#CVE

共收录 65074 条相关情报。

← 返回所有主题
漏洞预警2026-10-21 发布INFO

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software...

CVE-2026-76299

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive int

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-21 发布HIGH

In Splunk Enterprise versions below 10.4.4 and 10.2.8, a user who does not hold the "admin" or "power" Splunk roles could derive the PostgreSQL sidecar database superuser passwo...

CVE-2026-76298

In Splunk Enterprise versions below 10.4.4 and 10.2.8, a user who does not hold the "admin" or "power" Splunk roles coul

来源摘录 · NVD

漏洞预警2026-10-21 发布MEDIUM

In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, an unauthenticated user could trick a user that holds a role with the edit_federated_providers capabilit...

CVE-2026-76297

In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, an unauthenticated user could trick a user that

来源摘录 · NVD

漏洞预警2026-10-21 发布MEDIUM

In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user who does not hold the "admin" or "power" Splunk roles could create, move, edit, or delete sourcet...

CVE-2026-76296

In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user who does not hold the "admin" or "power"

来源摘录 · NVD

漏洞预警2026-10-21 发布MEDIUM

In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, and Splunk Secure Gateway versions below 3.10.12, 3.9.26, and 3.8.73, a user who does not hold the "admi...

CVE-2026-76295

In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, and Splunk Secure Gateway versions below 3.10.1

来源摘录 · NVD

漏洞预警2026-10-21 发布MEDIUM

In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user who does not hold the "admin" or "power" Splunk roles could move field extractions or field trans...

CVE-2026-76294

In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user who does not hold the "admin" or "power"

来源摘录 · NVD

漏洞预警2026-10-21 发布HIGH

In Splunk Enterprise versions below 10.4.3, 10.2.8, 10.0.11, and 9.4.16, a user that holds a role with the edit_manager_xml capability could execute arbitrary operating-system c...

CVE-2026-76293

In Splunk Enterprise versions below 10.4.3, 10.2.8, 10.0.11, and 9.4.16, a user that holds a role with the edit_manager_

来源摘录 · NVD

漏洞预警2026-10-21 发布MEDIUM

In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, and Splunk Secure Gateway versions below 3.10.12, 3.9.26, and 3.8.73, a low-privileged user that does no...

CVE-2026-76292

In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, and Splunk Secure Gateway versions below 3.10.1

来源摘录 · NVD

漏洞预警2026-10-21 发布HIGH

In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user that holds a role with the schedule_search capability could bypass the expected safeguards in the...

CVE-2026-76291

In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user that holds a role with the schedule_sear

来源摘录 · NVD

漏洞预警2026-10-21 发布HIGH

In Splunk Enterprise versions below 10.4.4, 10.2.8, and 10.0.11, an unauthenticated user could send repeated requests to the Edge Processor package download endpoint in the Splu...

CVE-2026-76290

In Splunk Enterprise versions below 10.4.4, 10.2.8, and 10.0.11, an unauthenticated user could send repeated requests to

来源摘录 · NVD

漏洞预警2026-10-21 发布MEDIUM

In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user who does not hold the "admin" or "power" Splunk roles could make the Splunk Enterprise instance u...

CVE-2026-76289

In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user who does not hold the "admin" or "power"

来源摘录 · NVD

漏洞预警2026-10-21 发布HIGH

In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, an unauthenticated user could send a single crafted request to the Splunk Web JavaScript logger endpoint...

CVE-2026-76288

In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, an unauthenticated user could send a single cra

来源摘录 · NVD

漏洞预警2026-10-21 发布MEDIUM

In Splunk Enterprise versions below 10.4.4, a user that holds a role with the preview_data_management_pipeline capability or edit_data_management_pipeline_job capability could r...

CVE-2026-76287

In Splunk Enterprise versions below 10.4.4, a user that holds a role with the preview_data_management_pipeline capabilit

来源摘录 · NVD

漏洞预警2026-10-21 发布INFO

A weakness has been identified in oretnom23 php-travel-agency-system. This issue affects some unknown processing of the file admin/update.php. This manipulation of the argument ...

CVE-2026-114441

A weakness has been identified in oretnom23 php-travel-agency-system. This issue affects some unknown processing of the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-21 发布HIGH

A vulnerability was identified in oretnom23 php-travel-agency-system. This affects an unknown part of the file admin/delete.php. The manipulation of the argument costomer_id/tic...

CVE-2026-114440

A vulnerability was identified in oretnom23 php-travel-agency-system. This affects an unknown part of the file admin/del

来源摘录 · NVD

漏洞预警2026-10-21 发布INFO

A vulnerability was determined in oretnom23 php-travel-agency-system. Affected by this issue is some unknown functionality of the file admin/session.php of the component Session...

CVE-2026-114439

A vulnerability was determined in oretnom23 php-travel-agency-system. Affected by this issue is some unknown functionali

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-21 发布INFO

Missing Authentication for Critical Function (CWE-306) and Insufficiently Protected Credentials (CWE-522) in the control plane enrollment status handler (HandleEnrollStatus at G...

CVE-2026-103090

Missing Authentication for Critical Function (CWE-306) and Insufficiently Protected Credentials (CWE-522) in the control

来源摘录 · NVD

漏洞预警2026-10-21 发布INFO

A sensitive information disclosure vulnerability in the cloud-client daemon of Deco BE63 allows authenticated attackers to retrieve the plaintext TP-Link ID account password.  ...

CVE-2026-100420

A sensitive information disclosure vulnerability in the cloud-client daemon of Deco BE63 allows authenticated attackers

来源摘录 · NVD

漏洞预警2026-10-21 发布CRITICAL

Net::LibSSH versions before 0.004 for Perl authenticate to an unverified server because connect never checks the host key against known_hosts. connect reports success as soon a...

CVE-2026-94423

Net::LibSSH versions before 0.004 for Perl authenticate to an unverified server because connect never checks the host ke

来源摘录 · NVD

漏洞预警2026-10-21 发布CRITICAL

Rex versions through 1.16.1 for Perl accept an unknown SSH host key for remote rsync transfers because sync hardcodes StrictHostKeyChecking=no. Every remote branch of sync buil...

CVE-2026-94140

Rex versions through 1.16.1 for Perl accept an unknown SSH host key for remote rsync transfers because sync hardcodes St

来源摘录 · NVD