#CVE

共收录 63861 条相关情报。

← 返回所有主题
漏洞预警2026-10-26 发布MEDIUM

A vulnerability was detected in SourceCodester Online Food Ordering System 1.0. This issue affects the function unlink of the file admin/delete.php. Performing a manipulation of...

CVE-2026-116602

A vulnerability was detected in SourceCodester Online Food Ordering System 1.0. This issue affects the function unlink o

来源摘录 · NVD

漏洞预警2026-10-26 发布INFO

A vulnerability was found in Argilla up to 2.8.0. This affects an unknown function of the file argilla-frontend/components/features/annotation/container/fields/text-field/TextFi...

CVE-2026-116556

A vulnerability was found in Argilla up to 2.8.0. This affects an unknown function of the file argilla-frontend/componen

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-26 发布LOW

A vulnerability has been found in Argilla up to 2.8.0. The impacted element is an unknown function of the file argilla-frontend/components/features/annotation/container/fields/s...

CVE-2026-116555

A vulnerability has been found in Argilla up to 2.8.0. The impacted element is an unknown function of the file argilla-f

来源摘录 · NVD

漏洞预警2026-10-26 发布LOW

A flaw has been found in Argilla up to 2.8.0. The affected element is the function Dataset.from_disk of the file argilla-frontend/components/features/annotation/settings/Setting...

CVE-2026-116554

A flaw has been found in Argilla up to 2.8.0. The affected element is the function Dataset.from_disk of the file argilla

来源摘录 · NVD

漏洞预警2026-10-26 发布HIGH

Transmission 4.0.0 before 4.1.3 contains a permissive CORS vulnerability in handle_request() in rpc-server.cc that exposes the X-Transmission-Session-Id anti-CSRF token to any w...

CVE-2026-116748

Transmission 4.0.0 before 4.1.3 contains a permissive CORS vulnerability in handle_request() in rpc-server.cc that expos

来源摘录 · NVD

漏洞预警2026-10-26 发布HIGH

Kener 3.0.0 before 4.1.10 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge session tokens by using the hardcoded DUMMY_SECRET fallb...

CVE-2026-116747

Kener 3.0.0 before 4.1.10 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge

来源摘录 · NVD

漏洞预警2026-10-26 发布INFO

QloApps 1.6.0 through 1.7.0 contains a missing authorization vulnerability in the qlohotelreview module's AddReview AJAX action that allows unauthenticated attackers to submit r...

CVE-2026-116746

QloApps 1.6.0 through 1.7.0 contains a missing authorization vulnerability in the qlohotelreview module's AddReview AJAX

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-26 发布MEDIUM

QloApps through 1.7.0 contains an information disclosure vulnerability in OrderConfirmationController::init() that allows unauthenticated attackers to obtain guest order referen...

CVE-2026-116745

QloApps through 1.7.0 contains an information disclosure vulnerability in OrderConfirmationController::init() that allow

来源摘录 · NVD

漏洞预警2026-10-26 发布MEDIUM

ntop nDPI through 6.0 contains an out-of-bounds read vulnerability in dissect_softether_host_fqdn() in softether.c that compares host_name using the consumed byte count instead ...

CVE-2026-116744

ntop nDPI through 6.0 contains an out-of-bounds read vulnerability in dissect_softether_host_fqdn() in softether.c that

来源摘录 · NVD

漏洞预警2026-10-26 发布MEDIUM

libyal libmsiecf through 20260525 contains a double free vulnerability in libmsiecf_url_values_read_data() that allows attackers to corrupt heap memory via crafted partial URL r...

CVE-2026-116743

libyal libmsiecf through 20260525 contains a double free vulnerability in libmsiecf_url_values_read_data() that allows a

来源摘录 · NVD

漏洞预警2026-10-26 发布INFO

HTSlib through 1.24 contains a heap out-of-bounds write and read vulnerability in bgzf_index_load_hfile() in bgzf.c that allows attackers to corrupt heap memory by supplying a c...

CVE-2026-116742

HTSlib through 1.24 contains a heap out-of-bounds write and read vulnerability in bgzf_index_load_hfile() in bgzf.c that

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-26 发布MEDIUM

Speex (libspeex) through 1.2.1 contains an out-of-bounds write vulnerability in speex_bits_read_whole_bytes() in libspeex/bits.c that mishandles length truncation for non-owned ...

CVE-2026-116741

Speex (libspeex) through 1.2.1 contains an out-of-bounds write vulnerability in speex_bits_read_whole_bytes() in libspee

来源摘录 · NVD

漏洞预警2026-10-26 发布MEDIUM

libcss through 0.9.2 contains a NULL pointer dereference vulnerability in mq_parse_media_query() that allows remote attackers to crash consumers by supplying media lists ending ...

CVE-2026-116740

libcss through 0.9.2 contains a NULL pointer dereference vulnerability in mq_parse_media_query() that allows remote atta

来源摘录 · NVD

漏洞预警2026-10-26 发布MEDIUM

VMime through 0.9.2 contains an information disclosure vulnerability in the uuEncoder::decode function that writes uninitialized stack memory into decoded output for over-long l...

CVE-2026-116739

VMime through 0.9.2 contains an information disclosure vulnerability in the uuEncoder::decode function that writes unini

来源摘录 · NVD

漏洞预警2026-10-26 发布INFO

VMime through 0.9.2 contains an integer underflow in the uuEncoder::decode function that allows remote attackers to trigger a stack-based buffer overflow via crafted uuencoded M...

CVE-2026-116738

VMime through 0.9.2 contains an integer underflow in the uuEncoder::decode function that allows remote attackers to trig

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-26 发布MEDIUM

libphdi through 20260902 contains a heap out-of-bounds read vulnerability in libphdi_data_files_get_extent_data_file_path that uses the directory prefix length instead of the ba...

CVE-2026-116737

libphdi through 20260902 contains a heap out-of-bounds read vulnerability in libphdi_data_files_get_extent_data_file_pat

来源摘录 · NVD

漏洞预警2026-10-26 发布MEDIUM

Libpff through 20260926 contains a heap out-of-bounds read vulnerability in libpff_table_read_values_array because a 7c column definition's values_array_size is not checked agai...

CVE-2026-116736

Libpff through 20260926 contains a heap out-of-bounds read vulnerability in libpff_table_read_values_array because a 7c

来源摘录 · NVD

漏洞预警2026-10-26 发布MEDIUM

libpff through 20260926 contains an off-by-one bounds check in libpff_table_read_6c_record_entries that allows attackers to trigger a heap out-of-bounds read via crafted 6c tabl...

CVE-2026-116735

libpff through 20260926 contains an off-by-one bounds check in libpff_table_read_6c_record_entries that allows attackers

来源摘录 · NVD

漏洞预警2026-10-26 发布INFO

flatcc through 0.6.4 contains an integer overflow vulnerability in the check_header function of the FlatBuffers verifier because its overflow guard is dead code. On 32-bit build...

CVE-2026-116734

flatcc through 0.6.4 contains an integer overflow vulnerability in the check_header function of the FlatBuffers verifier

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-26 发布LOW

flatcc through 0.6.4 contains an out-of-bounds read vulnerability in __flatcc_json_parser_number that allows attackers to read past the input buffer via numbers ending in a deci...

CVE-2026-116733

flatcc through 0.6.4 contains an out-of-bounds read vulnerability in __flatcc_json_parser_number that allows attackers t

来源摘录 · NVD