows Exploiting Incorrectly Configured Access Control Security Levels.This ...

CVE-2026-116855

Missing Authorization vulnerability in wphocus My auctions allegro my-auctions-allegro-free-edition allows Exploiting In

来源摘录 · NVD

#cve #cwe-862

漏洞预警2026-10-28 发布CRITICAL

The che-machine-exec service constructs a shell command by concatenating user-controlled input (the username and namespace fields from the /exec/init and /exec/config JSON endpo...

CVE-2026-114278

The che-machine-exec service constructs a shell command by concatenating user-controlled input (the username and namespa

来源摘录 · NVD

#cve #cwe-78

漏洞预警2026-10-28 发布INFO

Joomla Extension - icagenda.com - CSV formula injection in the registrations export in iCagenda 3.5.0 to 4.0.16

CVE-2026-102799

Joomla Extension - icagenda.com - CSV formula injection in the registrations export in iCagenda 3.5.0 to 4.0.16

来源摘录 · NVD

#cve #cwe-1236

漏洞预警2026-10-28 发布INFO

Joomla Extension - icagenda.com - Stored XSS via url-type event Custom Field in iCagenda 3.2.1 to 4.0.16

CVE-2026-102790

Joomla Extension - icagenda.com - Stored XSS via url-type event Custom Field in iCagenda 3.2.1 to 4.0.16

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-28 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: Don't reset VMBus connection state on error/exit paths In two places, current code forces vmbu...

CVE-2026-99216

In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: Don't reset VMBus connection state on

来源摘录 · NVD / OSV.dev

#advisory #cve #linux

漏洞预警2026-10-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: power: supply: core: prevent unregistering a power supply while a callback runs Once a power supply is regi...

CVE-2026-99215

In the Linux kernel, the following vulnerability has been resolved: power: supply: core: prevent unregistering a power

历史摘要 · 未重新核验 · NVD / OSV.dev

#advisory #cve #linux

漏洞预警2026-10-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: drm/vc4: hdmi: Move packet RAM enable to PM runtime Audio can be triggered by the HPD handler and start up ...

CVE-2026-99214

In the Linux kernel, the following vulnerability has been resolved: drm/vc4: hdmi: Move packet RAM enable to PM runtime

来源摘录 · NVD

#cve

漏洞预警2026-10-28 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: vsock: treat TCP_CLOSING as once-established Handle the TCP_ESTABLISHED -> TCP_CLOSING transition on OP_RST...

CVE-2026-99213

In the Linux kernel, the following vulnerability has been resolved: vsock: treat TCP_CLOSING as once-established Handl

来源摘录 · NVD / OSV.dev

#advisory #cve #linux

漏洞预警2026-10-28 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: net/rds: don't let the rdma_cm destroy an id RDS still owns on route failure rds_rdma_cm_event_handler_cmn(...

CVE-2026-99212

In the Linux kernel, the following vulnerability has been resolved: net/rds: don't let the rdma_cm destroy an id RDS st

来源摘录 · NVD / OSV.dev

#advisory #cve #linux

漏洞预警2026-10-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: netlink: reset skb headers before unicast and multicast filtering Socket filters can use SKF_NET_OFF and SK...

CVE-2026-99211

In the Linux kernel, the following vulnerability has been resolved: netlink: reset skb headers before unicast and multi

来源摘录 · NVD

#cve

漏洞预警2026-10-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: accel/rocket: clear rdev on device init failure rocket_probe() stores the return value from rocket_device_i...

CVE-2026-99210

In the Linux kernel, the following vulnerability has been resolved: accel/rocket: clear rdev on device init failure ro

历史摘要 · 未重新核验 · NVD / OSV.dev

#advisory #cve #linux

漏洞预警2026-10-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: drm/xe: skip eviction of a BO with no resource xe_evict_flags() switches on tbo->resource->mem_type to choo...

CVE-2026-99209

In the Linux kernel, the following vulnerability has been resolved: drm/xe: skip eviction of a BO with no resource xe_

历史摘要 · 未重新核验 · NVD / OSV.dev

#advisory #cve #linux

漏洞预警2026-10-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: drm/xe/oa: Zero OA buffer at allocation ttm_bo_type_kernel BOs are not guaranteed to be zeroed on allocatio...

CVE-2026-99208

In the Linux kernel, the following vulnerability has been resolved: drm/xe/oa: Zero OA buffer at allocation ttm_bo_typ

历史摘要 · 未重新核验 · NVD / OSV.dev

#advisory #cve #linux

漏洞预警2026-10-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: scsi: target: Disable interrupts while holding delayed_cmd_lock target_do_delayed_work() takes dev->delayed...

CVE-2026-99207

In the Linux kernel, the following vulnerability has been resolved: scsi: target: Disable interrupts while holding dela

历史摘要 · 未重新核验 · NVD / OSV.dev

#advisory #cve #linux

漏洞预警2026-10-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix race in discovery auth updates Separate configfs opens can concurrently update the...

CVE-2026-99206

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix race in discovery auth upd

来源摘录 · NVD

#cve

漏洞预警2026-10-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: sched/core: Call wakeup_preempt() for queued tasks during class change Paul reported recent RCU changes exp...

CVE-2026-99205

In the Linux kernel, the following vulnerability has been resolved: sched/core: Call wakeup_preempt() for queued tasks

历史摘要 · 未重新核验 · NVD / OSV.dev

#advisory #cve #linux

漏洞预警2026-10-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: ocfs2/dlm: Protect the recovery list during debugfs reads Recovery participant records must remain alive wh...

CVE-2026-99204

In the Linux kernel, the following vulnerability has been resolved: ocfs2/dlm: Protect the recovery list during debugfs

来源摘录 · NVD

#cve

漏洞预警2026-10-28 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: pipe: preserve existing fasync readers on writer setup failure F_SETFL and FIOASYNC decide whether to invok...

CVE-2026-99203

In the Linux kernel, the following vulnerability has been resolved: pipe: preserve existing fasync readers on writer se

来源摘录 · NVD / OSV.dev

#advisory #cve #linux

漏洞预警2026-10-28 发布INFO

In the Linux kernel, the following vulnerability has been resolved: scsi: libsas: Fix SMP IO deadlock during HA resume smp_execute_task_sg() calls pm_runtime_get_sync() on the...

CVE-2026-99202

In the Linux kernel, the following vulnerability has been resolved: scsi: libsas: Fix SMP IO deadlock during HA resume

来源摘录 · NVD

#cve