#CVE

共收录 69132 条相关情报。

← 返回所有主题
漏洞预警2026-10-27 发布INFO

Docker Desktop before version 4.97.0 could write third-party API keys and OAuth access tokens in cleartext to local application logs and diagnostics bundles due to insufficient ...

CVE-2026-114409

Docker Desktop before version 4.97.0 could write third-party API keys and OAuth access tokens in cleartext to local appl

来源摘录 · NVD

漏洞预警2026-10-27 发布INFO

An out-of-bounds write vulnerability in the Qt QTextCodec iconv-based encoding of the Qt 5 Compatibility APIs module (Qt Core in Qt 5 and earlier) impacts Qt. Under certain cond...

CVE-2026-107590

An out-of-bounds write vulnerability in the Qt QTextCodec iconv-based encoding of the Qt 5 Compatibility APIs module (Qt

来源摘录 · NVD

漏洞预警2026-10-27 发布HIGH

Observable response discrepancy vulnerability in Rolantis Information Technologies Tourism Industry and Trade Co. Ltd. Agentis allows Account Footprinting. This issue affects A...

CVE-2026-100164

Observable response discrepancy vulnerability in Rolantis Information Technologies Tourism Industry and Trade Co. Ltd. A

来源摘录 · NVD

漏洞预警2026-10-27 发布MEDIUM

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through LTS 2026, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8...

CVE-2026-90732

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through LTS 2026, LTS2024 release versions 7.13.1.0 thro

来源摘录 · NVD

漏洞预警2026-10-27 发布MEDIUM

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1....

CVE-2026-90731

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7

来源摘录 · NVD

漏洞预警2026-10-27 发布INFO

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1....

CVE-2026-90730

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布MEDIUM

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1....

CVE-2026-90729

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7

来源摘录 · NVD

漏洞预警2026-10-27 发布MEDIUM

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1....

CVE-2026-90728

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7

来源摘录 · NVD

漏洞预警2026-10-27 发布MEDIUM

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1....

CVE-2026-56084

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7

来源摘录 · NVD

漏洞预警2026-10-27 发布INFO

Unrestricted Upload of File with Dangerous Type vulnerability in the PuMuKIT application allows a unauthenticated user to upload any type of file to the server, and to any path ...

CVE-2026-4337

Unrestricted Upload of File with Dangerous Type vulnerability in the PuMuKIT application allows a unauthenticated user t

来源摘录 · NVD

漏洞预警2026-10-27 发布MEDIUM

Eaton easySoft improperly validates TLS certificates presented by easyE4 devices. A network-adjacent attacker could exploit this weakness to perform a man-in-the-middle attack a...

CVE-2026-41022

Eaton easySoft improperly validates TLS certificates presented by easyE4 devices. A network-adjacent attacker could expl

来源摘录 · NVD

漏洞预警2026-10-27 发布HIGH

Eaton easyE4 uses an insufficiently strong password policy. An attacker who obtains a password hash, including through CVE-2026-41020, could perform an offline password-guessing...

CVE-2026-41021

Eaton easyE4 uses an insufficiently strong password policy. An attacker who obtains a password hash, including through C

来源摘录 · NVD

漏洞预警2026-10-27 发布HIGH

Eaton easyE4 uses a static nonce during authentication, which could allow an unauthenticated attacker with access to captured authentication traffic to replay a valid authentica...

CVE-2026-41020

Eaton easyE4 uses a static nonce during authentication, which could allow an unauthenticated attacker with access to cap

来源摘录 · NVD

漏洞预警2026-10-27 发布INFO

An OS command vulnerability exists in CoreTec product that allows authenticated users with certain roles to execute arbitrary system commands with full control over the device. ...

CVE-2026-13162

An OS command vulnerability exists in CoreTec product that allows authenticated users with certain roles to execute arbi

来源摘录 · NVD

漏洞预警2026-10-27 发布LOW

@fastify/session is a session plugin for Fastify. In all releases before 11.1.6, with the default rolling session behavior, a request that restored a session before a logout cou...

CVE-2026-117499

@fastify/session is a session plugin for Fastify. In all releases before 11.1.6, with the default rolling session behavi

来源摘录 · NVD

漏洞预警2026-10-27 发布MEDIUM

In `github.com/eclipse-keypont/crypto11/v2` versions `>= 2.0.0-rc3, <= 2.0.0-rc8`, the ML-KEM key-pair lookup functions (`FindMLKEMKeyPair`, `FindMLKEMKeyPairs`, `FindMLKEMKeyPa...

CVE-2026-115408

In `github.com/eclipse-keypont/crypto11/v2` versions `>= 2.0.0-rc3, <= 2.0.0-rc8`, the ML-KEM key-pair lookup functions

来源摘录 · NVD

漏洞预警2026-10-27 发布INFO

In Eclipse ioFog Operator versions 3.8.0 before 3.9.2, TLS certificate verification is disabled when the operator contacts the Controller API and when it logs in to an external ...

CVE-2026-115216

In Eclipse ioFog Operator versions 3.8.0 before 3.9.2, TLS certificate verification is disabled when the operator contac

来源摘录 · NVD

漏洞预警2026-10-27 发布INFO

In Eclipse ioFog iofogctl versions 1.0.0 through 3.7.0 and 3.8.0-rc.1 through 3.9.1, the provisioning key and CA certificate returned by the Controller API are concatenated into...

CVE-2026-113644

In Eclipse ioFog iofogctl versions 1.0.0 through 3.7.0 and 3.8.0-rc.1 through 3.9.1, the provisioning key and CA certifi

来源摘录 · NVD

漏洞预警2026-10-27 发布CRITICAL

@fastify/express is a Fastify plugin that runs Express middleware inside Fastify. In versions 4.0.5 through 4.0.8, when Fastify runs with the non-default ignoreDuplicateSlashes ...

CVE-2026-112362

@fastify/express is a Fastify plugin that runs Express middleware inside Fastify. In versions 4.0.5 through 4.0.8, when

来源摘录 · NVD

漏洞预警2026-10-27 发布INFO

TRO600 contains a vulnerability that allows an authenticated attacker to bypass network access restrictions and access services intended to be reachable only from localhost. By ...

CVE-2026-10756

TRO600 contains a vulnerability that allows an authenticated attacker to bypass network access restrictions and access s

来源摘录 · NVD