#CVE

共收录 63861 条相关情报。

← 返回所有主题
漏洞预警2026-10-27 发布MEDIUM

Psono Server CE & EE versions 3.1.0 through 7.2.3 did not consume a stored WebAuthn challenge after assertion verification. An unauthenticated remote attacker who possessed the ...

CVE-2026-117470

Psono Server CE & EE versions 3.1.0 through 7.2.3 did not consume a stored WebAuthn challenge after assertion verificati

来源摘录 · NVD

漏洞预警2026-10-27 发布MEDIUM

Psono Server (CE & EE) versions 1.0.0 through 7.2.3 did not enforce the direction of file-transfer credentials on file-repository operations. An authenticated remote attacker wi...

CVE-2026-117469

Psono Server (CE & EE) versions 1.0.0 through 7.2.3 did not enforce the direction of file-transfer credentials on file-r

来源摘录 · NVD

漏洞预警2026-10-27 发布MEDIUM

Psono Server versions 5.3.5 through 7.2.3 used a permission class that did not enforce token write scope when claiming a device code. An authenticated remote attacker holding a ...

CVE-2026-117468

Psono Server versions 5.3.5 through 7.2.3 used a permission class that did not enforce token write scope when claiming a

来源摘录 · NVD

漏洞预警2026-10-27 发布HIGH

The Analytics Insights – Google Analytics Dashboard for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Page Title in all versions up to, and...

CVE-2026-111820

The Analytics Insights – Google Analytics Dashboard for WordPress plugin for WordPress is vulnerable to Stored Cross-Sit

来源摘录 · NVD

漏洞预警2026-10-27 发布MEDIUM

The Payex Payment Gateway for Woocommerce WordPress plugin through 1.2.10 does not properly verify the authenticity of incoming payment notifications, relying on a validation se...

CVE-2026-103332

The Payex Payment Gateway for Woocommerce WordPress plugin through 1.2.10 does not properly verify the authenticity of i

来源摘录 · NVD

漏洞预警2026-10-27 发布MEDIUM

The Payment Integration Wompi WordPress plugin through 4.0.1 does not verify the authenticity of incoming payment notifications on a stock install, because the callback's checks...

CVE-2026-103312

The Payment Integration Wompi WordPress plugin through 4.0.1 does not verify the authenticity of incoming payment notifi

来源摘录 · NVD

漏洞预警2026-10-27 发布INFO

Untrusted Pointer Dereference in ASUS certain motherboards firmware allows a kernel-level privileges user can supply an arbitrary memory address via an I/O command, leading to s...

CVE-2026-88781

Untrusted Pointer Dereference in ASUS certain motherboards firmware allows a kernel-level privileges user can supply an

来源摘录 · NVD

漏洞预警2026-10-27 发布INFO

A flaw has been found in Saruf-Ratul HR-Payroll-Management-System e7cd81477001afdee95b843fd4137894d9418c9f/3fd6f45ead9f8197510c0910f759e06ee67251e5. Affected by this vulnerabili...

CVE-2026-116640

A flaw has been found in Saruf-Ratul HR-Payroll-Management-System e7cd81477001afdee95b843fd4137894d9418c9f/3fd6f45ead9f8

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布LOW

A vulnerability was detected in MD-MAFUJUL-HASAN Online-Payroll-Management-System up to a8902bf64575e325f6d6bf93a55f7bd273ec58cd. Affected is an unknown function of the file cha...

CVE-2026-116639

A vulnerability was detected in MD-MAFUJUL-HASAN Online-Payroll-Management-System up to a8902bf64575e325f6d6bf93a55f7bd2

来源摘录 · NVD

漏洞预警2026-10-27 发布MEDIUM

Fclairamb ftpserverlib through 0.32.4 contains a cleartext transmission vulnerability because TransferOpen checks only the transferTLS flag set by PROT, not whether the prepared...

CVE-2026-116844

Fclairamb ftpserverlib through 0.32.4 contains a cleartext transmission vulnerability because TransferOpen checks only t

来源摘录 · NVD

漏洞预警2026-10-27 发布HIGH

Mistral Vibe before 3.0.3 contains a remote code execution vulnerability that allows attackers to run commands by defining git filter drivers in an untrusted repository's .git/c...

CVE-2026-116843

Mistral Vibe before 3.0.3 contains a remote code execution vulnerability that allows attackers to run commands by defini

来源摘录 · NVD

漏洞预警2026-10-27 发布MEDIUM

DevilutionX 1.4.0 through 1.5.5 contains a heap buffer overflow vulnerability in the bundled libmpq libmpq__archive_dup routine when opening crafted MPQ archives. Attackers can ...

CVE-2026-116842

DevilutionX 1.4.0 through 1.5.5 contains a heap buffer overflow vulnerability in the bundled libmpq libmpq__archive_dup

来源摘录 · NVD

漏洞预警2026-10-27 发布MEDIUM

DevilutionX 1.4.0 through 1.5.5 contains an out-of-bounds read vulnerability in the bundled libmpq libmpq__file_number_from_hash function that allows attackers to read heap memo...

CVE-2026-116841

DevilutionX 1.4.0 through 1.5.5 contains an out-of-bounds read vulnerability in the bundled libmpq libmpq__file_number_f

来源摘录 · NVD

漏洞预警2026-10-27 发布INFO

llama.cpp b5854 before b11275 contains an integer overflow vulnerability in gguf_init_from_reader that bypasses the CVE-2025-53630 size check when padding near-SIZE_MAX tensor s...

CVE-2026-116840

llama.cpp b5854 before b11275 contains an integer overflow vulnerability in gguf_init_from_reader that bypasses the CVE-

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布HIGH

A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to make unauthori...

CVE-2026-116839

A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF)

来源摘录 · NVD

漏洞预警2026-10-27 发布HIGH

A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to execute a Comm...

CVE-2026-116838

A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF)

来源摘录 · NVD

漏洞预警2026-10-27 发布HIGH

A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in airMAX M, LTU, SolarPoint, and SolarSwitch devices to exe...

CVE-2026-116837

A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in

来源摘录 · NVD

漏洞预警2026-10-27 发布HIGH

A malicious actor with access to the adjacent network and under certain conditions could exploit a Stored Cross-Site Scripting (XSS) vulnerability found in airMAX M devices to e...

CVE-2026-116836

A malicious actor with access to the adjacent network and under certain conditions could exploit a Stored Cross-Site Scr

来源摘录 · NVD

漏洞预警2026-10-27 发布MEDIUM

llama.cpp b10398 before b11301 contains an integer overflow vulnerability in gguf_init_from_reader that allows attackers to bypass tensor element-count validation by supplying s...

CVE-2026-116829

llama.cpp b10398 before b11301 contains an integer overflow vulnerability in gguf_init_from_reader that allows attackers

来源摘录 · NVD

漏洞预警2026-10-27 发布HIGH

llama.cpp b5899 before b10261 contains a heap out-of-bounds write vulnerability in llm_tokenizer_plamo2::build that allows attackers to corrupt heap memory via crafted GGUF mode...

CVE-2026-116816

llama.cpp b5899 before b10261 contains a heap out-of-bounds write vulnerability in llm_tokenizer_plamo2::build that allo

来源摘录 · NVD