#CVE

共收录 63078 条相关情报。

← 返回所有主题
漏洞预警2026-10-27 发布MEDIUM

DevilutionX 1.4.0 through 1.5.5 contains an out-of-bounds read vulnerability in the bundled libmpq libmpq__file_number_from_hash function that allows attackers to read heap memo...

CVE-2026-116841

DevilutionX 1.4.0 through 1.5.5 contains an out-of-bounds read vulnerability in the bundled libmpq libmpq__file_number_f

来源摘录 · NVD

漏洞预警2026-10-27 发布INFO

llama.cpp b5854 before b11275 contains an integer overflow vulnerability in gguf_init_from_reader that bypasses the CVE-2025-53630 size check when padding near-SIZE_MAX tensor s...

CVE-2026-116840

llama.cpp b5854 before b11275 contains an integer overflow vulnerability in gguf_init_from_reader that bypasses the CVE-

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布HIGH

A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to make unauthori...

CVE-2026-116839

A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF)

来源摘录 · NVD

漏洞预警2026-10-27 发布HIGH

A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to execute a Comm...

CVE-2026-116838

A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF)

来源摘录 · NVD

漏洞预警2026-10-27 发布HIGH

A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in airMAX M, LTU, SolarPoint, and SolarSwitch devices to exe...

CVE-2026-116837

A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in

来源摘录 · NVD

漏洞预警2026-10-27 发布HIGH

A malicious actor with access to the adjacent network and under certain conditions could exploit a Stored Cross-Site Scripting (XSS) vulnerability found in airMAX M devices to e...

CVE-2026-116836

A malicious actor with access to the adjacent network and under certain conditions could exploit a Stored Cross-Site Scr

来源摘录 · NVD

漏洞预警2026-10-27 发布MEDIUM

llama.cpp b10398 before b11301 contains an integer overflow vulnerability in gguf_init_from_reader that allows attackers to bypass tensor element-count validation by supplying s...

CVE-2026-116829

llama.cpp b10398 before b11301 contains an integer overflow vulnerability in gguf_init_from_reader that allows attackers

来源摘录 · NVD

漏洞预警2026-10-27 发布HIGH

llama.cpp b5899 before b10261 contains a heap out-of-bounds write vulnerability in llm_tokenizer_plamo2::build that allows attackers to corrupt heap memory via crafted GGUF mode...

CVE-2026-116816

llama.cpp b5899 before b10261 contains a heap out-of-bounds write vulnerability in llm_tokenizer_plamo2::build that allo

来源摘录 · NVD

漏洞预警2026-10-27 发布HIGH

A vulnerability was detected in code-projects Simple Content Management System 1.0. Impacted is an unknown function of the file /web/admin/welcome.php of the component Admin Int...

CVE-2026-116623

A vulnerability was detected in code-projects Simple Content Management System 1.0. Impacted is an unknown function of t

来源摘录 · NVD

漏洞预警2026-10-27 发布INFO

A security vulnerability has been detected in Tencent RapidJSON up to 1.1.0. This issue affects the function GenericStringStream<UTF8<char>>::Take in the library include/rapidjs...

CVE-2026-116620

A security vulnerability has been detected in Tencent RapidJSON up to 1.1.0. This issue affects the function GenericStri

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布MEDIUM

A security vulnerability has been detected in DAMO Academy VideoLLaMA2 up to 1.1. Affected by this issue is the function load_pretrained_model of the file videollama2/model/__in...

CVE-2026-116608

A security vulnerability has been detected in DAMO Academy VideoLLaMA2 up to 1.1. Affected by this issue is the function

来源摘录 · NVD

漏洞预警2026-10-27 发布MEDIUM

A vulnerability was found in SourceCodester Online Food Ordering System 1.0. The impacted element is an unknown function of the file order.php. The manipulation of the argument ...

CVE-2026-116605

A vulnerability was found in SourceCodester Online Food Ordering System 1.0. The impacted element is an unknown function

来源摘录 · NVD

漏洞预警2026-10-27 发布MEDIUM

llama.cpp before b5649 contains a heap out-of-bounds read vulnerability in llama_vocab::impl::print_info() that allows attackers to crash model loading via oversized special tok...

CVE-2025-71439

llama.cpp before b5649 contains a heap out-of-bounds read vulnerability in llama_vocab::impl::print_info() that allows a

来源摘录 · NVD

漏洞预警2026-10-27 发布INFO

llama.cpp before b3701 contains an out-of-bounds read vulnerability in llama_decode_internal and llama_encode_internal that allows remote unauthenticated attackers to read memor...

CVE-2024-58400

llama.cpp before b3701 contains an out-of-bounds read vulnerability in llama_decode_internal and llama_encode_internal t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布MEDIUM

llama.cpp before b2731 contains an out-of-bounds read vulnerability in llama_model_loader that allows attackers to read memory outside the mapped model file via crafted GGUF ten...

CVE-2024-58399

llama.cpp before b2731 contains an out-of-bounds read vulnerability in llama_model_loader that allows attackers to read

来源摘录 · NVD

漏洞预警2026-10-27 发布MEDIUM

YesWiki before 4.7.0 contains a sql injection vulnerability in despam.php where the from parameter is escaped but placed in an unquoted INTERVAL position. Authenticated administ...

CVE-2026-116828

YesWiki before 4.7.0 contains a sql injection vulnerability in despam.php where the from parameter is escaped but placed

来源摘录 · NVD

漏洞预警2026-10-27 发布MEDIUM

YesWiki before 4.7.0 contains a server-side request forgery vulnerability in the Bazar CSV import copyUrlToLocalFile() function that allows authenticated administrators to make ...

CVE-2026-116827

YesWiki before 4.7.0 contains a server-side request forgery vulnerability in the Bazar CSV import copyUrlToLocalFile() f

来源摘录 · NVD

漏洞预警2026-10-27 发布INFO

YesWiki before 4.7.0 contains a server-side request forgery vulnerability in DuplicationManager::downloadFile() that allows authenticated administrators to make arbitrary outbou...

CVE-2026-116826

YesWiki before 4.7.0 contains a server-side request forgery vulnerability in DuplicationManager::downloadFile() that all

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布MEDIUM

YesWiki from 4.6.2 before 4.7.0 lacks replay protection in HttpSignatureService::verifySignature(), which never validates the Date header or tracks seen signatures. Attackers wh...

CVE-2026-116825

YesWiki from 4.6.2 before 4.7.0 lacks replay protection in HttpSignatureService::verifySignature(), which never validate

来源摘录 · NVD

漏洞预警2026-10-27 发布MEDIUM

YesWiki before 4.7.0 contains a stored cross-site scripting vulnerability in handlers/page/referrers_sites.php that allows unauthenticated attackers to inject scripts via crafte...

CVE-2026-116824

YesWiki before 4.7.0 contains a stored cross-site scripting vulnerability in handlers/page/referrers_sites.php that allo

来源摘录 · NVD