#CVE

共收录 63078 条相关情报。

← 返回所有主题
漏洞预警2026-10-28 发布LOW

A vulnerability was determined in a2ui-project a2ui up to 0.10.6. This vulnerability affects the function formatString of the file renderers/web_core/src/v0_9/basic_catalog/expr...

CVE-2026-118276

A vulnerability was determined in a2ui-project a2ui up to 0.10.6. This vulnerability affects the function formatString o

来源摘录 · NVD

漏洞预警2026-10-28 发布MEDIUM

A vulnerability was found in a2ui-project a2ui up to 0.10.6. This affects the function DataContext.resolveSignal of the file renderers/web_core/src/v0_9/rendering/data-context.t...

CVE-2026-118275

A vulnerability was found in a2ui-project a2ui up to 0.10.6. This affects the function DataContext.resolveSignal of the

来源摘录 · NVD

漏洞预警2026-10-28 发布HIGH

The Animated Text Block plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 1.2.6 via the 'animated-text' shortcode. This is d...

CVE-2026-116613

The Animated Text Block plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and incl

来源摘录 · NVD

漏洞预警2026-10-28 发布MEDIUM

The Appointment Booking Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'vs_text_submitbtn' parameter in all versions up to, and including, 1....

CVE-2026-111727

The Appointment Booking Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'vs_text_subm

来源摘录 · NVD

漏洞预警2026-10-28 发布HIGH

The affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.9.2 ...

CVE-2026-111255

The affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display plugin for WordPress is vulnerable to Arbitrary

来源摘录 · NVD

漏洞预警2026-10-28 发布HIGH

The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'headline-*' Shortcode Attribute in all versions up to, and inclu...

CVE-2026-97019

The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'headlin

来源摘录 · NVD

漏洞预警2026-10-28 发布CRITICAL

The Pie Register Premium plugin for WordPress is vulnerable to Unrestricted File Type Upload in all versions up to, and including, 3.8.4.0 via the piereg_file_upload function. T...

CVE-2026-84999

The Pie Register Premium plugin for WordPress is vulnerable to Unrestricted File Type Upload in all versions up to, and

来源摘录 · NVD

漏洞预警2026-10-28 发布MEDIUM

GNU mtools before 4.0.50 has an out-of-bounds write in parse_vses in vfat.c.

CVE-2026-118384

GNU mtools before 4.0.50 has an out-of-bounds write in parse_vses in vfat.c.

来源摘录 · NVD

漏洞预警2026-10-28 发布HIGH

Tabularis before 0.28.0 contains an SQL injection vulnerability in its SQLite driver that allows MCP clients to execute stacked statements by supplying a crafted table_name to t...

CVE-2026-118378

Tabularis before 0.28.0 contains an SQL injection vulnerability in its SQLite driver that allows MCP clients to execute

来源摘录 · NVD

漏洞预警2026-10-28 发布HIGH

mews/pos through 2.0.0 contains an insufficient verification of data authenticity vulnerability that allows unauthenticated attackers to forge payment results by submitting unve...

CVE-2026-118377

mews/pos through 2.0.0 contains an insufficient verification of data authenticity vulnerability that allows unauthentica

来源摘录 · NVD

漏洞预警2026-10-28 发布MEDIUM

WeKnora before 0.8.2 contains a server-side request forgery vulnerability in isRestrictedIP() that misclassifies NAT64-prefixed IPv6 addresses as public. Authenticated attackers...

CVE-2026-118376

WeKnora before 0.8.2 contains a server-side request forgery vulnerability in isRestrictedIP() that misclassifies NAT64-p

来源摘录 · NVD

漏洞预警2026-10-28 发布HIGH

llama.cpp b8841 before b11865 contains an out-of-bounds write vulnerability in the ggml-rpc RDMA transport rdma_recv() function that allows unauthenticated peers to overflow the...

CVE-2026-118375

llama.cpp b8841 before b11865 contains an out-of-bounds write vulnerability in the ggml-rpc RDMA transport rdma_recv() f

来源摘录 · NVD

漏洞预警2026-10-28 发布MEDIUM

LibreSSL ocspcheck through 4.4.0 contains a memory exhaustion vulnerability that allows malicious OCSP responders to exhaust memory by sending unbounded HTTP responses. Attacker...

CVE-2026-118374

LibreSSL ocspcheck through 4.4.0 contains a memory exhaustion vulnerability that allows malicious OCSP responders to exh

来源摘录 · NVD

漏洞预警2026-10-28 发布LOW

LibreSSL ocspcheck through 4.4.0 contains a cleartext transmission vulnerability because url2host() discards the OCSP URL scheme and http_alloc() only selects TLS for port 443. ...

CVE-2026-118373

LibreSSL ocspcheck through 4.4.0 contains a cleartext transmission vulnerability because url2host() discards the OCSP UR

来源摘录 · NVD

漏洞预警2026-10-28 发布LOW

LibreSSL ocspcheck through 4.4.0 contains a CRLF injection vulnerability that allows attackers to inject HTTP headers by embedding CR/LF sequences in a certificate's AIA OCSP UR...

CVE-2026-118372

LibreSSL ocspcheck through 4.4.0 contains a CRLF injection vulnerability that allows attackers to inject HTTP headers by

来源摘录 · NVD

漏洞预警2026-10-28 发布LOW

LibreSSL through 4.4.0 contains a CRLF injection vulnerability in the libcrypto OCSP_sendreq_new() and OCSP_parse_url() functions, which write unvalidated request paths into the...

CVE-2026-118371

LibreSSL through 4.4.0 contains a CRLF injection vulnerability in the libcrypto OCSP_sendreq_new() and OCSP_parse_url()

来源摘录 · NVD

漏洞预警2026-10-28 发布HIGH

libexpat through 2.9.0 contains a signed integer overflow vulnerability in storeAtts() in lib/xmlparse.c that allows attackers to trigger out-of-bounds writes via oversized attr...

CVE-2026-118370

libexpat through 2.9.0 contains a signed integer overflow vulnerability in storeAtts() in lib/xmlparse.c that allows att

来源摘录 · NVD

漏洞预警2026-10-28 发布MEDIUM

A vulnerability has been found in a2ui-project a2ui up to 0.10.6. Affected by this issue is some unknown functionality of the file renderers/web_core/src/v0_9/rendering/generic-...

CVE-2026-118274

A vulnerability has been found in a2ui-project a2ui up to 0.10.6. Affected by this issue is some unknown functionality o

来源摘录 · NVD

漏洞预警2026-10-28 发布MEDIUM

A flaw has been found in a2ui-project a2ui up to 0.10.6. Affected by this vulnerability is the function DataModel.set of the file renderers/web_core/src/v0_9/state/data-model.ts...

CVE-2026-118273

A flaw has been found in a2ui-project a2ui up to 0.10.6. Affected by this vulnerability is the function DataModel.set of

来源摘录 · NVD

漏洞预警2026-10-28 发布HIGH

libexpat through 2.9.0 contains a NULL pointer dereference vulnerability in externalEntityInitProcessor2() in lib/xmlparse.c that mishandles the XML_TOK_NONE token from empty in...

CVE-2026-117610

libexpat through 2.9.0 contains a NULL pointer dereference vulnerability in externalEntityInitProcessor2() in lib/xmlpar

来源摘录 · NVD