#CVE

共收录 63078 条相关情报。

← 返回所有主题
漏洞预警2026-10-27 发布LOW

systeminformation is a System and OS information library for node.js. Prior to 5.33.14, the Linux networkStats(iface) implementation uses the caller-supplied interface value in ...

CVE-2026-116673

systeminformation is a System and OS information library for node.js. Prior to 5.33.14, the Linux networkStats(iface) im

来源摘录 · NVD

漏洞预警2026-10-27 发布HIGH

Authlib is a Python library which builds OAuth and OpenID Connect servers. From 0.15 until 1.9.1, the documented ClientConfigurationEndpoint.authenticate_client and ClientConfig...

CVE-2026-116672

Authlib is a Python library which builds OAuth and OpenID Connect servers. From 0.15 until 1.9.1, the documented ClientC

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-27 发布HIGH

In EPICS Base release 7.0.10 and prior, an insufficient validation of element or length values in a network message can cause the application to read beyond the bounds of an all...

CVE-2026-114598

In EPICS Base release 7.0.10 and prior, an insufficient validation of element or length values in a network message can

来源摘录 · NVD

漏洞预警2026-10-27 发布HIGH

In EPICS Base release 7.0.10 and prior, an insufficient validation of element or length values in a network message can cause the application to read beyond the bounds of an all...

CVE-2026-114597

In EPICS Base release 7.0.10 and prior, an insufficient validation of element or length values in a network message can

来源摘录 · NVD

漏洞预警2026-10-27 发布HIGH

In EPICS Base release 7.0.10 and prior, an improper validation of message length values during protocol parsing can trigger an integer overflow, resulting in an out-of-bounds me...

CVE-2026-114596

In EPICS Base release 7.0.10 and prior, an improper validation of message length values during protocol parsing can trig

来源摘录 · NVD

漏洞预警2026-10-27 发布CRITICAL

In EPICS Base release 7.0.10 and prior, an integer overflow in network request processing can cause memory to be allocated with an incorrect size. Subsequent handling of attacke...

CVE-2026-114595

In EPICS Base release 7.0.10 and prior, an integer overflow in network request processing can cause memory to be allocat

来源摘录 · NVD

漏洞预警2026-10-27 发布HIGH

A maliciously crafted dynamic library, when loaded from an arbitrary path through the TextCommands.LoadDll command exposed by the Autodesk Fusion API, can trigger an Exposed Dan...

CVE-2026-113775

A maliciously crafted dynamic library, when loaded from an arbitrary path through the TextCommands.LoadDll command expos

来源摘录 · NVD

漏洞预警2026-10-27 发布HIGH

GFI KerioConnect (Kerio Connect) before 10.0.8 Patch 2 contains a stored cross-site scripting vulnerability in the Webmail component that allows a remote attacker to run JavaScr...

CVE-2026-112353

GFI KerioConnect (Kerio Connect) before 10.0.8 Patch 2 contains a stored cross-site scripting vulnerability in the Webma

来源摘录 · NVD

漏洞预警2026-10-27 发布HIGH

A malicious X server could cause a heap overflow by injecting a large DEVICE_ENABLE reply when processed by libXi before 1.8.4.

CVE-2026-109090

A malicious X server could cause a heap overflow by injecting a large DEVICE_ENABLE reply when processed by libXi before

来源摘录 · NVD

漏洞预警2026-10-27 发布HIGH

A buffer overflow when handling DEVICE_RESOLUTION in libXi before 1.8.4 could overflow a heap, triggered by a malicious X server.

CVE-2026-109089

A buffer overflow when handling DEVICE_RESOLUTION in libXi before 1.8.4 could overflow a heap, triggered by a malicious

来源摘录 · NVD

漏洞预警2026-10-27 发布MEDIUM

A malicious X server could send malformed  RECORD EnableContext reolies that can cause a X client using the parse_reply_call_callback function in libXtst before 1.2.6 to enter a...

CVE-2026-109088

A malicious X server could send malformed  RECORD EnableContext reolies that can cause a X client using the parse_reply_

来源摘录 · NVD

漏洞预警2026-10-27 发布INFO

A vulnerability allowing an unauthenticated attacker to bypass authorization on the CDP Coordinator Service.

CVE-2026-108142

A vulnerability allowing an unauthenticated attacker to bypass authorization on the CDP Coordinator Service.

来源摘录 · NVD

漏洞预警2026-10-27 发布INFO

A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to write attacker-controlled files to an ...

CVE-2026-108141

A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backe

来源摘录 · NVD

漏洞预警2026-10-27 发布INFO

A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to write attacker-controlled files to an ...

CVE-2026-108140

A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backe

来源摘录 · NVD

漏洞预警2026-10-27 发布INFO

Private keys for eight eMudhra intermediate CA certificates have been compromised https://emudhra.we-have-a-problem.com/ , which impacts certificate trust for outbound network ...

CVE-2026-108015

Private keys for eight eMudhra intermediate CA certificates have been compromised https://emudhra.we-have-a-problem.com

来源摘录 · NVD

漏洞预警2026-10-27 发布INFO

Private keys for eight eMudhra intermediate CA certificates have been compromised https://emudhra.we-have-a-problem.com/ , which impacts certificate trust for outbound network ...

CVE-2026-108014

Private keys for eight eMudhra intermediate CA certificates have been compromised https://emudhra.we-have-a-problem.com

来源摘录 · NVD

漏洞预警2026-10-27 发布INFO

A vulnerability allowing an attacker with valid Administrator credentials to bypass multi-factor authentication by disabling it globally before completing MFA verification.

CVE-2026-107671

A vulnerability allowing an attacker with valid Administrator credentials to bypass multi-factor authentication by disab

来源摘录 · NVD

漏洞预警2026-10-27 发布INFO

A vulnerability allowing an unauthenticated attacker to bypass REST API authentication with a forged federation token and receive responses from REST API endpoints that do not c...

CVE-2026-106078

A vulnerability allowing an unauthenticated attacker to bypass REST API authentication with a forged federation token an

来源摘录 · NVD

漏洞预警2026-10-27 发布INFO

A vulnerability allowing a user with the Veeam Backup for Microsoft 365 Administrator role to read arbitrary files on the backup server with LocalSystem privileges.

CVE-2026-106077

A vulnerability allowing a user with the Veeam Backup for Microsoft 365 Administrator role to read arbitrary files on th

来源摘录 · NVD

漏洞预警2026-10-27 发布INFO

A vulnerability allowing an authenticated organization-transfer peer to inject SQL into the configuration database of the source Veeam Backup for Microsoft 365 server, leading t...

CVE-2026-106076

A vulnerability allowing an authenticated organization-transfer peer to inject SQL into the configuration database of th

来源摘录 · NVD