#CVE

共收录 67791 条相关情报。

← 返回所有主题
漏洞预警2026-10-27 发布CRITICAL

Aidot products Linkind Matter Smart Plug 1.01.32, OREiN Matter Smart Light Bulb 3.15.21, and Linkind Wi-Fi Smart Light Bulb 3.30.17 are vulnerable to Remote Code Execution (RCE)...

CVE-2026-78845

Aidot products Linkind Matter Smart Plug 1.01.32, OREiN Matter Smart Light Bulb 3.15.21, and Linkind Wi-Fi Smart Light B

来源摘录 · NVD

漏洞预警2026-10-27 发布HIGH

Grav from 1.7.53.3 before 1.7.53.6 contains an authorization bypass in Debugger::isDebuggerRequestAuthorized() that allows unauthenticated visitors to read /__clockwork/ profile...

CVE-2026-117604

Grav from 1.7.53.3 before 1.7.53.6 contains an authorization bypass in Debugger::isDebuggerRequestAuthorized() that allo

来源摘录 · NVD

漏洞预警2026-10-27 发布MEDIUM

A security vulnerability has been detected in a2aproject a2a-java up to 1.2.0.Final. This impacts the function TaskManager.saveTaskEvent. The manipulation leads to race conditio...

CVE-2026-117507

A security vulnerability has been detected in a2aproject a2a-java up to 1.2.0.Final. This impacts the function TaskManag

来源摘录 · NVD

漏洞预警2026-10-27 发布MEDIUM

A weakness has been identified in a2aproject a2a-java up to 1.2.0.Final. This affects the function InMemoryPushNotificationConfigStore.setInfo of the file extras/push-notificati...

CVE-2026-117506

A weakness has been identified in a2aproject a2a-java up to 1.2.0.Final. This affects the function InMemoryPushNotificat

来源摘录 · NVD

漏洞预警2026-10-27 发布MEDIUM

A security flaw has been discovered in a2aproject a2a-java up to 1.2.0.Final. The impacted element is the function queue.offer of the component ChildQueue. Performing a manipula...

CVE-2026-117505

A security flaw has been discovered in a2aproject a2a-java up to 1.2.0.Final. The impacted element is the function queue

来源摘录 · NVD

漏洞预警2026-10-27 发布INFO

KGS Software tia Viewer is vulnerable to Stored XSS via the annotation API. Due to the lack of input validation, an authenticated attacker can inject arbitrary JavaScript payloa...

CVE-2026-105987

KGS Software tia Viewer is vulnerable to Stored XSS via the annotation API. Due to the lack of input validation, an auth

来源摘录 · NVD

漏洞预警2026-10-27 发布HIGH

PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 release versions 8.3.1.0 thr...

CVE-2026-94347

PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.

来源摘录 · NVD

漏洞预警2026-10-27 发布HIGH

PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 release versions 8.3.1.0 thr...

CVE-2026-94346

PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.

来源摘录 · NVD

漏洞预警2026-10-27 发布LOW

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1....

CVE-2026-90727

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7

来源摘录 · NVD

漏洞预警2026-10-27 发布MEDIUM

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1....

CVE-2026-90726

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7

来源摘录 · NVD

漏洞预警2026-10-27 发布MEDIUM

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1....

CVE-2026-90725

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7

来源摘录 · NVD

漏洞预警2026-10-27 发布MEDIUM

PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 release versions 8.3.1.0 through 8.3.1.30, L...

CVE-2026-68866

PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1

来源摘录 · NVD

漏洞预警2026-10-27 发布MEDIUM

Authorization bypass through User-Controlled key vulnerability in Netiket Information Technologies EdoWEB allows Accessing Functionality Not Properly Constrained by ACLs. This ...

CVE-2026-16307

Authorization bypass through User-Controlled key vulnerability in Netiket Information Technologies EdoWEB allows Accessi

来源摘录 · NVD

漏洞预警2026-10-27 发布INFO

In affected versions of Octopus Server, a user with permission to upload a malicious nuget package is able to deploy a script step so the script executes outside of the parent d...

CVE-2026-12887

In affected versions of Octopus Server, a user with permission to upload a malicious nuget package is able to deploy a s

来源摘录 · NVD

漏洞预警2026-10-27 发布CRITICAL

Frame poisoning in the Layout component. This vulnerability was fixed in Firefox ESR 115.44.

CVE-2026-118027

Frame poisoning in the Layout component. This vulnerability was fixed in Firefox ESR 115.44.

来源摘录 · NVD

漏洞预警2026-10-27 发布HIGH

Invalid pointer in the JavaScript: GC component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.

CVE-2026-118026

Invalid pointer in the JavaScript: GC component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.

来源摘录 · NVD

漏洞预警2026-10-27 发布HIGH

Other issue in the SVG component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.

CVE-2026-118025

Other issue in the SVG component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.

来源摘录 · NVD

漏洞预警2026-10-27 发布HIGH

Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 159, Thunderbird 159, Firefox ESR 153.7, and Thunderbird 153.7.

CVE-2026-118024

Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 159, Thunderbird 159, Firefox ES

来源摘录 · NVD

漏洞预警2026-10-27 发布HIGH

Sandbox escape due to use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.

CVE-2026-118023

Sandbox escape due to use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159 a

来源摘录 · NVD

漏洞预警2026-10-27 发布HIGH

Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.

CVE-2026-118022

Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 15

来源摘录 · NVD