#CVE

共收录 65074 条相关情报。

← 返回所有主题
漏洞预警2026-10-23 发布INFO

CGM CLININET is vulnerable to Remote Code Execution caused by deserialization of untrusted data. The server exposes an HTTP-based API, used by the administrative module, that ex...

CVE-2025-30047

CGM CLININET is vulnerable to Remote Code Execution caused by deserialization of untrusted data. The server exposes an H

来源摘录 · NVD

漏洞预警2026-10-23 发布INFO

In the CGM CLININET application server, multiple processes responsible for HL7 communication with external systems run with root privileges while processing untrusted data recei...

CVE-2025-30046

In the CGM CLININET application server, multiple processes responsible for HL7 communication with external systems run w

来源摘录 · NVD

漏洞预警2026-10-23 发布INFO

CGM CLININET is vulnerable to Code Injection in the ConvExpr function, which processes Perl expressions into RTF document content. Due to improper control of the code evaluated ...

CVE-2025-30045

CGM CLININET is vulnerable to Code Injection in the ConvExpr function, which processes Perl expressions into RTF documen

来源摘录 · NVD

漏洞预警2026-10-23 发布INFO

CGM CLININET is vulnerable to Missing Authentication for Critical Function in the /DocManagment path. The endpoint is accessible without authentication, allowing an unauthentica...

CVE-2025-30043

CGM CLININET is vulnerable to Missing Authentication for Critical Function in the /DocManagment path. The endpoint is ac

来源摘录 · NVD

漏洞预警2026-10-23 发布INFO

Improper Authentication in ASUS router modules allows an unauthenticated nearby user to send an HTTP request and forge an access ticket, subsequently enabling the user to perfor...

CVE-2026-93489

Improper Authentication in ASUS router modules allows an unauthenticated nearby user to send an HTTP request and forge a

来源摘录 · NVD

漏洞预警2026-10-23 发布INFO

Improper Neutralization of Special Elements used in an OS Command (“OS Command Injection”) and Cross-Site Request Forgery (CSRF) in an ASUS router model allow an attacker to tri...

CVE-2026-75779

Improper Neutralization of Special Elements used in an OS Command (“OS Command Injection”) and Cross-Site Request Forger

来源摘录 · NVD

漏洞预警2026-10-23 发布INFO

Improper Neutralization of Special Elements used in an OS Command in certain ASUS routers allows remote user to execute arbitrary commands with root privileges via crafted param...

CVE-2026-75775

Improper Neutralization of Special Elements used in an OS Command in certain ASUS routers allows remote user to execute

来源摘录 · NVD

漏洞预警2026-10-23 发布CRITICAL

An authentication bypass vulnerability in WizLearn Technologies' Learning Management System (LMS) could allow an unauthenticated remote attacker to bypass password authenticatio...

CVE-2026-63244

An authentication bypass vulnerability in WizLearn Technologies' Learning Management System (LMS) could allow an unauthe

来源摘录 · NVD

漏洞预警2026-10-23 发布INFO

The "ASMobile" web interface, which is part of the VertiGIS software package "GIS Portal", allows authenticated users to define a business reference. JavaScript code can be inse...

CVE-2026-4952

The "ASMobile" web interface, which is part of the VertiGIS software package "GIS Portal", allows authenticated users to

来源摘录 · NVD

漏洞预警2026-10-23 发布INFO

The CustomerAdministration portal (KundenManager) of VertiGIS WebOrderSystem allows privileged users to search for employees across all defined companies (user groups). The sear...

CVE-2026-4951

The CustomerAdministration portal (KundenManager) of VertiGIS WebOrderSystem allows privileged users to search for emplo

来源摘录 · NVD

漏洞预警2026-10-23 发布INFO

The CustomerAdministration portal (KundenManager) of VertiGIS WebOrderSystem allows privileged users to manage the employees of defined companies (user groups). User properties,...

CVE-2026-4950

The CustomerAdministration portal (KundenManager) of VertiGIS WebOrderSystem allows privileged users to manage the emplo

来源摘录 · NVD

漏洞预警2026-10-23 发布MEDIUM

An authentication vulnerability in the Bluetooth Low Energy (BLE) implementation of Creative Sound Blaster Katana could allow an attacker within Bluetooth range to connect to an...

CVE-2026-63243

An authentication vulnerability in the Bluetooth Low Energy (BLE) implementation of Creative Sound Blaster Katana could

来源摘录 · NVD

漏洞预警2026-10-23 发布CRITICAL

A firmware verification vulnerability in Creative Sound Blaster Katana could allow an attacker to modify a legitimate firmware image and upload the modified firmware to an affec...

CVE-2026-55981

A firmware verification vulnerability in Creative Sound Blaster Katana could allow an attacker to modify a legitimate fi

来源摘录 · NVD

漏洞预警2026-10-23 发布INFO

Missing Origin Validation in WebSockets (CWE-1385) and Permissive Cross-domain Policy with Untrusted Domains (CWE-942) in the development web server (ADK Web) in Google Agent De...

CVE-2026-107858

Missing Origin Validation in WebSockets (CWE-1385) and Permissive Cross-domain Policy with Untrusted Domains (CWE-942) i

来源摘录 · NVD

漏洞预警2026-10-23 发布INFO

Part-DB is an open source inventory management system for electronic components. Prior to version 2.13.3, Part-DB builds the absolute URL of the password-reset link it emails to...

CVE-2026-86055

Part-DB is an open source inventory management system for electronic components. Prior to version 2.13.3, Part-DB builds

来源摘录 · NVD

漏洞预警2026-10-23 发布INFO

Part-DB is an open source inventory management system for electronic components. Prior to version 2.13.2, Part-DB allows authenticated API users to bypass the configured maximum...

CVE-2026-86019

Part-DB is an open source inventory management system for electronic components. Prior to version 2.13.2, Part-DB allows

来源摘录 · NVD

漏洞预警2026-10-23 发布INFO

Part-DB is an open source inventory management system for electronic components. Prior to version 2.13.2, Part-DB allows authenticated users to bypass the configured maximum att...

CVE-2026-86018

Part-DB is an open source inventory management system for electronic components. Prior to version 2.13.2, Part-DB allows

来源摘录 · NVD

漏洞预警2026-10-23 发布MEDIUM

Part-DB is an open source inventory management system for electronic components. Prior to version 2.12.3, Part-DB-server sanitizes SVG files based solely on the user-controlled ...

CVE-2026-59188

Part-DB is an open source inventory management system for electronic components. Prior to version 2.12.3, Part-DB-server

来源摘录 · NVD

漏洞预警2026-10-23 发布MEDIUM

OpenStack Ironic before 39.0.1 allows DELETE and GET via vendor_passthru, e.g., to delete accounts from the BMC's Redfish service.

CVE-2026-90458

OpenStack Ironic before 39.0.1 allows DELETE and GET via vendor_passthru, e.g., to delete accounts from the BMC's Redfis

来源摘录 · NVD

漏洞预警2026-10-23 发布MEDIUM

OpenStack Ironic before 39.0.1 sometimes allows a user to change the maintenance setting on a node via PATCH to /v1/nodes/{ident} - in other words, not using the specific mainte...

CVE-2026-89419

OpenStack Ironic before 39.0.1 sometimes allows a user to change the maintenance setting on a node via PATCH to /v1/node

来源摘录 · NVD