#CVE

共收录 63078 条相关情报。

← 返回所有主题
漏洞预警2026-10-27 发布MEDIUM

A user could create a docx or odt file with a # in the filename with confidential information such as a credit card number and have it not be marked as confidential.

CVE-2026-77173

A user could create a docx or odt file with a # in the filename with confidential information such as a credit card numb

来源摘录 · NVD

漏洞预警2026-10-27 发布MEDIUM

App passwords were allowed to bypass password confirmation on sensitive endpoints.

CVE-2026-77172

App passwords were allowed to bypass password confirmation on sensitive endpoints.

来源摘录 · NVD

漏洞预警2026-10-27 发布LOW

A public shared collective always allowed recipients of the link to create pages.

CVE-2026-77171

A public shared collective always allowed recipients of the link to create pages.

来源摘录 · NVD

漏洞预警2026-10-27 发布HIGH

Abusing the federated share endpoint, an attacker can write arbitrary rows into the oc_share_external database table. These rows persist indefinitely — there is no automatic cle...

CVE-2026-77167

Abusing the federated share endpoint, an attacker can write arbitrary rows into the oc_share_external database table. Th

来源摘录 · NVD

漏洞预警2026-10-27 发布LOW

A missing token type check allowed to retrieve more additional information about the WOPI configuration with a user or guest token.

CVE-2026-67400

A missing token type check allowed to retrieve more additional information about the WOPI configuration with a user or g

来源摘录 · NVD

漏洞预警2026-10-27 发布HIGH

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, a s...

CVE-2026-57201

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2

来源摘录 · NVD / OSV.dev

漏洞预警2026-10-27 发布INFO

Asterisk is an open source private branch exchange and telephony toolkit. In affected deployments, an authenticated attacker may cause a `T.140 RED` heap buffer overflow using c...

CVE-2026-57198

Asterisk is an open source private branch exchange and telephony toolkit. In affected deployments, an authenticated atta

来源摘录 · NVD

漏洞预警2026-10-27 发布INFO

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an ...

CVE-2026-57197

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2

来源摘录 · NVD

漏洞预警2026-10-27 发布MEDIUM

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an ...

CVE-2026-57194

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2

来源摘录 · NVD

漏洞预警2026-10-27 发布INFO

Asterisk is an open source private branch exchange and telephony toolkit. In affected deployments, an authenticated attacker may cause a `T.140 RED` out-of-bounds write during `...

CVE-2026-57189

Asterisk is an open source private branch exchange and telephony toolkit. In affected deployments, an authenticated atta

来源摘录 · NVD

漏洞预警2026-10-27 发布MEDIUM

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an ...

CVE-2026-57185

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2

来源摘录 · NVD / OSV.dev

漏洞预警2026-10-27 发布MEDIUM

Knative pkg provides common packages shared across Knative repositories. Prior to 0.0.0-20260531000007-52dbd5ece63f, the knative.dev/pkg/webhook admissionHandler in webhook/admi...

CVE-2026-54462

Knative pkg provides common packages shared across Knative repositories. Prior to 0.0.0-20260531000007-52dbd5ece63f, the

来源摘录 · NVD

漏洞预警2026-10-27 发布MEDIUM

Substance3D - Painter is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disc...

CVE-2026-48380

Substance3D - Painter is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memo

来源摘录 · NVD

漏洞预警2026-10-27 发布HIGH

Substance3D - Painter is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation o...

CVE-2026-48379

Substance3D - Painter is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code exe

来源摘录 · NVD

漏洞预警2026-10-27 发布CRITICAL

Adobe Connect is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the curre...

CVE-2026-48360

Adobe Connect is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could resul

来源摘录 · NVD

漏洞预警2026-10-27 发布HIGH

A vulnerability was identified in oretnom23 php-travel-agency-system. This issue affects some unknown processing of the file admin/customer_detail.php of the component Admin Rec...

CVE-2026-117514

A vulnerability was identified in oretnom23 php-travel-agency-system. This issue affects some unknown processing of the

来源摘录 · NVD

漏洞预警2026-10-27 发布HIGH

A vulnerability was determined in oretnom23 php-travel-agency-system. This vulnerability affects unknown code of the file admin/customer_search.php of the component Admin Search...

CVE-2026-117513

A vulnerability was determined in oretnom23 php-travel-agency-system. This vulnerability affects unknown code of the fil

来源摘录 · NVD

漏洞预警2026-10-27 发布HIGH

A vulnerability was found in oretnom23 php-travel-agency-system. This affects an unknown part of the file admin/employee_insert.php. Performing a manipulation of the argument em...

CVE-2026-117512

A vulnerability was found in oretnom23 php-travel-agency-system. This affects an unknown part of the file admin/employee

来源摘录 · NVD

漏洞预警2026-10-27 发布INFO

TinyMCE is an open source rich text editor. From 7.9.3 until 7.9.4 and from 8.5.1 until 8.9.3, the media plugin creates elements crafted through data-mce-object in the active do...

CVE-2026-116675

TinyMCE is an open source rich text editor. From 7.9.3 until 7.9.4 and from 8.5.1 until 8.9.3, the media plugin creates

来源摘录 · NVD

漏洞预警2026-10-27 发布MEDIUM

systeminformation is a System and OS information library for node.js. Prior to 5.33.13, networkStats(ifaces) in lib/network.js on FreeBSD, OpenBSD, and NetBSD stores per-interfa...

CVE-2026-116674

systeminformation is a System and OS information library for node.js. Prior to 5.33.13, networkStats(ifaces) in lib/netw

来源摘录 · NVD