#CVE

共收录 63886 条相关情报。

漏洞预警2026-10-22 发布CRITICAL

Sensitive information disclosure vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated remote attacker to obtain sensitive information from the affe...

CVE-2026-79853

Sensitive information disclosure vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated remo

来源摘录 · NVD

#cve #cwe-200

漏洞预警2026-10-22 发布CRITICAL

Command injection vulnerabilities exist in the affected interface of AOS-8 that could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host i...

CVE-2026-79846

Command injection vulnerabilities exist in the affected interface of AOS-8 that could allow an unauthenticated remote at

来源摘录 · NVD

#cve #cwe-77

漏洞预警2026-10-22 发布INFO

Missing security attributes on sensitive cookies in KNIME Business Hub before version 1.19.0 allow an unauthenticated remote attacker to compromise user sessions if other securi...

CVE-2026-115519

Missing security attributes on sensitive cookies in KNIME Business Hub before version 1.19.0 allow an unauthenticated re

来源摘录 · NVD

#cve #cwe-1004 #cwe-614

漏洞预警2026-10-22 发布INFO

Unrestricted network access between execution contexts in KNIME Business Hub before version 1.19.0 allows an authenticated remote user to access open network ports on executors ...

CVE-2026-115517

Unrestricted network access between execution contexts in KNIME Business Hub before version 1.19.0 allows an authenticat

来源摘录 · NVD

#cve #cwe-653

漏洞预警2026-10-22 发布MEDIUM

Ghidra before 12.2 contains a resource allocation without limits vulnerability in ExtensionUtils.unzipToInstallationFolder() that extracts every extension ZIP entry without limi...

CVE-2026-115397

Ghidra before 12.2 contains a resource allocation without limits vulnerability in ExtensionUtils.unzipToInstallationFold

来源摘录 · NVD

#cve #cwe-770

漏洞预警2026-10-22 发布MEDIUM

Ghidra 10.3 before 12.2 contains an improper handling of highly compressed data vulnerability in ThemeReader.processIconFile() that fails to limit decompressed size or compressi...

CVE-2026-115396

Ghidra 10.3 before 12.2 contains an improper handling of highly compressed data vulnerability in ThemeReader.processIcon

来源摘录 · NVD

#cve #cwe-409

漏洞预警2026-10-22 发布MEDIUM

Ghidra 10.3 before 12.2 contains a resource allocation without limits vulnerability in ThemeReader.readZipTheme() that extracts unlimited theme ZIP entries to the images directo...

CVE-2026-115395

Ghidra 10.3 before 12.2 contains a resource allocation without limits vulnerability in ThemeReader.readZipTheme() that e

来源摘录 · NVD

#cve #cwe-770

漏洞预警2026-10-22 发布MEDIUM

Ghidra through 12.2 contains an uncontrolled memory allocation vulnerability in BinaryField.read() that allows attackers to exhaust heap memory via an unchecked 32-bit length fi...

CVE-2026-115394

Ghidra through 12.2 contains an uncontrolled memory allocation vulnerability in BinaryField.read() that allows attackers

来源摘录 · NVD

#cve #cwe-789

漏洞预警2026-10-22 发布LOW

Wasmtime before 24.0.12, 25.0.0 before 36.0.13, 37.0.0 before 46.0.2, and 47.0.0 before 47.0.3 contains a type confusion vulnerability because several Store APIs fail to validat...

CVE-2026-115393

Wasmtime before 24.0.12, 25.0.0 before 36.0.13, 37.0.0 before 46.0.2, and 47.0.0 before 47.0.3 contains a type confusion

来源摘录 · NVD

#cve #cwe-787

漏洞预警2026-10-22 发布HIGH

Wasmtime before 24.0.13, 25.0.0 before 36.0.14, 37.0.0 before 46.0.3, and 47.0.0 before 47.0.4 allows a filesystem sandbox escape in wasmtime-wasi because its cap-std dependency...

CVE-2026-115392

Wasmtime before 24.0.13, 25.0.0 before 36.0.14, 37.0.0 before 46.0.3, and 47.0.0 before 47.0.4 allows a filesystem sandb

来源摘录 · NVD

#cve #cwe-61

漏洞预警2026-10-22 发布MEDIUM

Wasmtime 46.0.0 before 46.0.3 and 47.0.0 before 47.0.4 contains an uncontrolled resource allocation vulnerability in its WASIp3 implementation that buffers guest-specified-lengt...

CVE-2026-115391

Wasmtime 46.0.0 before 46.0.3 and 47.0.0 before 47.0.4 contains an uncontrolled resource allocation vulnerability in its

来源摘录 · NVD

#cve #cwe-770

漏洞预警2026-10-22 发布LOW

Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0.1 does not adequately account for host allocations when lifting guest values through the dynamically-typed ...

CVE-2026-115389

Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0.1 does not adequately account for host allocations

来源摘录 · NVD

#cve #cwe-770

漏洞预警2026-10-22 发布MEDIUM

wasmtime-wasi-http in Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0.1 does not enforce the wasi:io/streams check-write allowance for WASIp2 outgoing HTTP...

CVE-2026-115388

wasmtime-wasi-http in Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0.1 does not enforce the wasi:

来源摘录 · NVD

#cve #cwe-400

漏洞预警2026-10-22 发布MEDIUM

Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0.1 contains a denial of service vulnerability in wasmtime-wasi that allows guest WASI programs to panic the ...

CVE-2026-115387

Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0.1 contains a denial of service vulnerability in wa

来源摘录 · NVD

#cve #cwe-190

漏洞预警2026-10-22 发布CRITICAL

Wasmtime 39.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a stack buffer overflow vulnerability that allows malicious guests to write ~16KB to the native stack via unvalid...

CVE-2026-115384

Wasmtime 39.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a stack buffer overflow vulnerability that allows malici

来源摘录 · NVD

#cve #cwe-20

漏洞预警2026-10-22 发布MEDIUM

Wasmtime 47.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains an improper validation vulnerability that accepts components whose core modules import WebAssembly tags with a su...

CVE-2026-115383

Wasmtime 47.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains an improper validation vulnerability that accepts compon

来源摘录 · NVD

#cve #cwe-1287

漏洞预警2026-10-22 发布MEDIUM

Wasmtime 47.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a missing GC rooting vulnerability that leaves references live across try_call unrooted when compiling Wasm modul...

CVE-2026-115379

Wasmtime 47.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a missing GC rooting vulnerability that leaves reference

来源摘录 · NVD

#cve #cwe-416

漏洞预警2026-10-22 发布CRITICAL

Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 contains an arbitrary file write vulnerability that allows malicious migration sources to write host files by plan...

CVE-2026-115377

Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 contains an arbitrary file write vulnerability that allow

来源摘录 · NVD

#cve #cwe-59

漏洞预警2026-10-22 发布HIGH

Incus 7.0.1 before 7.0.2 and 7.2.0 before 7.5.0 contains an authorization bypass vulnerability that allows project-restricted clients to copy volumes by omitting source.type. At...

CVE-2026-115376

Incus 7.0.1 before 7.0.2 and 7.2.0 before 7.5.0 contains an authorization bypass vulnerability that allows project-restr

来源摘录 · NVD

#cve #cwe-284

漏洞预警2026-10-22 发布CRITICAL

Incus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 contains a path traversal vulnerability that allows clients able to create instances to write files on the host. The flaw stems f...

CVE-2026-115375

Incus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 contains a path traversal vulnerability that allows clients able to crea

来源摘录 · NVD

#cve #cwe-22