#CVE

共收录 65074 条相关情报。

← 返回所有主题
漏洞预警2026-10-21 发布INFO

The device multiplexer pseudo-driver in drivers/misc/devmux/devmux.c exposes two system calls, devmux_select_get() and devmux_select_set(). When CONFIG_USERSPACE is enabled, the...

CVE-2026-19947

The device multiplexer pseudo-driver in drivers/misc/devmux/devmux.c exposes two system calls, devmux_select_get() and d

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-21 发布HIGH

The user-mode verifier for the peci_transfer() system call, z_vrfy_peci_transfer() in drivers/peci/peci_handlers.c, checked only the device object permission and copied the call...

CVE-2026-19676

The user-mode verifier for the peci_transfer() system call, z_vrfy_peci_transfer() in drivers/peci/peci_handlers.c, chec

来源摘录 · NVD

漏洞预警2026-10-21 发布LOW

The Bluetooth Classic A2DP host stores a codec Information Element (IE) in struct bt_a2dp_codec_ie, a one-byte len field plus a fixed 8-byte codec_ie[] array. When an AVDTP peer...

CVE-2026-18748

The Bluetooth Classic A2DP host stores a codec Information Element (IE) in struct bt_a2dp_codec_ie, a one-byte len field

来源摘录 · NVD

漏洞预警2026-10-21 发布INFO

A vulnerability was detected in HarnessRouter up to 0.31.10. This affects an unknown function of the file gateway/app.py of the component Identity Mode. Performing a manipulatio...

CVE-2026-114361

A vulnerability was detected in HarnessRouter up to 0.31.10. This affects an unknown function of the file gateway/app.py

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-21 发布CRITICAL

A flaw has been found in Tenda BE3L Pro 16.03.60.62. Affected by this vulnerability is the function formWifiBasicSet of the file /goform/WifiBasicSet. This manipulation of the a...

CVE-2026-114268

A flaw has been found in Tenda BE3L Pro 16.03.60.62. Affected by this vulnerability is the function formWifiBasicSet of

来源摘录 · NVD

漏洞预警2026-10-21 发布INFO

A vulnerability was detected in SourceCodester Food Order Management System 1.0. Affected is an unknown function of the component Admin Endpoint. The manipulation results in mis...

CVE-2026-114267

A vulnerability was detected in SourceCodester Food Order Management System 1.0. Affected is an unknown function of the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-21 发布INFO

A security vulnerability has been detected in ProjectWorlds Advanced Library Management System 1.0. This impacts the function mysqli_query of the file profile.php. The manipulat...

CVE-2026-114266

A security vulnerability has been detected in ProjectWorlds Advanced Library Management System 1.0. This impacts the fun

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-21 发布HIGH

MongoDB Compass improperly escapes certain BSON values when converting a stored view’s aggregation pipeline into editable source. When a user connects to a MongoDB deployment co...

CVE-2026-113870

MongoDB Compass improperly escapes certain BSON values when converting a stored view’s aggregation pipeline into editabl

来源摘录 · NVD

漏洞预警2026-10-21 发布INFO

Local privilege escalation in Checkmk 2.5.0p14 allows a local user with write access to the Oracle client library directory of an Oracle home listed in the 'oratab' file or to t...

CVE-2026-113461

Local privilege escalation in Checkmk 2.5.0p14 allows a local user with write access to the Oracle client library direct

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-21 发布INFO

Apache Traffic Server forwarded a malformed 302 response that should have been rejected as a parse error, because the Transfer-Encoding: chunked carve-out bypassed the rejection...

CVE-2026-111816

Apache Traffic Server forwarded a malformed 302 response that should have been rejected as a parse error, because the Tr

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-21 发布INFO

Apache Traffic Server's experimental magick plugin lets an unauthenticated client control ImageMagick convert arguments in its default (unsigned) configuration. This issue af...

CVE-2026-111813

Apache Traffic Server's experimental magick plugin lets an unauthenticated client control ImageMagick convert arguments

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-21 发布INFO

Apache Traffic Server's experimental wasm plugin has a use-after-free in its transaction-close handler and forwards unvalidated guest-supplied metric IDs to the internal stats A...

CVE-2026-111804

Apache Traffic Server's experimental wasm plugin has a use-after-free in its transaction-close handler and forwards unva

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-21 发布INFO

Cross-Site Request Forgery (CSRF) vulnerability in Tailored Media Tailored Tools tailored-tools allows Cross Site Request Forgery.This issue affects Tailored Tools: from n/a thr...

CVE-2026-111401

Cross-Site Request Forgery (CSRF) vulnerability in Tailored Media Tailored Tools tailored-tools allows Cross Site Reques

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-21 发布INFO

VaadinService.requestEnd() in Vaadin Framework 8 locks the session and then reads the v-uiId request parameter outside the block that releases the lock. A request carrying a non...

CVE-2026-110803

VaadinService.requestEnd() in Vaadin Framework 8 locks the session and then reads the v-uiId request parameter outside t

来源摘录 · NVD

漏洞预警2026-10-21 发布INFO

Vaadin Charts renders charts with the Highcharts library and pins an exact version of it, 9.2.2 in Vaadin 22 to 24 and 12.2.0 in Vaadin 25, so an application cannot remove these...

CVE-2026-107588

Vaadin Charts renders charts with the Highcharts library and pins an exact version of it, 9.2.2 in Vaadin 22 to 24 and 1

来源摘录 · NVD

漏洞预警2026-10-21 发布INFO

The Pulsar Packages Management Service can be configured to store packages on the local filesystem of the broker by using the filesystem storage provider. Package names consist ...

CVE-2026-105945

The Pulsar Packages Management Service can be configured to store packages on the local filesystem of the broker by usin

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-21 发布INFO

Apache Pulsar Manager is a web console for administering Apache Pulsar clusters. It has its own user accounts and login, and it can be configured with an HTTP authentication cre...

CVE-2026-105944

Apache Pulsar Manager is a web console for administering Apache Pulsar clusters. It has its own user accounts and login,

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-21 发布INFO

When a configured proxy role sends a request to the broker on behalf of another user (the original principal), the broker is designed to authorize both the proxy role and the or...

CVE-2026-105942

When a configured proxy role sends a request to the broker on behalf of another user (the original principal), the broke

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-21 发布INFO

Apache Pulsar namespaces can restrict which roles may use a subscription, either with the Prefix subscription authentication mode, which requires a subscription name to start wi...

CVE-2026-105938

Apache Pulsar namespaces can restrict which roles may use a subscription, either with the Prefix subscription authentica

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-21 发布INFO

Apache Pulsar shadow topics (PIP-180) are topics that read the stored messages of a source topic from that topic's managed ledger. The source topic is selected by setting the re...

CVE-2026-105937

Apache Pulsar shadow topics (PIP-180) are topics that read the stored messages of a source topic from that topic's manag

历史摘要 · 未重新核验 · NVD