#CVE

共收录 69142 条相关情报。

漏洞预警2026-10-26 发布MEDIUM

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS ...

CVE-2026-64750

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 2

来源摘录 · NVD

#cve #cwe-787

漏洞预警2026-10-26 发布MEDIUM

An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Tahoe 26.7.2. An app may be able to access sensitive user...

CVE-2026-43736

An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS

来源摘录 · NVD

#cve #cwe-862

漏洞预警2026-10-26 发布INFO

Infinite loop in Xpdf 4.06 and earlier, due to incorrect validation of progression order field in JPEG 2000 image.

CVE-2026-116671

Infinite loop in Xpdf 4.06 and earlier, due to incorrect validation of progression order field in JPEG 2000 image.

来源摘录 · NVD

#cve #cwe-20 #cwe-835

漏洞预警2026-10-26 发布HIGH

Seroval facilitates JavaScript value stringification, including complex structures beyond JSON.stringify capabilities. From 1.4.1 until 1.6.8, fromJSON and fromCrossJSON do not ...

CVE-2026-116584

Seroval facilitates JavaScript value stringification, including complex structures beyond JSON.stringify capabilities. F

来源摘录 · NVD

#cve #cwe-770

漏洞预警2026-10-26 发布INFO

Seroval facilitates JavaScript value stringification, including complex structures beyond JSON.stringify capabilities. From 1.6.0 until 1.6.11, the JavaScript-output APIs derive...

CVE-2026-116583

Seroval facilitates JavaScript value stringification, including complex structures beyond JSON.stringify capabilities. F

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-94

漏洞预警2026-10-26 发布MEDIUM

Seroval facilitates JavaScript value stringification, including complex structures beyond JSON.stringify capabilities. Prior to 1.0.0 and from 1.5.5 until 1.6.10, the JavaScript...

CVE-2026-116582

Seroval facilitates JavaScript value stringification, including complex structures beyond JSON.stringify capabilities. P

来源摘录 · NVD

#cve #cwe-116 #cwe-79

漏洞预警2026-10-26 发布HIGH

Seroval facilitates JavaScript value stringification, including complex structures beyond JSON.stringify capabilities. Prior to 1.6.8, fromJSON and fromCrossJSON do not validate...

CVE-2026-116581

Seroval facilitates JavaScript value stringification, including complex structures beyond JSON.stringify capabilities. P

来源摘录 · NVD

#cve #cwe-1284 #cwe-835

漏洞预警2026-10-26 发布HIGH

Seroval facilitates JavaScript value stringification, including complex structures beyond JSON.stringify capabilities. Prior to 1.6.8, fromJSON rebuilds an AsyncIteratorFactoryI...

CVE-2026-116580

Seroval facilitates JavaScript value stringification, including complex structures beyond JSON.stringify capabilities. P

来源摘录 · NVD

#cve #cwe-502

漏洞预警2026-10-26 发布INFO

Autobahn Python is a WebSocket and WAMP implementation for Python that supports Twisted and asyncio. From 26.7.1 until 26.10.1, PerMessageBrotli.decompress_message_data in compr...

CVE-2026-116579

Autobahn Python is a WebSocket and WAMP implementation for Python that supports Twisted and asyncio. From 26.7.1 until 2

历史摘要 · 未重新核验 · NVD

#cve #cwe-409 #cwe-770

漏洞预警2026-10-26 发布INFO

Tornado is a Python web framework and asynchronous networking library. Prior to 6.6, tornado.web.RedirectHandler URL templates can place regex-capture substitutions where crafte...

CVE-2026-116578

Tornado is a Python web framework and asynchronous networking library. Prior to 6.6, tornado.web.RedirectHandler URL tem

来源摘录 · NVD

#cve #cwe-601

漏洞预警2026-10-26 发布MEDIUM

Tornado is a Python web framework and asynchronous networking library. Prior to 6.6, Tornado's HTTP header parser accepts obsolete line folding and repeatedly concatenates short...

CVE-2026-116577

Tornado is a Python web framework and asynchronous networking library. Prior to 6.6, Tornado's HTTP header parser accept

来源摘录 · NVD

#cve #cwe-407 #cwe-770

漏洞预警2026-10-26 发布HIGH

systeminformation is a System and OS information library for node.js. Prior to 5.33.16, services() in lib/processes.js inserts a caller-supplied service name into a PowerShell G...

CVE-2026-116576

systeminformation is a System and OS information library for node.js. Prior to 5.33.16, services() in lib/processes.js i

来源摘录 · NVD

#cve #cwe-78

漏洞预警2026-10-26 发布INFO

Mem0 provides persistent memory infrastructure for AI agents and applications. Prior to Python SDK 2.0.18 and TypeScript SDK 3.1.6, _build_session_scope() in mem0/memory/main.py...

CVE-2026-116575

Mem0 provides persistent memory infrastructure for AI agents and applications. Prior to Python SDK 2.0.18 and TypeScript

历史摘要 · 未重新核验 · NVD

#cve #cwe-200 #cwe-863

漏洞预警2026-10-26 发布CRITICAL

A vulnerability was determined in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected is the function apmib_set of the file firewall.so. This manipulation causes command injection....

CVE-2026-116506

A vulnerability was determined in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected is the function apmib_set of the file

来源摘录 · NVD

#cve #cwe-74 #cwe-77

漏洞预警2026-10-26 发布CRITICAL

A vulnerability was found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. This impacts the function getDeviceInfo of the file /var/lib/misc/udhcpd.leases of the component device-info...

CVE-2026-116505

A vulnerability was found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. This impacts the function getDeviceInfo of the file

来源摘录 · NVD

#cve #cwe-74 #cwe-77

漏洞预警2026-10-26 发布INFO

A vulnerability has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. This affects the function setCloudUpgradeFW of the file lib/cste_modules/upgrade.so of the component Cl...

CVE-2026-116504

A vulnerability has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. This affects the function setCloudUpgradeFW of

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-77

漏洞预警2026-10-26 发布MEDIUM

A flaw has been found in turboderp-org ExLlamaV2 up to 0.3.2. The impacted element is the function QMatrix::make_sequential of the file exllamav2/exllamav2_ext/cuda/q_matrix.cu ...

CVE-2026-116502

A flaw has been found in turboderp-org ExLlamaV2 up to 0.3.2. The impacted element is the function QMatrix::make_sequent

来源摘录 · NVD

#cve #cwe-119 #cwe-787

漏洞预警2026-10-26 发布MEDIUM

A logic issue was addressed with improved checks. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2. A website m...

CVE-2026-113952

A logic issue was addressed with improved checks. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS

来源摘录 · NVD

#cve #cwe-693

漏洞预警2026-10-26 发布MEDIUM

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watc...

CVE-2026-113950

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27.2 and iPadOS 27.

来源摘录 · NVD

#cve #cwe-787

漏洞预警2026-10-26 发布HIGH

A type confusion issue was addressed with improved state management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gat...

CVE-2026-113949

A type confusion issue was addressed with improved state management. This issue is fixed in Safari 27.2, iOS 26.7.2 and

来源摘录 · NVD

#cve #cwe-843