#CVE

共收录 63886 条相关情报。

← 返回所有主题
漏洞预警2026-10-25 发布MEDIUM

A security flaw has been discovered in LinkStackOrg LinkStack up to 4.8.8. The affected element is an unknown function. Performing a manipulation results in cross-site request f...

CVE-2026-116052

A security flaw has been discovered in LinkStackOrg LinkStack up to 4.8.8. The affected element is an unknown function.

来源摘录 · NVD

漏洞预警2026-10-25 发布LOW

adm-zip through 0.6.1 contains a duplicate-entry validation bypass that allows attackers to evade the readEntries() check by using canonically equivalent entry names like './hel...

CVE-2026-116137

adm-zip through 0.6.1 contains a duplicate-entry validation bypass that allows attackers to evade the readEntries() chec

来源摘录 · NVD

漏洞预警2026-10-25 发布MEDIUM

ProjectSend 2.0.0 through 2.7.1 contains an incomplete authorization vulnerability in FileVersions::link() that allows staff users to share files without authorization by linkin...

CVE-2026-116136

ProjectSend 2.0.0 through 2.7.1 contains an incomplete authorization vulnerability in FileVersions::link() that allows s

来源摘录 · NVD

漏洞预警2026-10-25 发布MEDIUM

Leon before commit 50df142 contains a path traversal vulnerability in getModelFileNameFromURL() that allows attackers to write files outside the models directory via percent-enc...

CVE-2026-116073

Leon before commit 50df142 contains a path traversal vulnerability in getModelFileNameFromURL() that allows attackers to

来源摘录 · NVD

漏洞预警2026-10-25 发布MEDIUM

rotki before 1.44.2 contains a weak key derivation vulnerability that allows attackers to brute-force backups because the premium sync key is a single unsalted SHA-256 of the us...

CVE-2026-116071

rotki before 1.44.2 contains a weak key derivation vulnerability that allows attackers to brute-force backups because th

来源摘录 · NVD

漏洞预警2026-10-25 发布MEDIUM

Docker-Proxy through 5.1.9 contains a missing authentication vulnerability in the hubcmdui routes/config.js that allows unauthenticated attackers to read and overwrite configura...

CVE-2026-116070

Docker-Proxy through 5.1.9 contains a missing authentication vulnerability in the hubcmdui routes/config.js that allows

来源摘录 · NVD

漏洞预警2026-10-25 发布MEDIUM

NiubiGEO before 0.3.2 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server fetch internal addresses by supplying...

CVE-2026-116069

NiubiGEO before 0.3.2 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers

来源摘录 · NVD

漏洞预警2026-10-25 发布HIGH

Paisa before 0.7.8 contains a path traversal vulnerability in the GetFile, GetSheet, DeleteBackups, and DeleteSheetBackups handlers that lets unauthenticated attackers read file...

CVE-2026-116067

Paisa before 0.7.8 contains a path traversal vulnerability in the GetFile, GetSheet, DeleteBackups, and DeleteSheetBacku

来源摘录 · NVD

漏洞预警2026-10-25 发布MEDIUM

Firecrawl before 2.11.586 contains a server-side request forgery vulnerability in the Playwright service SSRF proxy that allows attackers to bypass isInternalHost checks via DNS...

CVE-2026-116066

Firecrawl before 2.11.586 contains a server-side request forgery vulnerability in the Playwright service SSRF proxy that

来源摘录 · NVD

漏洞预警2026-10-25 发布HIGH

A vulnerability has been found in krupalshah Employee Recruitment System up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. This affects an unknown part of the file /source/registe...

CVE-2026-116050

A vulnerability has been found in krupalshah Employee Recruitment System up to 922ff6d208278282e7c8e36d70d9ae356adec9fe.

来源摘录 · NVD

漏洞预警2026-10-25 发布HIGH

A vulnerability was detected in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. Affected by this vulnerability is the function mysql_query o...

CVE-2026-116048

A vulnerability was detected in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. Aff

来源摘录 · NVD

漏洞预警2026-10-25 发布MEDIUM

A vulnerability has been found in Privoce Vocechat up to 0.9.121. This issue affects some unknown processing of the file widget.html of the component Query Parameter Handler. Su...

CVE-2026-116047

A vulnerability has been found in Privoce Vocechat up to 0.9.121. This issue affects some unknown processing of the file

来源摘录 · NVD

漏洞预警2026-10-25 发布MEDIUM

A vulnerability was detected in 1999AZZAR designer-mcp up to 2.1.0. This affects the function get_reference of the file skills/motion-designer/references/motion-dev-guidelines.m...

CVE-2026-116045

A vulnerability was detected in 1999AZZAR designer-mcp up to 2.1.0. This affects the function get_reference of the file

来源摘录 · NVD

漏洞预警2026-10-25 发布MEDIUM

A security vulnerability has been detected in prasathmani TinyFileManager up to 2.6. Affected by this issue is some unknown functionality of the file tinyfilemanager.php of the ...

CVE-2026-116044

A security vulnerability has been detected in prasathmani TinyFileManager up to 2.6. Affected by this issue is some unkn

来源摘录 · NVD

漏洞预警2026-10-25 发布HIGH

A vulnerability was detected in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.09. The affected element is an unknown function of the file AuthController.java of the component SM...

CVE-2026-116006

A vulnerability was detected in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.09. The affected element is an unknown fun

来源摘录 · NVD

漏洞预警2026-10-25 发布LOW

A security vulnerability has been detected in onyx-dot-app Onyx up to 5.0.0. Impacted is an unknown function of the file web/src/app/craft/components/output-panel/PreviewTab.tsx...

CVE-2026-116004

A security vulnerability has been detected in onyx-dot-app Onyx up to 5.0.0. Impacted is an unknown function of the file

来源摘录 · NVD

漏洞预警2026-10-25 发布HIGH

A vulnerability has been found in mansi-k Restaurant_IMS d7ad49f61ab7cc1ec6eb359ac2b5378bdbde0694. Affected is the function mysqli_connect of the file lsmodal.php. The manipulat...

CVE-2026-115999

A vulnerability has been found in mansi-k Restaurant_IMS d7ad49f61ab7cc1ec6eb359ac2b5378bdbde0694. Affected is the funct

来源摘录 · NVD

漏洞预警2026-10-25 发布MEDIUM

A flaw has been found in pig-mesh pig up to 4.1.0. This impacts the function orderItem.getColumn of the file pig-common/pig-common-data/src/main/java/com/pig4cloud/pig/common/da...

CVE-2026-115997

A flaw has been found in pig-mesh pig up to 4.1.0. This impacts the function orderItem.getColumn of the file pig-common/

来源摘录 · NVD

漏洞预警2026-10-24 发布CRITICAL

A security vulnerability has been detected in Unitree Robotics Unitree Go2 up to 1.1.11.4. The impacted element is the function set_volume of the file gpt_thread.py of the compo...

CVE-2026-115995

A security vulnerability has been detected in Unitree Robotics Unitree Go2 up to 1.1.11.4. The impacted element is the f

来源摘录 · NVD

漏洞预警2026-10-24 发布MEDIUM

A vulnerability was detected in phpIPAM up to 1.8.3. Affected by this issue is the function create_rack_link of the file app/tools/racks/show-rack-popup.php of the component Rac...

CVE-2026-115982

A vulnerability was detected in phpIPAM up to 1.8.3. Affected by this issue is the function create_rack_link of the file

来源摘录 · NVD