#CVE

共收录 63078 条相关情报。

漏洞预警2026-10-27 发布MEDIUM

Semantic MediaWiki from 3.1.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows authenticated schema editors to inject HTML through schema descriptio...

CVE-2026-116883

Semantic MediaWiki from 3.1.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows authenticate

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-27 发布MEDIUM

Semantic MediaWiki from 4.2.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows authenticated profile or schema editors to inject HTML through Facete...

CVE-2026-116882

Semantic MediaWiki from 4.2.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows authenticate

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-27 发布MEDIUM

Semantic MediaWiki from 3.0.0 before 7.3.1 contains a cross-site scripting vulnerability that allows attackers to inject markup by storing malicious semantic property values ren...

CVE-2026-116881

Semantic MediaWiki from 3.0.0 before 7.3.1 contains a cross-site scripting vulnerability that allows attackers to inject

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-27 发布HIGH

Semantic MediaWiki from 3.0.0 before 7.3.1 contains a cross-site request forgery vulnerability in Special:SMWAdmin because it overwrites the wpEditToken with a freshly generated...

CVE-2026-116880

Semantic MediaWiki from 3.0.0 before 7.3.1 contains a cross-site request forgery vulnerability in Special:SMWAdmin becau

来源摘录 · NVD

#cve #cwe-352

漏洞预警2026-10-27 发布MEDIUM

Semantic MediaWiki from 7.3.0 before 7.3.1 contains a missing authorization vulnerability in the smwtask update task that allows users with edit rights to force semantic updates...

CVE-2026-116879

Semantic MediaWiki from 7.3.0 before 7.3.1 contains a missing authorization vulnerability in the smwtask update task tha

来源摘录 · NVD

#cve #cwe-862

漏洞预警2026-10-27 发布HIGH

Semantic MediaWiki from 2.5.0 before 7.3.1 contains an uncontrolled resource consumption vulnerability that allows anonymous attackers to force quadratic computation by supplyin...

CVE-2026-116878

Semantic MediaWiki from 2.5.0 before 7.3.1 contains an uncontrolled resource consumption vulnerability that allows anony

来源摘录 · NVD

#cve #cwe-400

漏洞预警2026-10-27 发布MEDIUM

Semantic MediaWiki from 2.5.0 before 7.3.1 contains an uncontrolled resource consumption vulnerability that allows low-privilege editors to bypass smwgMaxNumRecurringEvents by s...

CVE-2026-116877

Semantic MediaWiki from 2.5.0 before 7.3.1 contains an uncontrolled resource consumption vulnerability that allows low-p

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-770

漏洞预警2026-10-27 发布HIGH

Semantic MediaWiki from 2.5.0 before 7.3.1 contains an improper authorization vulnerability that allows ordinary editors to permanently protect pages by adding an Is edit protec...

CVE-2026-116876

Semantic MediaWiki from 2.5.0 before 7.3.1 contains an improper authorization vulnerability that allows ordinary editors

来源摘录 · NVD

#cve #cwe-862

漏洞预警2026-10-27 发布MEDIUM

SemanticMediaWiki from 3.0.0 before 7.3.1 contains a reflected cross-site scripting vulnerability in Special:Ask, which outputs separator parameters (sep, propsep, valuesep, del...

CVE-2026-116875

SemanticMediaWiki from 3.0.0 before 7.3.1 contains a reflected cross-site scripting vulnerability in Special:Ask, which

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-27 发布MEDIUM

SemanticMediaWiki from 3.1.0 before 7.3.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts through the unescaped d...

CVE-2026-116874

SemanticMediaWiki from 3.1.0 before 7.3.1 contains a reflected cross-site scripting vulnerability that allows unauthenti

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-27 发布HIGH

Semantic MediaWiki from 7.3.0 before 7.3.1 contains a missing authorization vulnerability in the smwtask API module that allows unauthenticated attackers to run queued jobs and ...

CVE-2026-116873

Semantic MediaWiki from 7.3.0 before 7.3.1 contains a missing authorization vulnerability in the smwtask API module that

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-862

漏洞预警2026-10-27 发布HIGH

Semantic MediaWiki from 3.0.0 before 7.3.1 contains an algorithmic complexity vulnerability in TermParser::normalize_compact_form() that allows unauthenticated attackers to caus...

CVE-2026-116872

Semantic MediaWiki from 3.0.0 before 7.3.1 contains an algorithmic complexity vulnerability in TermParser::normalize_com

来源摘录 · NVD

#cve #cwe-407

漏洞预警2026-10-27 发布HIGH

Semantic MediaWiki 3.0.0 before 7.3.1 contains an uncontrolled recursion vulnerability in LegacyParser::getSubqueryDescription() that processes nested query tokens before depth ...

CVE-2026-116871

Semantic MediaWiki 3.0.0 before 7.3.1 contains an uncontrolled recursion vulnerability in LegacyParser::getSubqueryDescr

来源摘录 · NVD

#cve #cwe-674

漏洞预警2026-10-27 发布INFO

In affected versions of Octopus Server, OIDC token issuer validation was performed inconsistently. This could result in a token issued from a suitably configured non legitimate ...

CVE-2026-116870

In affected versions of Octopus Server, OIDC token issuer validation was performed inconsistently. This could result in

来源摘录 · NVD

#cve #cwe-1289

漏洞预警2026-10-27 发布INFO

A stack-based buffer overflow vulnerability exists in the web management interface of affected Moxa wireless device servers. An authenticated remote attacker with low privileges...

CVE-2026-111548

A stack-based buffer overflow vulnerability exists in the web management interface of affected Moxa wireless device serv

来源摘录 · NVD

#cve #cwe-121

漏洞预警2026-10-27 发布INFO

The push endpoint of a Vaadin application that uses server push reflects the request Origin into the Access-Control-Allow-Origin response header and allows credentials, because ...

CVE-2026-110737

The push endpoint of a Vaadin application that uses server push reflects the request Origin into the Access-Control-Allo

来源摘录 · NVD

#cve #cwe-346 #cwe-942

漏洞预警2026-10-27 发布CRITICAL

Out-of-bounds Write Vulnerability in JP1 Products. This issue affects JP1/Integrated Management 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 -...

CVE-2026-86577

Out-of-bounds Write Vulnerability in JP1 Products. This issue affects JP1/Integrated Management 3 - Manager: from 13-00

来源摘录 · NVD

#cve #cwe-787

漏洞预警2026-10-27 发布CRITICAL

Heap-based Buffer Overflow Vulnerability in JP1 Products. This issue affects JP1/Integrated Management 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management Sys...

CVE-2026-86576

Heap-based Buffer Overflow Vulnerability in JP1 Products. This issue affects JP1/Integrated Management 3 - Manager: fro

来源摘录 · NVD

#cve #cwe-122

漏洞预警2026-10-27 发布CRITICAL

Stack-based Buffer Overflow Vulnerability in JP1 Products. This issue affects JP1/Integrated Management 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management Sy...

CVE-2026-86575

Stack-based Buffer Overflow Vulnerability in JP1 Products. This issue affects JP1/Integrated Management 3 - Manager: fr

来源摘录 · NVD

#cve #cwe-121

漏洞预警2026-10-27 发布CRITICAL

Heap-based Buffer Overflow Vulnerability in JP1/Base. This issue affects JP1/Base: from 11-00 before 12-50-54.

CVE-2026-86574

Heap-based Buffer Overflow Vulnerability in JP1/Base. This issue affects JP1/Base: from 11-00 before 12-50-54.

来源摘录 · NVD

#cve #cwe-122