#CVE

共收录 63886 条相关情报。

漏洞预警2026-10-26 发布HIGH

Timescale pgvectorscale before 0.9.1 contains a type confusion vulnerability that allows low-privileged database users to corrupt memory by shadowing pgvector's vector type or o...

CVE-2026-116489

Timescale pgvectorscale before 0.9.1 contains a type confusion vulnerability that allows low-privileged database users t

来源摘录 · NVD

#cve #cwe-843

漏洞预警2026-10-26 发布MEDIUM

A vulnerability was identified in Sunwood-ai-labs github-kanban-mcp-server up to 0.4.0. Impacted is the function handleListIssues of the file src/handlers/issue-handlers.ts. Suc...

CVE-2026-116369

A vulnerability was identified in Sunwood-ai-labs github-kanban-mcp-server up to 0.4.0. Impacted is the function handleL

来源摘录 · NVD

#cve #cwe-77 #cwe-78

漏洞预警2026-10-26 发布MEDIUM

A vulnerability was found in DeepSeek Harness up to 0.1.0-rc.5. This vulnerability affects the function createContext of the file packages/extensions/cordis-host-runner/src/sand...

CVE-2026-116367

A vulnerability was found in DeepSeek Harness up to 0.1.0-rc.5. This vulnerability affects the function createContext of

来源摘录 · NVD

#cve #cwe-264 #cwe-265

漏洞预警2026-10-26 发布HIGH

UNSUPPORTED WHEN ASSIGNED Authorization bypass in Apache Vysper, all versions. Apache Vysper is an XMPP (Jabber) server library. Its XEP-0077 (In-Band Registration) imp...

CVE-2026-115748

**UNSUPPORTED WHEN ASSIGNED** Authorization bypass in Apache Vysper, all versions. Apache Vysper is an XMPP (Jabber

来源摘录 · NVD

#cve #cwe-639

漏洞预警2026-10-26 发布HIGH

UNSUPPORTED WHEN ASSIGNED Unbounded allocation in XML parsing in Apache Vysper; all versions, may lead to an out of memory condition. This issue affects all versions of...

CVE-2026-115721

**UNSUPPORTED WHEN ASSIGNED** Unbounded allocation in XML parsing in Apache Vysper; all versions, may lead to an out of

来源摘录 · NVD

#cve #cwe-770

漏洞预警2026-10-26 发布CRITICAL

OpenHands Software Agent SDK before 1.52.0 contains an unauthenticated remote code execution vulnerability where the DockerWorkspace and Apptainer workspace launchers bind the s...

CVE-2026-112346

OpenHands Software Agent SDK before 1.52.0 contains an unauthenticated remote code execution vulnerability where the Doc

来源摘录 · NVD

#cve #cwe-1327

漏洞预警2026-10-26 发布MEDIUM

Syncplify Server! 6.0.0 before 8.8.0 contains a path traversal vulnerability that allows attackers with a symbolic link placed inside a user's home folder to access files outsid...

CVE-2026-112344

Syncplify Server! 6.0.0 before 8.8.0 contains a path traversal vulnerability that allows attackers with a symbolic link

来源摘录 · NVD

#cve #cwe-59

漏洞预警2026-10-26 发布HIGH

Syncplify Server! before 8.8.0 contains an access control bypass vulnerability that allows authenticated SFTP users to evade per-path permission overrides by exploiting case-ins...

CVE-2026-112343

Syncplify Server! before 8.8.0 contains an access control bypass vulnerability that allows authenticated SFTP users to e

来源摘录 · NVD

#cve #cwe-41

漏洞预警2026-10-26 发布HIGH

An issue in Maltego Technologies GmbH Maltego Windows Installer 4.13.0 allows a local attacker to execute arbitrary code via the Maltego Windows installer executable-resolution ...

CVE-2026-107090

An issue in Maltego Technologies GmbH Maltego Windows Installer 4.13.0 allows a local attacker to execute arbitrary code

来源摘录 · NVD

#cve #cwe-427

漏洞预警2026-10-26 发布MEDIUM

OpenJPEG 2.4.0 through 2.5.4, and git master through commit 8314119b, contains an out-of-bounds read and write in opj_dwt_encode_and_deinterleave_v() in src/lib/openjp2/dwt.c. T...

CVE-2026-107080

OpenJPEG 2.4.0 through 2.5.4, and git master through commit 8314119b, contains an out-of-bounds read and write in opj_dw

来源摘录 · NVD

#cve #cwe-125 #cwe-787

漏洞预警2026-10-26 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Fix AMD TLBI Erratum #1718 The processor may fail to invalidate a TLB entry while executing an...

CVE-2026-99099

In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Fix AMD TLBI Erratum #1718 The proces

来源摘录 · NVD

#cve

漏洞预警2026-10-26 发布INFO

In the Linux kernel, the following vulnerability has been resolved: drm/vc4: drain the hangcheck timer and works on V3D unbind Nothing stops the hangcheck timer that submitted...

CVE-2026-99095

In the Linux kernel, the following vulnerability has been resolved: drm/vc4: drain the hangcheck timer and works on V3D

来源摘录 · NVD

#cve

漏洞预警2026-10-26 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel_pcie: fix TX descriptor bounds check btintel_pcie_prepare_tx() uses tfd_index to access ...

CVE-2026-99094

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel_pcie: fix TX descriptor bounds c

来源摘录 · NVD

#cve

漏洞预警2026-10-26 发布INFO

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix status of pending commands flushed on power off cmd_complete_rsp() receives a struct c...

CVE-2026-99091

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix status of pending commands flu

来源摘录 · NVD

#cve

漏洞预警2026-10-26 发布INFO

In the Linux kernel, the following vulnerability has been resolved: ASoC: samsung: i2s: enable op_clk in probe to balance runtime PM The probe function puts the device into th...

CVE-2026-99089

In the Linux kernel, the following vulnerability has been resolved: ASoC: samsung: i2s: enable op_clk in probe to balan

来源摘录 · NVD

#cve

漏洞预警2026-10-26 发布INFO

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: validate transport header presence in set_ipv6_addr When executing IPv6 address rewrite a...

CVE-2026-99088

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: validate transport header presenc

来源摘录 · NVD

#cve

漏洞预警2026-10-26 发布MEDIUM

Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail to bind the volume of text extracted from an uploaded PDF which allows an auth...

CVE-2026-93850

Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail to bind the volume of

来源摘录 · NVD

#cve #cwe-409

漏洞预警2026-10-26 发布MEDIUM

Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 Mattermost fail to apply allocation limits to the byte-string decode paths in its W...

CVE-2026-93849

Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 Mattermost fail to apply a

来源摘录 · NVD

#cve #cwe-789

漏洞预警2026-10-26 发布LOW

Mattermost versions 11.7.x <= 11.7.10 fail to apply outbound internal-connection filtering to the OpenID discovery endpoint request which allows a System Administrator to determ...

CVE-2026-93848

Mattermost versions 11.7.x <= 11.7.10 fail to apply outbound internal-connection filtering to the OpenID discovery endpo

来源摘录 · NVD

#cve #cwe-918

漏洞预警2026-10-26 发布LOW

Mattermost versions 11.7.x <= 11.7.10 fail to validate reserved system post types on the scheduled post creation and publication paths which allows an authenticated channel memb...

CVE-2026-93847

Mattermost versions 11.7.x <= 11.7.10 fail to validate reserved system post types on the scheduled post creation and pub

来源摘录 · NVD

#cve #cwe-863