#CVE

共收录 65074 条相关情报。

漏洞预警2026-10-22 发布INFO

Traefik v3.7.13 before v3.7.14 contains an access-control bypass in the Kubernetes Ingress NGINX provider, where the HTTP router generated for ssl-passthrough Ingresses on non-T...

CVE-2026-114636

Traefik v3.7.13 before v3.7.14 contains an access-control bypass in the Kubernetes Ingress NGINX provider, where the HTT

历史摘要 · 未重新核验 · NVD

#cve #cwe-306

漏洞预警2026-10-22 发布HIGH

Traefik before v2.11.58 and v3.7.14 contains an authentication bypass vulnerability in its SNI check, which is skipped when request TLS state is nil. Unauthenticated clients can...

CVE-2026-114635

Traefik before v2.11.58 and v3.7.14 contains an authentication bypass vulnerability in its SNI check, which is skipped w

来源摘录 · NVD

#cve #cwe-288

漏洞预警2026-10-22 发布INFO

WWBN AVideo before 29.4.0 contains a blind server-side request forgery vulnerability in getHeaderContentTypeFromURL() because get_headers() follows redirects without re-validati...

CVE-2026-114634

WWBN AVideo before 29.4.0 contains a blind server-side request forgery vulnerability in getHeaderContentTypeFromURL() be

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-10-22 发布MEDIUM

WWBN AVideo before 29.4.0 contains an incorrect authorization vulnerability that allows delegated Users Admin accounts to delete or modify administrator accounts. Attackers can ...

CVE-2026-114633

WWBN AVideo before 29.4.0 contains an incorrect authorization vulnerability that allows delegated Users Admin accounts t

来源摘录 · NVD

#cve #cwe-863

漏洞预警2026-10-22 发布INFO

A vulnerability was found in oretnom23 php-travel-agency-system. This vulnerability affects unknown code of the file admin/insert.php of the component Insertion Handler. The man...

CVE-2026-114577

A vulnerability was found in oretnom23 php-travel-agency-system. This vulnerability affects unknown code of the file adm

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-10-22 发布INFO

A vulnerability has been found in Linksys RE6250 1.0.04.001. This affects the function strcmp of the component Web Management Interface. The manipulation of the argument session...

CVE-2026-114576

A vulnerability has been found in Linksys RE6250 1.0.04.001. This affects the function strcmp of the component Web Manag

历史摘要 · 未重新核验 · NVD

#cve #cwe-310 #cwe-330

漏洞预警2026-10-22 发布HIGH

GitLab has remediated an issue in GitLab EE affecting all versions from 12.0 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when the instance-wide SAML or LDAP ...

CVE-2026-16255

GitLab has remediated an issue in GitLab EE affecting all versions from 12.0 before 19.3.6, 19.4 before 19.4.3, and 19.5

来源摘录 · NVD

#cve #cwe-863

漏洞预警2026-10-22 发布HIGH

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when OmniAuth SAML and LDAP auto-...

CVE-2026-15723

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1 before 19.3.6, 19.4 before 19.4.3, and 1

来源摘录 · NVD

#cve #cwe-90

漏洞预警2026-10-22 发布LOW

GitLab has remediated an issue in GitLab EE affecting all versions from 17.4 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that under certain conditions could have a...

CVE-2026-14288

GitLab has remediated an issue in GitLab EE affecting all versions from 17.4 before 19.3.6, 19.4 before 19.4.3, and 19.5

来源摘录 · NVD

#cve #cwe-706

漏洞预警2026-10-22 发布MEDIUM

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.10 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, could have allowed an authentica...

CVE-2026-13319

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.10 before 19.3.6, 19.4 before 19.4.3, and

来源摘录 · NVD

#cve #cwe-639

漏洞预警2026-10-22 发布MEDIUM

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, could h...

CVE-2026-12664

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 19.3.6, 19.4 before 19.4.3, and 1

来源摘录 · NVD

#cve #cwe-863

漏洞预警2026-10-22 发布INFO

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a path traversal vulnerability in the squirrelmail_usercopy plugin. With the file based backend, the source...

CVE-2026-114714

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a path traversal vulnerability in the squirrelmail

历史摘要 · 未重新核验 · NVD

#cve #cwe-23

漏洞预警2026-10-22 发布CRITICAL

A flaw has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this issue is the function UploadCustomModule of the file lib/cste_modules/product.so. Executing a m...

CVE-2026-114575

A flaw has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this issue is the function UploadCustomModu

来源摘录 · NVD

#cve #cwe-74 #cwe-77

漏洞预警2026-10-22 发布INFO

A security vulnerability has been detected in massCodeIO massCode 5.10. Affected is an unknown function of the file src/main/api/index.ts of the component Local HTTP Service. Su...

CVE-2026-114574

A security vulnerability has been detected in massCodeIO massCode 5.10. Affected is an unknown function of the file src/

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-284

漏洞预警2026-10-22 发布MEDIUM

GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that under certain conditions could have a...

CVE-2026-112378

GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 19.3.6, 19.4 before 19.4.3, and 19.5

来源摘录 · NVD

#cve #cwe-348

漏洞预警2026-10-22 发布LOW

GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, could have...

CVE-2026-112326

GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 19.3.6, 19.4 before 19.4.3, and 19.5

来源摘录 · NVD

#cve #cwe-460

漏洞预警2026-10-22 发布HIGH

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.3 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, an unau...

CVE-2026-112212

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.3 before 19.3.6, 19.4 before 19.4.3, and 1

来源摘录 · NVD

#cve #cwe-444

漏洞预警2026-10-22 发布CRITICAL

An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1 before 19.1.9, 19.2 before 19.2.9, 19.3 before 19.3.6, 19...

CVE-2026-110264

An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1

来源摘录 · NVD

#cve #cwe-190

漏洞预警2026-10-22 发布MEDIUM

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.6.5 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, an un...

CVE-2026-105777

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.6.5 before 19.3.6, 19.4 before 19.4.3, and

来源摘录 · NVD

#cve #cwe-201

漏洞预警2026-10-22 发布LOW

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.0 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when a merge request in a public ...

CVE-2026-105711

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.0 before 19.3.6, 19.4 before 19.4.3, and 1

来源摘录 · NVD

#cve #cwe-524