#CVE

共收录 63886 条相关情报。

漏洞预警2026-10-23 发布INFO

Improper Neutralization of Special Elements used in an OS Command (“OS Command Injection”) and Cross-Site Request Forgery (CSRF) in an ASUS router model allow an attacker to tri...

CVE-2026-75779

Improper Neutralization of Special Elements used in an OS Command (“OS Command Injection”) and Cross-Site Request Forger

来源摘录 · NVD

#cve #cwe-352 #cwe-78

漏洞预警2026-10-23 发布INFO

Improper Neutralization of Special Elements used in an OS Command in certain ASUS routers allows remote user to execute arbitrary commands with root privileges via crafted param...

CVE-2026-75775

Improper Neutralization of Special Elements used in an OS Command in certain ASUS routers allows remote user to execute

来源摘录 · NVD

#cve #cwe-78

漏洞预警2026-10-23 发布CRITICAL

An authentication bypass vulnerability in WizLearn Technologies' Learning Management System (LMS) could allow an unauthenticated remote attacker to bypass password authenticatio...

CVE-2026-63244

An authentication bypass vulnerability in WizLearn Technologies' Learning Management System (LMS) could allow an unauthe

来源摘录 · NVD

#cve #cwe-287

漏洞预警2026-10-23 发布INFO

The "ASMobile" web interface, which is part of the VertiGIS software package "GIS Portal", allows authenticated users to define a business reference. JavaScript code can be inse...

CVE-2026-4952

The "ASMobile" web interface, which is part of the VertiGIS software package "GIS Portal", allows authenticated users to

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-23 发布INFO

The CustomerAdministration portal (KundenManager) of VertiGIS WebOrderSystem allows privileged users to search for employees across all defined companies (user groups). The sear...

CVE-2026-4951

The CustomerAdministration portal (KundenManager) of VertiGIS WebOrderSystem allows privileged users to search for emplo

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-23 发布INFO

The CustomerAdministration portal (KundenManager) of VertiGIS WebOrderSystem allows privileged users to manage the employees of defined companies (user groups). User properties,...

CVE-2026-4950

The CustomerAdministration portal (KundenManager) of VertiGIS WebOrderSystem allows privileged users to manage the emplo

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-23 发布MEDIUM

An authentication vulnerability in the Bluetooth Low Energy (BLE) implementation of Creative Sound Blaster Katana could allow an attacker within Bluetooth range to connect to an...

CVE-2026-63243

An authentication vulnerability in the Bluetooth Low Energy (BLE) implementation of Creative Sound Blaster Katana could

来源摘录 · NVD

#cve #cwe-287

漏洞预警2026-10-23 发布CRITICAL

A firmware verification vulnerability in Creative Sound Blaster Katana could allow an attacker to modify a legitimate firmware image and upload the modified firmware to an affec...

CVE-2026-55981

A firmware verification vulnerability in Creative Sound Blaster Katana could allow an attacker to modify a legitimate fi

来源摘录 · NVD

#cve #cwe-494

漏洞预警2026-10-23 发布INFO

Missing Origin Validation in WebSockets (CWE-1385) and Permissive Cross-domain Policy with Untrusted Domains (CWE-942) in the development web server (ADK Web) in Google Agent De...

CVE-2026-107858

Missing Origin Validation in WebSockets (CWE-1385) and Permissive Cross-domain Policy with Untrusted Domains (CWE-942) i

来源摘录 · NVD

#cve #cwe-1385 #cwe-306 #cwe-942

漏洞预警2026-10-23 发布INFO

Part-DB is an open source inventory management system for electronic components. Prior to version 2.13.3, Part-DB builds the absolute URL of the password-reset link it emails to...

CVE-2026-86055

Part-DB is an open source inventory management system for electronic components. Prior to version 2.13.3, Part-DB builds

来源摘录 · NVD

#cve #cwe-640

漏洞预警2026-10-23 发布INFO

Part-DB is an open source inventory management system for electronic components. Prior to version 2.13.2, Part-DB allows authenticated API users to bypass the configured maximum...

CVE-2026-86019

Part-DB is an open source inventory management system for electronic components. Prior to version 2.13.2, Part-DB allows

来源摘录 · NVD

#cve #cwe-400 #cwe-770

漏洞预警2026-10-23 发布INFO

Part-DB is an open source inventory management system for electronic components. Prior to version 2.13.2, Part-DB allows authenticated users to bypass the configured maximum att...

CVE-2026-86018

Part-DB is an open source inventory management system for electronic components. Prior to version 2.13.2, Part-DB allows

来源摘录 · NVD

#cve #cwe-400 #cwe-770

漏洞预警2026-10-23 发布MEDIUM

Part-DB is an open source inventory management system for electronic components. Prior to version 2.12.3, Part-DB-server sanitizes SVG files based solely on the user-controlled ...

CVE-2026-59188

Part-DB is an open source inventory management system for electronic components. Prior to version 2.12.3, Part-DB-server

来源摘录 · NVD

#cve #cwe-434 #cwe-79

漏洞预警2026-10-23 发布MEDIUM

OpenStack Ironic before 39.0.1 allows DELETE and GET via vendor_passthru, e.g., to delete accounts from the BMC's Redfish service.

CVE-2026-90458

OpenStack Ironic before 39.0.1 allows DELETE and GET via vendor_passthru, e.g., to delete accounts from the BMC's Redfis

来源摘录 · NVD

#cve #cwe-1287

漏洞预警2026-10-23 发布MEDIUM

OpenStack Ironic before 39.0.1 sometimes allows a user to change the maintenance setting on a node via PATCH to /v1/nodes/{ident} - in other words, not using the specific mainte...

CVE-2026-89419

OpenStack Ironic before 39.0.1 sometimes allows a user to change the maintenance setting on a node via PATCH to /v1/node

来源摘录 · NVD

#cve #cwe-424

漏洞预警2026-10-23 发布INFO

Part-DB is an open source inventory management system for electronic components. Prior to version 2.12.2, Part-DB renders BOM validation information messages using Twig's |raw f...

CVE-2026-55600

Part-DB is an open source inventory management system for electronic components. Prior to version 2.12.2, Part-DB render

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-23 发布MEDIUM

Part-DB is an open source inventory management system for electronic components. Prior to version 2.12.1, the file .env committed in the Part-DB repository contains a fixed valu...

CVE-2026-54631

Part-DB is an open source inventory management system for electronic components. Prior to version 2.12.1, the file .env

来源摘录 · NVD

#cve #cwe-798

漏洞预警2026-10-23 发布CRITICAL

Part-DB is an open source inventory management system for electronic components. Prior to version 2.12.1, the part attachment upload handler stores uploaded files under the web-...

CVE-2026-54630

Part-DB is an open source inventory management system for electronic components. Prior to version 2.12.1, the part attac

来源摘录 · NVD

#cve #cwe-434

漏洞预警2026-10-23 发布MEDIUM

OpenStack Ironic through 39.0.1 allows a denial of service via a configdrive that results in a very large amount of uncompressed data, aka a gzip bomb.

CVE-2026-115638

OpenStack Ironic through 39.0.1 allows a denial of service via a configdrive that results in a very large amount of unco

来源摘录 · NVD

#cve #cwe-409

漏洞预警2026-10-23 发布INFO

A server-side request forgery (SSRF) vulnerability in the unauthenticated form service in version 11.0.14 in onPhase Forms allows an unauthenticated remote attacker to access se...

CVE-2026-19678

A server-side request forgery (SSRF) vulnerability in the unauthenticated form service in version 11.0.14 in onPhase For

来源摘录 · NVD

#cve #cwe-918