#CVE

共收录 56479 条相关情报。

漏洞预警2026-10-30 发布MEDIUM

Cross-Site Request Forgery (CSRF) vulnerability in WPExperts APIExperts Square for WooCommerce woosquare allows Cross Site Request Forgery.This issue affects APIExperts Square f...

CVE-2026-119466

Cross-Site Request Forgery (CSRF) vulnerability in WPExperts APIExperts Square for WooCommerce woosquare allows Cross Si

来源摘录 · NVD

#cve #cwe-352

漏洞预警2026-10-30 发布MEDIUM

Missing Authorization vulnerability in Liquid Web / StellarWP The Events Calendar the-events-calendar allows Exploiting Incorrectly Configured Access Control Security Levels.Thi...

CVE-2026-119367

Missing Authorization vulnerability in Liquid Web / StellarWP The Events Calendar the-events-calendar allows Exploiting

来源摘录 · NVD

#cve #cwe-862

漏洞预警2026-10-30 发布MEDIUM

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Media Player Addons for Elementor – Media Player widget for WP med...

CVE-2026-119365

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Media Pla

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-30 发布MEDIUM

Wekan is open source kanban built with Meteor. Prior to 11.11, the user-search publication in server/publications/users.js and the searchUsers method in server/models/users.js p...

CVE-2026-119300

Wekan is open source kanban built with Meteor. Prior to 11.11, the user-search publication in server/publications/users.

来源摘录 · NVD

#cve #cwe-1333

漏洞预警2026-10-30 发布MEDIUM

gopacket provides packet processing capabilities for Go. Prior to 1.7.2, the SCTP chunk chain in layers/sctp.go passes attacker-controlled declared lengths and counts to decodeS...

CVE-2026-119299

gopacket provides packet processing capabilities for Go. Prior to 1.7.2, the SCTP chunk chain in layers/sctp.go passes a

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-125 #cwe-129

漏洞预警2026-10-30 发布MEDIUM

croc is a tool that allows any two computers to simply and securely transfer files and folders. Prior to 11.5.2, the receive-side file-readiness loop in src/croc/croc.go treats ...

CVE-2026-119298

croc is a tool that allows any two computers to simply and securely transfer files and folders. Prior to 11.5.2, the rec

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-73

漏洞预警2026-10-30 发布MEDIUM

Incomplete string validation in AWS aws-nitro-enclaves-sdk-c before 0.4.6 may allow a third party to impersonate the AWS KMS endpoint. To remediate this issue, users should r...

CVE-2026-119148

Incomplete string validation in AWS aws-nitro-enclaves-sdk-c before 0.4.6 may allow a third party to impersonate the AWS

来源摘录 · NVD

#cve #cwe-807

漏洞预警2026-10-30 发布HIGH

A use-after-free and double-free issue in the SetClient command handler of the kmstool-enclave sample application of AWS aws-nitro-enclaves-sdk-c before 0.4.6 may allow an appli...

CVE-2026-119116

A use-after-free and double-free issue in the SetClient command handler of the kmstool-enclave sample application of AWS

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-415 #cwe-416

漏洞预警2026-10-30 发布HIGH

In OpenStack keystonemiddleware before 13.0.2, by supplying a custom X-Service-Token header in a request, anyone in possession of an access-restricted application credential may...

CVE-2026-115642

In OpenStack keystonemiddleware before 13.0.2, by supplying a custom X-Service-Token header in a request, anyone in poss

来源摘录 · NVD

#cve #cwe-863

漏洞预警2026-10-30 发布INFO

Improper certificate validation in the HTTPS listener in Canonical LXD 4.0.14, 5.0.10, 5.21.8, 6.9 before 4.0.15, 5.0.11, 5.21.9, 6.10.1 allows an unauthenticated attacker to au...

CVE-2026-112816

Improper certificate validation in the HTTPS listener in Canonical LXD 4.0.14, 5.0.10, 5.21.8, 6.9 before 4.0.15, 5.0.11

来源摘录 · NVD

#cve #cwe-295

漏洞预警2026-10-30 发布MEDIUM

A security vulnerability exists in the authorization handling for the local (management) cluster shell feature of SUSE Rancher Manager 2.15.0 up to 2.15.3, 2.14.0 up to 2.14.7, ...

CVE-2026-104623

A security vulnerability exists in the authorization handling for the local (management) cluster shell feature of SUSE R

来源摘录 · NVD

#cve #cwe-290

漏洞预警2026-10-30 发布INFO

An issue was discovered in Keyfactor EJBCA 9. When an administrator is removed from its administrator role while having a valid TLS session, EJBCA may, in certain circumstances,...

CVE-2025-49602

An issue was discovered in Keyfactor EJBCA 9. When an administrator is removed from its administrator role while having

来源摘录 · NVD

#cve

漏洞预警2026-10-30 发布MEDIUM

Missing Authorization vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fluent...

CVE-2026-62141

Missing Authorization vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Exploiting Incorrectly Configured

来源摘录 · NVD

#cve #cwe-862

漏洞预警2026-10-30 发布HIGH

Blender before 4.5.15 and 5.x before 5.2.3 contains a heap out-of-bounds access vulnerability in read_struct() that skips size validation when a .blend file's SDNA struct layout...

CVE-2026-119722

Blender before 4.5.15 and 5.x before 5.2.3 contains a heap out-of-bounds access vulnerability in read_struct() that skip

来源摘录 · NVD

#cve #cwe-125

漏洞预警2026-10-30 发布MEDIUM

Blender before 4.5.15 and 5.x before 5.2.3 contains an out-of-bounds read vulnerability in blo_bhead_id_* accessors in readfile.cc that read ID fields without block length check...

CVE-2026-119721

Blender before 4.5.15 and 5.x before 5.2.3 contains an out-of-bounds read vulnerability in blo_bhead_id_* accessors in r

来源摘录 · NVD

#cve #cwe-125

漏洞预警2026-10-30 发布MEDIUM

Blender before 4.5.15 and 5.x before 5.2.3 contains a heap out-of-bounds read vulnerability in read_file_dna() that reads a GLOB block field without validating its declared leng...

CVE-2026-119720

Blender before 4.5.15 and 5.x before 5.2.3 contains a heap out-of-bounds read vulnerability in read_file_dna() that read

来源摘录 · NVD

#cve #cwe-125

漏洞预警2026-10-30 发布HIGH

Blender before 4.5.15 and 5.x before 5.2.3 contains a heap buffer overflow vulnerability in the blend file thumbnail extractor caused by 32-bit integer overflow in thumb_data_ve...

CVE-2026-119719

Blender before 4.5.15 and 5.x before 5.2.3 contains a heap buffer overflow vulnerability in the blend file thumbnail ext

来源摘录 · NVD

#cve #cwe-190

漏洞预警2026-10-30 发布HIGH

Blender before 4.5.15 and 5.x before 5.2.3 contains a heap buffer overflow vulnerability caused by integer overflow in ptcache_data_alloc() when reading point cache files. Attac...

CVE-2026-119718

Blender before 4.5.15 and 5.x before 5.2.3 contains a heap buffer overflow vulnerability caused by integer overflow in p

来源摘录 · NVD

#cve #cwe-190

漏洞预警2026-10-30 发布HIGH

pybars4 through 0.9.13 contains a code injection vulnerability in pybars/_compiler.py that allows attackers to execute Python code via unescaped bracketed path segments in Handl...

CVE-2026-119717

pybars4 through 0.9.13 contains a code injection vulnerability in pybars/_compiler.py that allows attackers to execute P

来源摘录 · NVD

#cve #cwe-94

漏洞预警2026-10-30 发布HIGH

pybars3 through 0.9.7 contains a code injection vulnerability in pybars/_compiler.py that allows template authors to execute Python code via unescaped bracketed path segments. A...

CVE-2026-119716

pybars3 through 0.9.7 contains a code injection vulnerability in pybars/_compiler.py that allows template authors to exe

来源摘录 · NVD

#cve #cwe-94