#CVE

共收录 67791 条相关情报。

漏洞预警2026-10-27 发布INFO

Asterisk is an open source private branch exchange and telephony toolkit. In affected deployments, an authenticated attacker may cause a `T.140 RED` out-of-bounds write during `...

CVE-2026-57189

Asterisk is an open source private branch exchange and telephony toolkit. In affected deployments, an authenticated atta

来源摘录 · NVD

#cve #cwe-787

漏洞预警2026-10-27 发布MEDIUM

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an ...

CVE-2026-57185

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-126 #cwe-170

漏洞预警2026-10-27 发布MEDIUM

Knative pkg provides common packages shared across Knative repositories. Prior to 0.0.0-20260531000007-52dbd5ece63f, the knative.dev/pkg/webhook admissionHandler in webhook/admi...

CVE-2026-54462

Knative pkg provides common packages shared across Knative repositories. Prior to 0.0.0-20260531000007-52dbd5ece63f, the

来源摘录 · NVD

#cve #cwe-770

漏洞预警2026-10-27 发布MEDIUM

Substance3D - Painter is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disc...

CVE-2026-48380

Substance3D - Painter is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memo

来源摘录 · NVD

#cve #cwe-125

漏洞预警2026-10-27 发布HIGH

Substance3D - Painter is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation o...

CVE-2026-48379

Substance3D - Painter is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code exe

来源摘录 · NVD

#cve #cwe-121

漏洞预警2026-10-27 发布CRITICAL

Adobe Connect is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the curre...

CVE-2026-48360

Adobe Connect is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could resul

来源摘录 · NVD

#cve #cwe-94

漏洞预警2026-10-27 发布HIGH

A vulnerability was identified in oretnom23 php-travel-agency-system. This issue affects some unknown processing of the file admin/customer_detail.php of the component Admin Rec...

CVE-2026-117514

A vulnerability was identified in oretnom23 php-travel-agency-system. This issue affects some unknown processing of the

来源摘录 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-10-27 发布HIGH

A vulnerability was determined in oretnom23 php-travel-agency-system. This vulnerability affects unknown code of the file admin/customer_search.php of the component Admin Search...

CVE-2026-117513

A vulnerability was determined in oretnom23 php-travel-agency-system. This vulnerability affects unknown code of the fil

来源摘录 · NVD

#cve #cwe-74 #cwe-89

漏洞预警2026-10-27 发布HIGH

A vulnerability was found in oretnom23 php-travel-agency-system. This affects an unknown part of the file admin/employee_insert.php. Performing a manipulation of the argument em...

CVE-2026-117512

A vulnerability was found in oretnom23 php-travel-agency-system. This affects an unknown part of the file admin/employee

来源摘录 · NVD

#cve #cwe-284 #cwe-434

漏洞预警2026-10-27 发布INFO

TinyMCE is an open source rich text editor. From 7.9.3 until 7.9.4 and from 8.5.1 until 8.9.3, the media plugin creates elements crafted through data-mce-object in the active do...

CVE-2026-116675

TinyMCE is an open source rich text editor. From 7.9.3 until 7.9.4 and from 8.5.1 until 8.9.3, the media plugin creates

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-27 发布MEDIUM

systeminformation is a System and OS information library for node.js. Prior to 5.33.13, networkStats(ifaces) in lib/network.js on FreeBSD, OpenBSD, and NetBSD stores per-interfa...

CVE-2026-116674

systeminformation is a System and OS information library for node.js. Prior to 5.33.13, networkStats(ifaces) in lib/netw

来源摘录 · NVD

#cve #cwe-1321

漏洞预警2026-10-27 发布LOW

systeminformation is a System and OS information library for node.js. Prior to 5.33.14, the Linux networkStats(iface) implementation uses the caller-supplied interface value in ...

CVE-2026-116673

systeminformation is a System and OS information library for node.js. Prior to 5.33.14, the Linux networkStats(iface) im

来源摘录 · NVD

#cve #cwe-22 #cwe-59

漏洞预警2026-10-27 发布HIGH

Authlib is a Python library which builds OAuth and OpenID Connect servers. From 0.15 until 1.9.1, the documented ClientConfigurationEndpoint.authenticate_client and ClientConfig...

CVE-2026-116672

Authlib is a Python library which builds OAuth and OpenID Connect servers. From 0.15 until 1.9.1, the documented ClientC

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-1188 #cwe-639 #pip #severity:high

漏洞预警2026-10-27 发布HIGH

In EPICS Base release 7.0.10 and prior, an insufficient validation of element or length values in a network message can cause the application to read beyond the bounds of an all...

CVE-2026-114598

In EPICS Base release 7.0.10 and prior, an insufficient validation of element or length values in a network message can

来源摘录 · NVD

#cve #cwe-843

漏洞预警2026-10-27 发布HIGH

In EPICS Base release 7.0.10 and prior, an insufficient validation of element or length values in a network message can cause the application to read beyond the bounds of an all...

CVE-2026-114597

In EPICS Base release 7.0.10 and prior, an insufficient validation of element or length values in a network message can

来源摘录 · NVD

#cve #cwe-130

漏洞预警2026-10-27 发布HIGH

In EPICS Base release 7.0.10 and prior, an improper validation of message length values during protocol parsing can trigger an integer overflow, resulting in an out-of-bounds me...

CVE-2026-114596

In EPICS Base release 7.0.10 and prior, an improper validation of message length values during protocol parsing can trig

来源摘录 · NVD

#cve #cwe-190

漏洞预警2026-10-27 发布CRITICAL

In EPICS Base release 7.0.10 and prior, an integer overflow in network request processing can cause memory to be allocated with an incorrect size. Subsequent handling of attacke...

CVE-2026-114595

In EPICS Base release 7.0.10 and prior, an integer overflow in network request processing can cause memory to be allocat

来源摘录 · NVD

#cve #cwe-190

漏洞预警2026-10-27 发布HIGH

A maliciously crafted dynamic library, when loaded from an arbitrary path through the TextCommands.LoadDll command exposed by the Autodesk Fusion API, can trigger an Exposed Dan...

CVE-2026-113775

A maliciously crafted dynamic library, when loaded from an arbitrary path through the TextCommands.LoadDll command expos

来源摘录 · NVD

#cve #cwe-749

漏洞预警2026-10-27 发布HIGH

GFI KerioConnect (Kerio Connect) before 10.0.8 Patch 2 contains a stored cross-site scripting vulnerability in the Webmail component that allows a remote attacker to run JavaScr...

CVE-2026-112353

GFI KerioConnect (Kerio Connect) before 10.0.8 Patch 2 contains a stored cross-site scripting vulnerability in the Webma

来源摘录 · NVD

#cve #cwe-79 #cwe-83

漏洞预警2026-10-27 发布HIGH

A malicious X server could cause a heap overflow by injecting a large DEVICE_ENABLE reply when processed by libXi before 1.8.4.

CVE-2026-109090

A malicious X server could cause a heap overflow by injecting a large DEVICE_ENABLE reply when processed by libXi before

来源摘录 · NVD

#cve #cwe-122