#CVE

共收录 65074 条相关情报。

← 返回所有主题
漏洞预警2026-10-21 发布HIGH

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive inte...

CVE-2026-20236

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Sof

来源摘录 · NVD

漏洞预警2026-10-21 发布CRITICAL

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive inte...

CVE-2026-20043

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Sof

来源摘录 · NVD

漏洞预警2026-10-21 发布HIGH

A flaw has been found in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. This affects the function save_files of the file admin_class.php. E...

CVE-2026-114259

A flaw has been found in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. This affec

来源摘录 · NVD

漏洞预警2026-10-21 发布HIGH

D365 F&O MCP Server is a Model Context Protocol server for querying Dynamics 365 Finance & Operations X++ code and metadata. Prior to version 1.11.0, the officially documented A...

CVE-2026-114123

D365 F&O MCP Server is a Model Context Protocol server for querying Dynamics 365 Finance & Operations X++ code and metad

来源摘录 · NVD

漏洞预警2026-10-21 发布MEDIUM

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.3, 43.7.0, 44.3.0, and 45.0.0-alpha.5, requests t...

CVE-2026-114121

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to version

来源摘录 · NVD

漏洞预警2026-10-21 发布MEDIUM

Slack Morphism is a client library for Slack Web/Events API/Socket Mode and Block Kit. Versions 1.0.0 through 2.27.0 expose the correct Slack request HMAC when signature verific...

CVE-2026-113799

Slack Morphism is a client library for Slack Web/Events API/Socket Mode and Block Kit. Versions 1.0.0 through 2.27.0 exp

来源摘录 · NVD

漏洞预警2026-10-21 发布LOW

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.1, 43.5.1, 44.1.1, and 45.0.0-alpha.4, chrome.tab...

CVE-2026-113797

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to version

来源摘录 · NVD

漏洞预警2026-10-21 发布HIGH

Incorrect authorization in the COM administration API of Progressive Robot hMailServer 6.3.4 through 6.3.6 allows an account assigned the serveradmin role with a list of domains...

CVE-2026-114490

Incorrect authorization in the COM administration API of Progressive Robot hMailServer 6.3.4 through 6.3.6 allows an acc

来源摘录 · NVD

漏洞预警2026-10-21 发布HIGH

Missing authorization in the REST and COM administration APIs of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote authenticated user whose credential is confine...

CVE-2026-114489

Missing authorization in the REST and COM administration APIs of Progressive Robot hMailServer 6.0.0 through 6.3.6 allow

来源摘录 · NVD

漏洞预警2026-10-21 发布MEDIUM

Insufficient preservation of the original sender in the forwarding of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthenticated attacker to have mail the...

CVE-2026-114478

Insufficient preservation of the original sender in the forwarding of Progressive Robot hMailServer 6.0.0 through 6.3.6

来源摘录 · NVD

漏洞预警2026-10-21 发布MEDIUM

Missing authorization in the REST metrics route of Progressive Robot hMailServer 6.2.25 through 6.3.6 allows a remote authenticated user whose credential is confined to named do...

CVE-2026-114477

Missing authorization in the REST metrics route of Progressive Robot hMailServer 6.2.25 through 6.3.6 allows a remote au

来源摘录 · NVD

漏洞预警2026-10-21 发布HIGH

Incorrect authorization in the REST administration API of Progressive Robot hMailServer 6.3.4 through 6.3.6 allows a remote authenticated user whose credential holds the manage_...

CVE-2026-114476

Incorrect authorization in the REST administration API of Progressive Robot hMailServer 6.3.4 through 6.3.6 allows a rem

来源摘录 · NVD

漏洞预警2026-10-21 发布MEDIUM

Missing authorization in the REST role-management routes of Progressive Robot hMailServer 6.3.4 through 6.3.6 allows a remote authenticated user whose credential is confined to ...

CVE-2026-114475

Missing authorization in the REST role-management routes of Progressive Robot hMailServer 6.3.4 through 6.3.6 allows a r

来源摘录 · NVD

漏洞预警2026-10-21 发布MEDIUM

Use of a less trusted source for the envelope sender in the external-account download of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthenticated attack...

CVE-2026-114474

Use of a less trusted source for the envelope sender in the external-account download of Progressive Robot hMailServer 6

来源摘录 · NVD

漏洞预警2026-10-21 发布MEDIUM

Incorrect authorization in the Sender Rewriting Scheme (SRS) of Progressive Robot hMailServer 6.2.1 through 6.3.6 allows a remote attacker to relay mail through the server to ou...

CVE-2026-114473

Incorrect authorization in the Sender Rewriting Scheme (SRS) of Progressive Robot hMailServer 6.2.1 through 6.3.6 allows

来源摘录 · NVD

漏洞预警2026-10-21 发布LOW

Insufficient resource pool in the ACME HTTP-01 challenge responder of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthenticated attacker to cause a certi...

CVE-2026-114472

Insufficient resource pool in the ACME HTTP-01 challenge responder of Progressive Robot hMailServer 6.0.0 through 6.3.6

来源摘录 · NVD

漏洞预警2026-10-21 发布MEDIUM

Insertion of sensitive information into a log file in the SMTP server of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a local user who can read the server's log, or ...

CVE-2026-114471

Insertion of sensitive information into a log file in the SMTP server of Progressive Robot hMailServer 6.0.0 through 6.3

来源摘录 · NVD

漏洞预警2026-10-21 发布MEDIUM

Cross-site request forgery in the REST API of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote attacker to make an authenticated user's browser perform a state-...

CVE-2026-114470

Cross-site request forgery in the REST API of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote attacker

来源摘录 · NVD

漏洞预警2026-10-21 发布HIGH

The webhook platform gateway in Nous Research Hermes Agent versions builds the session chat_id as webhook:{route_name}:{delivery_id} and re-derives the authorizing route by spli...

CVE-2026-114463

The webhook platform gateway in Nous Research Hermes Agent versions builds the session chat_id as webhook:{route_name}:{

来源摘录 · NVD

漏洞预警2026-10-21 发布INFO

Improper link resolution before file access ('link following') vulnerability in Velneo vServer. This issue affects vServer: from 32.3 before 36.6 and from 37.1 before 37.2.

CVE-2026-114462

Improper link resolution before file access ('link following') vulnerability in Velneo vServer. This issue affects vServ

来源摘录 · NVD