#CVE
共收录 63078 条相关情报。
← 返回所有主题 漏洞预警2026-10-27 发布MEDIUM
CVE-2026-77173
A user could create a docx or odt file with a # in the filename with confidential information such as a credit card numb
来源摘录 · NVD
漏洞预警2026-10-27 发布MEDIUM
CVE-2026-77172
App passwords were allowed to bypass password confirmation on sensitive endpoints.
来源摘录 · NVD
漏洞预警2026-10-27 发布LOW
CVE-2026-77171
A public shared collective always allowed recipients of the link to create pages.
来源摘录 · NVD
漏洞预警2026-10-27 发布HIGH
CVE-2026-77167
Abusing the federated share endpoint, an attacker can write arbitrary rows into the oc_share_external database table. Th
来源摘录 · NVD
漏洞预警2026-10-27 发布LOW
CVE-2026-67400
A missing token type check allowed to retrieve more additional information about the WOPI configuration with a user or g
来源摘录 · NVD
漏洞预警2026-10-27 发布HIGH
CVE-2026-57201
Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2
来源摘录 · NVD / OSV.dev
漏洞预警2026-10-27 发布INFO
CVE-2026-57198
Asterisk is an open source private branch exchange and telephony toolkit. In affected deployments, an authenticated atta
来源摘录 · NVD
漏洞预警2026-10-27 发布INFO
CVE-2026-57197
Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2
来源摘录 · NVD
漏洞预警2026-10-27 发布MEDIUM
CVE-2026-57194
Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2
来源摘录 · NVD
漏洞预警2026-10-27 发布INFO
CVE-2026-57189
Asterisk is an open source private branch exchange and telephony toolkit. In affected deployments, an authenticated atta
来源摘录 · NVD
漏洞预警2026-10-27 发布MEDIUM
CVE-2026-57185
Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2
来源摘录 · NVD / OSV.dev
漏洞预警2026-10-27 发布MEDIUM
CVE-2026-54462
Knative pkg provides common packages shared across Knative repositories. Prior to 0.0.0-20260531000007-52dbd5ece63f, the
来源摘录 · NVD
漏洞预警2026-10-27 发布MEDIUM
CVE-2026-48380
Substance3D - Painter is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memo
来源摘录 · NVD
漏洞预警2026-10-27 发布HIGH
CVE-2026-48379
Substance3D - Painter is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code exe
来源摘录 · NVD
漏洞预警2026-10-27 发布CRITICAL
CVE-2026-48360
Adobe Connect is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could resul
来源摘录 · NVD
漏洞预警2026-10-27 发布HIGH
CVE-2026-117514
A vulnerability was identified in oretnom23 php-travel-agency-system. This issue affects some unknown processing of the
来源摘录 · NVD
漏洞预警2026-10-27 发布HIGH
CVE-2026-117513
A vulnerability was determined in oretnom23 php-travel-agency-system. This vulnerability affects unknown code of the fil
来源摘录 · NVD
漏洞预警2026-10-27 发布HIGH
CVE-2026-117512
A vulnerability was found in oretnom23 php-travel-agency-system. This affects an unknown part of the file admin/employee
来源摘录 · NVD
漏洞预警2026-10-27 发布INFO
CVE-2026-116675
TinyMCE is an open source rich text editor. From 7.9.3 until 7.9.4 and from 8.5.1 until 8.9.3, the media plugin creates
来源摘录 · NVD
漏洞预警2026-10-27 发布MEDIUM
CVE-2026-116674
systeminformation is a System and OS information library for node.js. Prior to 5.33.13, networkStats(ifaces) in lib/netw
来源摘录 · NVD