#CVE

共收录 67791 条相关情报。

← 返回所有主题

漏洞预警2026-10-27 发布HIGH

A buffer overflow when handling DEVICE_RESOLUTION in libXi before 1.8.4 could overflow a heap, triggered by a malicious X server.

CVE-2026-109089

A buffer overflow when handling DEVICE_RESOLUTION in libXi before 1.8.4 could overflow a heap, triggered by a malicious

来源摘录 · NVD

#cve #cwe-122

漏洞预警2026-10-27 发布MEDIUM

A malicious X server could send malformed RECORD EnableContext reolies that can cause a X client using the parse_reply_call_callback function in libXtst before 1.2.6 to enter a...

CVE-2026-109088

A malicious X server could send malformed RECORD EnableContext reolies that can cause a X client using the parse_reply_

来源摘录 · NVD

#cve #cwe-835

漏洞预警2026-10-27 发布INFO

A vulnerability allowing an unauthenticated attacker to bypass authorization on the CDP Coordinator Service.

CVE-2026-108142

A vulnerability allowing an unauthenticated attacker to bypass authorization on the CDP Coordinator Service.

来源摘录 · NVD

#cve #cwe-636

漏洞预警2026-10-27 发布INFO

A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to write attacker-controlled files to an ...

CVE-2026-108141

A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backe

来源摘录 · NVD

#cve #cwe-22

漏洞预警2026-10-27 发布INFO

A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to write attacker-controlled files to an ...

CVE-2026-108140

A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backe

来源摘录 · NVD

#cve #cwe-22

漏洞预警2026-10-27 发布INFO

Private keys for eight eMudhra intermediate CA certificates have been compromised https://emudhra.we-have-a-problem.com/ , which impacts certificate trust for outbound network ...

CVE-2026-108015

Private keys for eight eMudhra intermediate CA certificates have been compromised https://emudhra.we-have-a-problem.com

来源摘录 · NVD

#cve #cwe-327

漏洞预警2026-10-27 发布INFO

Private keys for eight eMudhra intermediate CA certificates have been compromised https://emudhra.we-have-a-problem.com/ , which impacts certificate trust for outbound network ...

CVE-2026-108014

Private keys for eight eMudhra intermediate CA certificates have been compromised https://emudhra.we-have-a-problem.com

来源摘录 · NVD

#cve #cwe-327

漏洞预警2026-10-27 发布INFO

A vulnerability allowing an attacker with valid Administrator credentials to bypass multi-factor authentication by disabling it globally before completing MFA verification.

CVE-2026-107671

A vulnerability allowing an attacker with valid Administrator credentials to bypass multi-factor authentication by disab

来源摘录 · NVD

#cve #cwe-288

漏洞预警2026-10-27 发布INFO

A vulnerability allowing an unauthenticated attacker to bypass REST API authentication with a forged federation token and receive responses from REST API endpoints that do not c...

CVE-2026-106078

A vulnerability allowing an unauthenticated attacker to bypass REST API authentication with a forged federation token an

来源摘录 · NVD

#cve #cwe-347

漏洞预警2026-10-27 发布INFO

A vulnerability allowing a user with the Veeam Backup for Microsoft 365 Administrator role to read arbitrary files on the backup server with LocalSystem privileges.

CVE-2026-106077

A vulnerability allowing a user with the Veeam Backup for Microsoft 365 Administrator role to read arbitrary files on th

来源摘录 · NVD

#cve #cwe-863

漏洞预警2026-10-27 发布INFO

A vulnerability allowing an authenticated organization-transfer peer to inject SQL into the configuration database of the source Veeam Backup for Microsoft 365 server, leading t...

CVE-2026-106076

A vulnerability allowing an authenticated organization-transfer peer to inject SQL into the configuration database of th

来源摘录 · NVD

#cve #cwe-89

漏洞预警2026-10-27 发布CRITICAL

Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary ...

CVE-2026-105781

Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL

来源摘录 · NVD

#cve #cwe-89

漏洞预警2026-10-27 发布CRITICAL

Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-priv...

CVE-2026-105780

Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code

来源摘录 · NVD

#cve #cwe-863

漏洞预警2026-10-27 发布CRITICAL

Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in a Security...

CVE-2026-105779

Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL

来源摘录 · NVD

#cve #cwe-89

漏洞预警2026-10-27 发布INFO

Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary ...

CVE-2026-105489

Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-10-27 发布INFO

A vulnerability in Veeam Agent for Linux allows for local privilege escalation. Only installations that are managed by a Veeam Backup & Replication instance are affected.

CVE-2026-105477

A vulnerability in Veeam Agent for Linux allows for local privilege escalation. Only installations that are managed by a

来源摘录 · NVD

#cve #cwe-426

漏洞预警2026-10-27 发布CRITICAL

Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary ...

CVE-2026-104354

Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL

来源摘录 · NVD

#cve #cwe-89

漏洞预警2026-10-27 发布CRITICAL

Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could result in arbi...

CVE-2026-104353

Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Co

来源摘录 · NVD

#cve #cwe-78

漏洞预警2026-10-27 发布CRITICAL

Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the conte...

CVE-2026-104351

Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability t

来源摘录 · NVD

#cve #cwe-94

漏洞预警2026-10-27 发布CRITICAL

Adobe Campaign Classic (ACC) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a...

CVE-2026-104350

Adobe Campaign Classic (ACC) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could expl

来源摘录 · NVD

#cve #cwe-79