#CVE

共收录 69132 条相关情报。

漏洞预警2026-10-27 发布HIGH

DroidMind through 0.4.0 contains a command injection vulnerability that allows MCP clients to bypass the shell command allowlist by using $(...) or backtick substitution. Attack...

CVE-2026-117559

DroidMind through 0.4.0 contains a command injection vulnerability that allows MCP clients to bypass the shell command a

来源摘录 · NVD

#cve #cwe-78

漏洞预警2026-10-27 发布HIGH

The ai-sdlc plugin MCP server through 0.31.2 contains an OS command injection vulnerability that allows attackers to execute commands by supplying shell metacharacters in the re...

CVE-2026-117558

The ai-sdlc plugin MCP server through 0.31.2 contains an OS command injection vulnerability that allows attackers to exe

来源摘录 · NVD

#cve #cwe-78

漏洞预警2026-10-27 发布MEDIUM

SDL_image through 3.4.8 and through 2.8.12 contains a stack out-of-bounds read vulnerability in IMG_LoadLBM_IO() in src/IMG_lbm.c that skips bitplane count validation when HAM m...

CVE-2026-117557

SDL_image through 3.4.8 and through 2.8.12 contains a stack out-of-bounds read vulnerability in IMG_LoadLBM_IO() in src/

来源摘录 · NVD

#cve #cwe-125

漏洞预警2026-10-27 发布MEDIUM

zchunk before 1.5.5 contains a heap out-of-bounds read vulnerability in read_preface() in src/lib/header.c that passes the total header length instead of remaining bytes to comp...

CVE-2026-117556

zchunk before 1.5.5 contains a heap out-of-bounds read vulnerability in read_preface() in src/lib/header.c that passes t

来源摘录 · NVD

#cve #cwe-125

漏洞预警2026-10-27 发布MEDIUM

CImg through 4.0.6 contains a heap out-of-bounds read vulnerability in the _load_bmp() function of CImg.h caused by an integer overflow in the row byte count. Attackers can supp...

CVE-2026-117555

CImg through 4.0.6 contains a heap out-of-bounds read vulnerability in the _load_bmp() function of CImg.h caused by an i

来源摘录 · NVD

#cve #cwe-190

漏洞预警2026-10-27 发布MEDIUM

Admidio before 5.0.17 contains an improper access control vulnerability that allows authenticated members to register event guests by submitting the additional_guests field when...

CVE-2026-117554

Admidio before 5.0.17 contains an improper access control vulnerability that allows authenticated members to register ev

来源摘录 · NVD

#cve #cwe-602

漏洞预警2026-10-27 发布HIGH

Umbraco CMS before 17.7.2 and 18.2.2 contains an authentication bypass vulnerability that allows unauthenticated attackers to register attacker-controlled OAuth redirect URIs by...

CVE-2026-117553

Umbraco CMS before 17.7.2 and 18.2.2 contains an authentication bypass vulnerability that allows unauthenticated attacke

来源摘录 · NVD

#cve #cwe-601

漏洞预警2026-10-27 发布MEDIUM

A vulnerability was identified in a2aproject a2a-go up to 2.4.0. The affected element is the function Cancel of the file internal/taskexec/distributed_manager.go of the componen...

CVE-2026-117504

A vulnerability was identified in a2aproject a2a-go up to 2.4.0. The affected element is the function Cancel of the file

来源摘录 · NVD

#cve #cwe-404

漏洞预警2026-10-27 发布MEDIUM

A vulnerability was determined in a2aproject a2a-go up to 2.4.0. Impacted is an unknown function of the file a2asrv/rest.go of the component REST SSE handler. This manipulation ...

CVE-2026-117503

A vulnerability was determined in a2aproject a2a-go up to 2.4.0. Impacted is an unknown function of the file a2asrv/rest

来源摘录 · NVD

#cve #cwe-400 #cwe-404

漏洞预警2026-10-27 发布MEDIUM

A misconfiguration issue in the affected service in Control-M/Enterprise Manager and Control-M/Server may allow unauthenticated remote users to access certain service functional...

CVE-2026-10537

A misconfiguration issue in the affected service in Control-M/Enterprise Manager and Control-M/Server may allow unauthen

来源摘录 · NVD

#cve #cwe-305

漏洞预警2026-10-27 发布MEDIUM

An issue in Shirt Pocket's SuperDuper! 4.0.9 and earlier allow a local attacker to obtain sensitive information

CVE-2026-107067

An issue in Shirt Pocket's SuperDuper! 4.0.9 and earlier allow a local attacker to obtain sensitive information

来源摘录 · NVD

#cve #cwe-200

漏洞预警2026-10-27 发布HIGH

Authentication bypass by spoofing vulnerability in Keepnet Labs Ltd. Agentic AI / Agentic Ally allows Authentication Bypass. This issue affects Agentic AI / Agentic Ally: befor...

CVE-2026-92546

Authentication bypass by spoofing vulnerability in Keepnet Labs Ltd. Agentic AI / Agentic Ally allows Authentication Byp

来源摘录 · NVD

#cve #cwe-290

漏洞预警2026-10-27 发布HIGH

NVIDIA NeMo Agent Toolkit contains vulnerability where an attacker could cause a SQL injection issue. A successful exploit of this vulnerability might lead to data tampering, de...

CVE-2026-65151

NVIDIA NeMo Agent Toolkit contains vulnerability where an attacker could cause a SQL injection issue. A successful explo

来源摘录 · NVD

#cve #cwe-89

漏洞预警2026-10-27 发布CRITICAL

NVIDIA NeMo Agent Toolkit contains a vulnerability where a attacker could cause a missing authentication issue. This vulnerability might lead to code execution, escalation of pr...

CVE-2026-65145

NVIDIA NeMo Agent Toolkit contains a vulnerability where a attacker could cause a missing authentication issue. This vul

来源摘录 · NVD

#cve #cwe-306

漏洞预警2026-10-27 发布HIGH

NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a server-side request forgery. A successful exploit of this vulnerability might lead to information di...

CVE-2026-65120

NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a server-side request forgery. A successful e

来源摘录 · NVD

#cve #cwe-918

漏洞预警2026-10-27 发布HIGH

NVIDIA TensorRT-LLM for any platform contains a vulnerability in KvCacheAwareRouter tokenizer loading, where an attacker could cause inclusion of functionality from an untrusted...

CVE-2026-65119

NVIDIA TensorRT-LLM for any platform contains a vulnerability in KvCacheAwareRouter tokenizer loading, where an attacker

来源摘录 · NVD

#cve #cwe-829

漏洞预警2026-10-27 发布HIGH

NVIDIA PhysX for all platforms contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execu...

CVE-2026-47486

NVIDIA PhysX for all platforms contains a vulnerability where an attacker could cause an out-of-bounds write. A successf

来源摘录 · NVD

#cve #cwe-787

漏洞预警2026-10-27 发布HIGH

NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a server-side request forgery. A successful exploit of this vulnerability might lead to information di...

CVE-2026-24269

NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a server-side request forgery. A successful e

来源摘录 · NVD

#cve #cwe-918

漏洞预警2026-10-27 发布MEDIUM

Improper restriction of excessive authentication attempts vulnerability in İdvlabs Software and Consulting Services Inc. Ontime allows Brute Force. This issue affects Ontime: t...

CVE-2026-15586

Improper restriction of excessive authentication attempts vulnerability in İdvlabs Software and Consulting Services Inc.

来源摘录 · NVD

#cve #cwe-307

漏洞预警2026-10-27 发布HIGH

Improper neutralization of input during web page generation ('Cross-site Scripting') in the notifications feature in Devolutions PowerShell Universal 2026.3.0 and earlier allows...

CVE-2026-116627

Improper neutralization of input during web page generation ('Cross-site Scripting') in the notifications feature in Dev

来源摘录 · NVD

#cve #cwe-79