#CVE

共收录 65074 条相关情报。

漏洞预警2026-10-25 发布LOW

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains uncontrolled recursion in the MVG decoder that can lead to a stack overflow. Attackers can supply a crafted MVG fil...

CVE-2026-116144

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains uncontrolled recursion in the MVG decoder that can lead to

来源摘录 · NVD

#cve #cwe-674

漏洞预警2026-10-25 发布LOW

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a policy bypass in the PS, PDF and XPS decoders that allows the security policy's list length limit on scene select...

CVE-2026-116143

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a policy bypass in the PS, PDF and XPS decoders that allow

来源摘录 · NVD

#cve #cwe-770

漏洞预警2026-10-25 发布LOW

ImageMagick before 7.1.2-33 contains a heap buffer over-read vulnerability that allows attackers to read beyond allocated memory when printing a minimum-bounding-box. Attackers ...

CVE-2026-116142

ImageMagick before 7.1.2-33 contains a heap buffer over-read vulnerability that allows attackers to read beyond allocate

来源摘录 · NVD

#cve #cwe-125

漏洞预警2026-10-25 发布MEDIUM

ImageMagick before 7.1.2-33 contains a policy bypass vulnerability in the UHDR decoder that allows attackers to evade image width and height limits because extent checks occur a...

CVE-2026-116141

ImageMagick before 7.1.2-33 contains a policy bypass vulnerability in the UHDR decoder that allows attackers to evade im

来源摘录 · NVD

#cve #cwe-400

漏洞预警2026-10-25 发布LOW

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 incorrectly parses delegate invocations, which can allow an executable blocked in policy.xml to still run. An attacker who g...

CVE-2026-116140

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 incorrectly parses delegate invocations, which can allow an executa

来源摘录 · NVD

#cve #cwe-863

漏洞预警2026-10-25 发布MEDIUM

A security flaw has been discovered in LinkStackOrg LinkStack up to 4.8.8. The affected element is an unknown function. Performing a manipulation results in cross-site request f...

CVE-2026-116052

A security flaw has been discovered in LinkStackOrg LinkStack up to 4.8.8. The affected element is an unknown function.

来源摘录 · NVD

#cve #cwe-352 #cwe-862

漏洞预警2026-10-25 发布LOW

adm-zip through 0.6.1 contains a duplicate-entry validation bypass that allows attackers to evade the readEntries() check by using canonically equivalent entry names like './hel...

CVE-2026-116137

adm-zip through 0.6.1 contains a duplicate-entry validation bypass that allows attackers to evade the readEntries() chec

来源摘录 · NVD

#cve #cwe-436

漏洞预警2026-10-25 发布MEDIUM

ProjectSend 2.0.0 through 2.7.1 contains an incomplete authorization vulnerability in FileVersions::link() that allows staff users to share files without authorization by linkin...

CVE-2026-116136

ProjectSend 2.0.0 through 2.7.1 contains an incomplete authorization vulnerability in FileVersions::link() that allows s

来源摘录 · NVD

#cve #cwe-863

漏洞预警2026-10-25 发布MEDIUM

Leon before commit 50df142 contains a path traversal vulnerability in getModelFileNameFromURL() that allows attackers to write files outside the models directory via percent-enc...

CVE-2026-116073

Leon before commit 50df142 contains a path traversal vulnerability in getModelFileNameFromURL() that allows attackers to

来源摘录 · NVD

#cve #cwe-22

漏洞预警2026-10-25 发布MEDIUM

rotki before 1.44.2 contains a weak key derivation vulnerability that allows attackers to brute-force backups because the premium sync key is a single unsalted SHA-256 of the us...

CVE-2026-116071

rotki before 1.44.2 contains a weak key derivation vulnerability that allows attackers to brute-force backups because th

来源摘录 · NVD

#cve #cwe-916

漏洞预警2026-10-25 发布MEDIUM

Docker-Proxy through 5.1.9 contains a missing authentication vulnerability in the hubcmdui routes/config.js that allows unauthenticated attackers to read and overwrite configura...

CVE-2026-116070

Docker-Proxy through 5.1.9 contains a missing authentication vulnerability in the hubcmdui routes/config.js that allows

来源摘录 · NVD

#cve #cwe-306

漏洞预警2026-10-25 发布MEDIUM

NiubiGEO before 0.3.2 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server fetch internal addresses by supplying...

CVE-2026-116069

NiubiGEO before 0.3.2 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers

来源摘录 · NVD

#cve #cwe-918

漏洞预警2026-10-25 发布HIGH

Paisa before 0.7.8 contains a path traversal vulnerability in the GetFile, GetSheet, DeleteBackups, and DeleteSheetBackups handlers that lets unauthenticated attackers read file...

CVE-2026-116067

Paisa before 0.7.8 contains a path traversal vulnerability in the GetFile, GetSheet, DeleteBackups, and DeleteSheetBacku

来源摘录 · NVD

#cve #cwe-22

漏洞预警2026-10-25 发布MEDIUM

Firecrawl before 2.11.586 contains a server-side request forgery vulnerability in the Playwright service SSRF proxy that allows attackers to bypass isInternalHost checks via DNS...

CVE-2026-116066

Firecrawl before 2.11.586 contains a server-side request forgery vulnerability in the Playwright service SSRF proxy that

来源摘录 · NVD

#cve #cwe-918

漏洞预警2026-10-25 发布HIGH

A vulnerability has been found in krupalshah Employee Recruitment System up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. This affects an unknown part of the file /source/registe...

CVE-2026-116050

A vulnerability has been found in krupalshah Employee Recruitment System up to 922ff6d208278282e7c8e36d70d9ae356adec9fe.

来源摘录 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-10-25 发布HIGH

A vulnerability was detected in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. Affected by this vulnerability is the function mysql_query o...

CVE-2026-116048

A vulnerability was detected in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. Aff

来源摘录 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-10-25 发布MEDIUM

A vulnerability has been found in Privoce Vocechat up to 0.9.121. This issue affects some unknown processing of the file widget.html of the component Query Parameter Handler. Su...

CVE-2026-116047

A vulnerability has been found in Privoce Vocechat up to 0.9.121. This issue affects some unknown processing of the file

来源摘录 · NVD

#cve #cwe-79 #cwe-94

漏洞预警2026-10-25 发布MEDIUM

A vulnerability was detected in 1999AZZAR designer-mcp up to 2.1.0. This affects the function get_reference of the file skills/motion-designer/references/motion-dev-guidelines.m...

CVE-2026-116045

A vulnerability was detected in 1999AZZAR designer-mcp up to 2.1.0. This affects the function get_reference of the file

来源摘录 · NVD

#cve #cwe-22

漏洞预警2026-10-25 发布MEDIUM

A security vulnerability has been detected in prasathmani TinyFileManager up to 2.6. Affected by this issue is some unknown functionality of the file tinyfilemanager.php of the ...

CVE-2026-116044

A security vulnerability has been detected in prasathmani TinyFileManager up to 2.6. Affected by this issue is some unkn

来源摘录 · NVD

#cve #cwe-284 #cwe-434

漏洞预警2026-10-25 发布HIGH

A vulnerability was detected in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.09. The affected element is an unknown function of the file AuthController.java of the component SM...

CVE-2026-116006

A vulnerability was detected in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.09. The affected element is an unknown fun

来源摘录 · NVD

#cve #cwe-287