#CVE

共收录 63886 条相关情报。

漏洞预警2026-10-26 发布INFO

A flaw has been found in a2aproject a2a-java up to 1.2.0.Final. This impacts the function getMessage of the component JSON-RPC Error Handler. This manipulation causes informatio...

CVE-2026-116479

A flaw has been found in a2aproject a2a-java up to 1.2.0.Final. This impacts the function getMessage of the component JS

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-209

漏洞预警2026-10-26 发布MEDIUM

A vulnerability was detected in a2aproject a2a-go up to 2.4.0. This affects the function CreateExecutor of the file a2asrv/agentexec.go of the component Push Notification Handle...

CVE-2026-116478

A vulnerability was detected in a2aproject a2a-go up to 2.4.0. This affects the function CreateExecutor of the file a2as

来源摘录 · NVD

#cve #cwe-200 #cwe-209

漏洞预警2026-10-26 发布MEDIUM

A security vulnerability has been detected in a2aproject a2a-dotnet up to 1.0.0-preview2. The impacted element is the function A2AJsonRpcProcessor.ProcessRequestAsync of the fil...

CVE-2026-116477

A security vulnerability has been detected in a2aproject a2a-dotnet up to 1.0.0-preview2. The impacted element is the fu

来源摘录 · NVD

#cve #cwe-200 #cwe-209

漏洞预警2026-10-26 发布INFO

Tornado is a Python web framework and asynchronous networking library. Prior to 6.6.0, Tornado decodes HTTP/1.1 chunked transfer encoding by processing body data that has alread...

CVE-2026-115927

Tornado is a Python web framework and asynchronous networking library. Prior to 6.6.0, Tornado decodes HTTP/1.1 chunked

历史摘要 · 未重新核验 · NVD

#cve #cwe-400 #cwe-770

漏洞预警2026-10-26 发布HIGH

Rembg is a tool to remove images background. Prior to 2.0.82, the public /api/remove endpoint passes attacker-controlled extras.sam_model through rembg/commands/s_command.py to ...

CVE-2026-115924

Rembg is a tool to remove images background. Prior to 2.0.82, the public /api/remove endpoint passes attacker-controlled

来源摘录 · NVD

#cve #cwe-22

漏洞预警2026-10-26 发布INFO

The LeRobot library is vulnerable to arbitrary code execution via unsafe dynamic class instantiation in the from_pretrained() method and related paths. When loading a policy's p...

CVE-2026-115533

The LeRobot library is vulnerable to arbitrary code execution via unsafe dynamic class instantiation in the from_pretrai

历史摘要 · 未重新核验 · NVD

#cve

漏洞预警2026-10-26 发布HIGH

libosmo-sigtran through 2.2.1 contains an out-of-bounds read in the M3UA NOTIFY decoder in src/m3ua.c. This allows a remote attacker to obtain sensitive information.

CVE-2026-104598

libosmo-sigtran through 2.2.1 contains an out-of-bounds read in the M3UA NOTIFY decoder in src/m3ua.c. This allows a rem

来源摘录 · NVD

#cve #cwe-125

漏洞预警2026-10-26 发布HIGH

libosmocore through 1.14.1 contains an out-of-bounds read in iuup_rx_initialization() in src/gsm/iuup.c. This allows a remote attacker to obtain sensitive information.

CVE-2026-104597

libosmocore through 1.14.1 contains an out-of-bounds read in iuup_rx_initialization() in src/gsm/iuup.c. This allows a r

来源摘录 · NVD

#cve #cwe-125

漏洞预警2026-10-26 发布HIGH

libosmocore through 1.14.1 contains out-of-bounds reads in the GSM 04.80 supplementary-service component parsers in src/gsm/gsm0480.c. This allows a remote attacker to obtain se...

CVE-2026-104596

libosmocore through 1.14.1 contains out-of-bounds reads in the GSM 04.80 supplementary-service component parsers in src/

来源摘录 · NVD

#cve #cwe-200

漏洞预警2026-10-26 发布HIGH

The Windows Recovery Environment (WinRE) in Windows 10 and 11 may allow an attacker to bypass firmware security controls, including administrator-configured UEFI/BIOS passwords....

CVE-2026-116638

The Windows Recovery Environment (WinRE) in Windows 10 and 11 may allow an attacker to bypass firmware security controls

来源摘录 · NVD

#cve #cwe-288

漏洞预警2026-10-26 发布INFO

A malicious web page could insert arbitrary text into the FaceTime call prompt shown by iOS, potentialy allowing it to display a phishing message inside system UI. This vulnerab...

CVE-2026-116632

A malicious web page could insert arbitrary text into the FaceTime call prompt shown by iOS, potentialy allowing it to d

历史摘要 · 未重新核验 · NVD

#cve #cwe-451

漏洞预警2026-10-26 发布INFO

A malicious web page could open a tel link in a window that was showing a different website, causing the phone-call prompt to appear as if that site had requested the call. This...

CVE-2026-116631

A malicious web page could open a tel link in a window that was showing a different website, causing the phone-call prom

历史摘要 · 未重新核验 · NVD

#cve #cwe-451

漏洞预警2026-10-26 发布MEDIUM

A weakness has been identified in a2aproject a2a-dotnet up to 1.0.0-preview3. The affected element is the function TaskProjection.ApplyStatus of the component TaskProjection. Ex...

CVE-2026-116476

A weakness has been identified in a2aproject a2a-dotnet up to 1.0.0-preview3. The affected element is the function TaskP

来源摘录 · NVD

#cve #cwe-362

漏洞预警2026-10-26 发布MEDIUM

A security flaw has been discovered in BKWLD Decoy up to 5.11.1. The impacted element is an unknown function of the file Policy.php of the component Authorization Policy. The ma...

CVE-2026-116471

A security flaw has been discovered in BKWLD Decoy up to 5.11.1. The impacted element is an unknown function of the file

来源摘录 · NVD

#cve #cwe-266 #cwe-269

漏洞预警2026-10-26 发布INFO

A security flaw has been discovered in ggml-org llama.cpp up to 0.7.0. Affected by this vulnerability is an unknown functionality of the file src/llama-sampler.cpp of the compon...

CVE-2026-116467

A security flaw has been discovered in ggml-org llama.cpp up to 0.7.0. Affected by this vulnerability is an unknown func

历史摘要 · 未重新核验 · NVD

#cve #cwe-617

漏洞预警2026-10-26 发布INFO

Consul-k8s versions 0.42.0 and later are vulnerable to a cross-namespace authorization bypass in component ACL binding rules that may allow an attacker to obtain elevated Consul...

CVE-2026-110720

Consul-k8s versions 0.42.0 and later are vulnerable to a cross-namespace authorization bypass in component ACL binding r

历史摘要 · 未重新核验 · NVD

#cve #cwe-863

漏洞预警2026-10-26 发布HIGH

libosmocore through 1.14.1 contains out-of-bounds reads in the IPA CCM identity-tag parsers in src/gsm/ipa.c. This allows a remote attacker to obtain sensitive information.

CVE-2026-104594

libosmocore through 1.14.1 contains out-of-bounds reads in the IPA CCM identity-tag parsers in src/gsm/ipa.c. This allow

来源摘录 · NVD

#cve #cwe-125

漏洞预警2026-10-26 发布HIGH

osmo-msc through 1.15.0 contains a stack-based buffer overflow in decode_mme_name() in src/libmsc/sgs_iface.c. This allows a remote attacker to cause a denial of service.

CVE-2026-104593

osmo-msc through 1.15.0 contains a stack-based buffer overflow in decode_mme_name() in src/libmsc/sgs_iface.c. This allo

来源摘录 · NVD

#cve #cwe-121

漏洞预警2026-10-26 发布MEDIUM

libosmocore through 1.14.1 contains an out-of-bounds read in the CBSP WRITE-REPLACE decoder in src/gsm/cbsp.c. This allows a remote attacker to cause a denial of service.

CVE-2026-104592

libosmocore through 1.14.1 contains an out-of-bounds read in the CBSP WRITE-REPLACE decoder in src/gsm/cbsp.c. This allo

来源摘录 · NVD

#cve #cwe-125

漏洞预警2026-10-26 发布HIGH

libosmocore through 1.14.1 contains a buffer overflow in osmo_iuup_compute_payload_crc() in src/gsm/iuup.c. This allows a remote attacker to cause a denial of service.

CVE-2026-104591

libosmocore through 1.14.1 contains a buffer overflow in osmo_iuup_compute_payload_crc() in src/gsm/iuup.c. This allows

来源摘录 · NVD

#cve #cwe-400