#CVE

共收录 64179 条相关情报。

漏洞预警2026-10-22 发布CRITICAL

Authentication bypass vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Succes...

CVE-2026-79869

Authentication bypass vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated adjacent attack

来源摘录 · NVD

#cve #cwe-287

漏洞预警2026-10-22 发布CRITICAL

Authentication bypass vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Success...

CVE-2026-79868

Authentication bypass vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated adjacent attacke

来源摘录 · NVD

#cve #cwe-287

漏洞预警2026-10-22 发布CRITICAL

Authentication bypass vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls and run ...

CVE-2026-79867

Authentication bypass vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated adjacent attacke

来源摘录 · NVD

#cve #cwe-287

漏洞预警2026-10-22 发布CRITICAL

An unauthenticated path traversal vulnerability exists in the PAPI protocol in AOS-8. Successful exploitation of this vulnerability could allow an unauthenticated adjacent attac...

CVE-2026-79866

An unauthenticated path traversal vulnerability exists in the PAPI protocol in AOS-8. Successful exploitation of this vu

来源摘录 · NVD

#cve #cwe-22

漏洞预警2026-10-22 发布CRITICAL

A memory corruption vulnerability in the affected interface of AOS-10 could allow an unauthenticated adjacent attacker to achieve remote code execution. Successful exploitation ...

CVE-2026-79865

A memory corruption vulnerability in the affected interface of AOS-10 could allow an unauthenticated adjacent attacker t

来源摘录 · NVD

#cve #cwe-119

漏洞预警2026-10-22 发布CRITICAL

Command injection vulnerabilities exist in the affected interface of AOS-10 that could allow an unauthenticated adjacent attacker to perform command injection. Successful exploi...

CVE-2026-79864

Command injection vulnerabilities exist in the affected interface of AOS-10 that could allow an unauthenticated adjacent

来源摘录 · NVD

#cve #cwe-77

漏洞预警2026-10-22 发布CRITICAL

Buffer overflow vulnerabilities in the affected interface of AOS-10 or AOS-8 could allow an unauthenticated adjacent attacker to execute arbitrary code by sending specially craf...

CVE-2026-79863

Buffer overflow vulnerabilities in the affected interface of AOS-10 or AOS-8 could allow an unauthenticated adjacent att

来源摘录 · NVD

#cve #cwe-120

漏洞预警2026-10-22 发布CRITICAL

Buffer overflow vulnerabilities in the affected interface of AOS-10 or AOS-8 could allow an unauthenticated adjacent attacker to execute arbitrary code by sending specially craf...

CVE-2026-79862

Buffer overflow vulnerabilities in the affected interface of AOS-10 or AOS-8 could allow an unauthenticated adjacent att

来源摘录 · NVD

#cve #cwe-120

漏洞预警2026-10-22 发布CRITICAL

There is a command injection vulnerability in AOS-10 that could lead to unauthenticated remote code execution by sending specially crafted PAPI packets. Successful exploitation ...

CVE-2026-79861

There is a command injection vulnerability in AOS-10 that could lead to unauthenticated remote code execution by sending

来源摘录 · NVD

#cve #cwe-77

漏洞预警2026-10-22 发布CRITICAL

Buffer overflow vulnerabilities exist in an underlying service of AOS-8 that could lead to unauthenticated remote code execution by sending specially crafted packets destined to...

CVE-2026-79860

Buffer overflow vulnerabilities exist in an underlying service of AOS-8 that could lead to unauthenticated remote code e

来源摘录 · NVD

#cve #cwe-120

漏洞预警2026-10-22 发布CRITICAL

Buffer overflow vulnerabilities exist in the affected interface of AOS-8 that could lead to unauthenticated remote code execution. Successful exploitation could allow an attacke...

CVE-2026-79859

Buffer overflow vulnerabilities exist in the affected interface of AOS-8 that could lead to unauthenticated remote code

来源摘录 · NVD

#cve #cwe-120

漏洞预警2026-10-22 发布CRITICAL

An unauthenticated SQL injection vulnerability exists in the PAPI protocol in AOS-8. Successful exploitation could allow an unauthenticated remote attacker to obtain and modify ...

CVE-2026-79858

An unauthenticated SQL injection vulnerability exists in the PAPI protocol in AOS-8. Successful exploitation could allow

来源摘录 · NVD

#cve #cwe-89

漏洞预警2026-10-22 发布CRITICAL

Sensitive information disclosure vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated remote attacker to obtain sensitive information from the affe...

CVE-2026-79853

Sensitive information disclosure vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated remo

来源摘录 · NVD

#cve #cwe-200

漏洞预警2026-10-22 发布CRITICAL

Command injection vulnerabilities exist in the affected interface of AOS-8 that could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host i...

CVE-2026-79846

Command injection vulnerabilities exist in the affected interface of AOS-8 that could allow an unauthenticated remote at

来源摘录 · NVD

#cve #cwe-77

漏洞预警2026-10-22 发布INFO

Missing security attributes on sensitive cookies in KNIME Business Hub before version 1.19.0 allow an unauthenticated remote attacker to compromise user sessions if other securi...

CVE-2026-115519

Missing security attributes on sensitive cookies in KNIME Business Hub before version 1.19.0 allow an unauthenticated re

来源摘录 · NVD

#cve #cwe-1004 #cwe-614

漏洞预警2026-10-22 发布INFO

Unrestricted network access between execution contexts in KNIME Business Hub before version 1.19.0 allows an authenticated remote user to access open network ports on executors ...

CVE-2026-115517

Unrestricted network access between execution contexts in KNIME Business Hub before version 1.19.0 allows an authenticat

来源摘录 · NVD

#cve #cwe-653

漏洞预警2026-10-22 发布MEDIUM

Ghidra before 12.2 contains a resource allocation without limits vulnerability in ExtensionUtils.unzipToInstallationFolder() that extracts every extension ZIP entry without limi...

CVE-2026-115397

Ghidra before 12.2 contains a resource allocation without limits vulnerability in ExtensionUtils.unzipToInstallationFold

来源摘录 · NVD

#cve #cwe-770

漏洞预警2026-10-22 发布MEDIUM

Ghidra 10.3 before 12.2 contains an improper handling of highly compressed data vulnerability in ThemeReader.processIconFile() that fails to limit decompressed size or compressi...

CVE-2026-115396

Ghidra 10.3 before 12.2 contains an improper handling of highly compressed data vulnerability in ThemeReader.processIcon

来源摘录 · NVD

#cve #cwe-409

漏洞预警2026-10-22 发布MEDIUM

Ghidra 10.3 before 12.2 contains a resource allocation without limits vulnerability in ThemeReader.readZipTheme() that extracts unlimited theme ZIP entries to the images directo...

CVE-2026-115395

Ghidra 10.3 before 12.2 contains a resource allocation without limits vulnerability in ThemeReader.readZipTheme() that e

来源摘录 · NVD

#cve #cwe-770

漏洞预警2026-10-22 发布MEDIUM

Ghidra through 12.2 contains an uncontrolled memory allocation vulnerability in BinaryField.read() that allows attackers to exhaust heap memory via an unchecked 32-bit length fi...

CVE-2026-115394

Ghidra through 12.2 contains an uncontrolled memory allocation vulnerability in BinaryField.read() that allows attackers

来源摘录 · NVD

#cve #cwe-789