#CVE

共收录 69142 条相关情报。

← 返回所有主题
漏洞预警2026-10-26 发布MEDIUM

A security flaw has been discovered in BKWLD Decoy up to 5.11.1. The impacted element is an unknown function of the file Policy.php of the component Authorization Policy. The ma...

CVE-2026-116471

A security flaw has been discovered in BKWLD Decoy up to 5.11.1. The impacted element is an unknown function of the file

来源摘录 · NVD

漏洞预警2026-10-26 发布INFO

A security flaw has been discovered in ggml-org llama.cpp up to 0.7.0. Affected by this vulnerability is an unknown functionality of the file src/llama-sampler.cpp of the compon...

CVE-2026-116467

A security flaw has been discovered in ggml-org llama.cpp up to 0.7.0. Affected by this vulnerability is an unknown func

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-26 发布INFO

Consul-k8s versions 0.42.0 and later are vulnerable to a cross-namespace authorization bypass in component ACL binding rules that may allow an attacker to obtain elevated Consul...

CVE-2026-110720

Consul-k8s versions 0.42.0 and later are vulnerable to a cross-namespace authorization bypass in component ACL binding r

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-26 发布HIGH

libosmocore through 1.14.1 contains out-of-bounds reads in the IPA CCM identity-tag parsers in src/gsm/ipa.c. This allows a remote attacker to obtain sensitive information.

CVE-2026-104594

libosmocore through 1.14.1 contains out-of-bounds reads in the IPA CCM identity-tag parsers in src/gsm/ipa.c. This allow

来源摘录 · NVD

漏洞预警2026-10-26 发布HIGH

osmo-msc through 1.15.0 contains a stack-based buffer overflow in decode_mme_name() in src/libmsc/sgs_iface.c. This allows a remote attacker to cause a denial of service.

CVE-2026-104593

osmo-msc through 1.15.0 contains a stack-based buffer overflow in decode_mme_name() in src/libmsc/sgs_iface.c. This allo

来源摘录 · NVD

漏洞预警2026-10-26 发布MEDIUM

libosmocore through 1.14.1 contains an out-of-bounds read in the CBSP WRITE-REPLACE decoder in src/gsm/cbsp.c. This allows a remote attacker to cause a denial of service.

CVE-2026-104592

libosmocore through 1.14.1 contains an out-of-bounds read in the CBSP WRITE-REPLACE decoder in src/gsm/cbsp.c. This allo

来源摘录 · NVD

漏洞预警2026-10-26 发布HIGH

libosmocore through 1.14.1 contains a buffer overflow in osmo_iuup_compute_payload_crc() in src/gsm/iuup.c. This allows a remote attacker to cause a denial of service.

CVE-2026-104591

libosmocore through 1.14.1 contains a buffer overflow in osmo_iuup_compute_payload_crc() in src/gsm/iuup.c. This allows

来源摘录 · NVD

漏洞预警2026-10-26 发布MEDIUM

When the vSolution Matrix feature is enabled, affected devices may make current screen content available through an unauthenticated RTSP/RTP stream to hosts on the same network ...

CVE-2026-70379

When the vSolution Matrix feature is enabled, affected devices may make current screen content available through an unau

来源摘录 · NVD

漏洞预警2026-10-26 发布MEDIUM

A vulnerability was identified in FastStone Image Viewer up to 8.5. Affected is the function FUN_0062d96c of the component Box-Average Downsampler Engine. The manipulation leads...

CVE-2026-116463

A vulnerability was identified in FastStone Image Viewer up to 8.5. Affected is the function FUN_0062d96c of the compone

来源摘录 · NVD

漏洞预警2026-10-26 发布MEDIUM

A vulnerability was determined in Omega Solution Restro POS up to 20261026. This impacts an unknown function of the file /sale-invoice/. Executing a manipulation of the argument...

CVE-2026-116461

A vulnerability was determined in Omega Solution Restro POS up to 20261026. This impacts an unknown function of the file

来源摘录 · NVD

漏洞预警2026-10-26 发布MEDIUM

Backstage is an open framework for building developer portals. Prior to 3.9.2 and from 4.0.0 until 4.0.2, DefaultCatalogRulesEnforcer in @backstage/plugin-catalog-backend compar...

CVE-2026-115923

Backstage is an open framework for building developer portals. Prior to 3.9.2 and from 4.0.0 until 4.0.2, DefaultCatalog

来源摘录 · NVD

漏洞预警2026-10-26 发布MEDIUM

Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to 1.22.0, _unpack_2bit() and _unpack_4bit() resize unpacked arrays accordin...

CVE-2026-115922

Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to 1.22.0, _unpack_

来源摘录 · NVD

漏洞预警2026-10-26 发布MEDIUM

Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. From 1.4.0 until 1.22.0, ScanInferenceFunction, ScanInferenceFunction_opset8, and ...

CVE-2026-115921

Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. From 1.4.0 until 1.22.0,

来源摘录 · NVD

漏洞预警2026-10-26 发布MEDIUM

vLLM is an inference and serving engine for large language models. From 0.16.0 until 0.32.0, the /v1/responses endpoint allows an authenticated caller to place an attacker-contr...

CVE-2026-115918

vLLM is an inference and serving engine for large language models. From 0.16.0 until 0.32.0, the /v1/responses endpoint

来源摘录 · NVD

漏洞预警2026-10-26 发布MEDIUM

vLLM is an inference and serving engine for large language models. Prior to 0.32.0, the OpenAI-compatible server configures Starlette CORSMiddleware with allowed_origins set to ...

CVE-2026-115917

vLLM is an inference and serving engine for large language models. Prior to 0.32.0, the OpenAI-compatible server configu

来源摘录 · NVD / OSV.dev

漏洞预警2026-10-26 发布MEDIUM

vLLM is an inference and serving engine for large language models. Prior to 0.32.0, vllm/tokenizers/hf.py computes max_token_id with an off-by-one upper bound, allowing a pre-to...

CVE-2026-115916

vLLM is an inference and serving engine for large language models. Prior to 0.32.0, vllm/tokenizers/hf.py computes max_t

来源摘录 · NVD

漏洞预警2026-10-26 发布CRITICAL

vLLM is an inference and serving engine for large language models. Prior to 0.32.0, ImageMediaIO passes attacker-controlled image bytes to Pillow through Image.open(BytesIO(data...

CVE-2026-115915

vLLM is an inference and serving engine for large language models. Prior to 0.32.0, ImageMediaIO passes attacker-control

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-26 发布MEDIUM

vLLM is an inference and serving engine for large language models. From 0.11.1 until 0.32.0, the DeepSeek-OCR, DeepSeek-OCR-2, and Unlimited-OCR image path allows a remote clien...

CVE-2026-115914

vLLM is an inference and serving engine for large language models. From 0.11.1 until 0.32.0, the DeepSeek-OCR, DeepSeek-

来源摘录 · NVD

漏洞预警2026-10-26 发布CRITICAL

There is a SQL injection vulnerability in Esri ArcGIS Server versions 12.1 and earlier on Windows and Linux that may allow a remote attacker with privileges to access the servic...

CVE-2026-10757

There is a SQL injection vulnerability in Esri ArcGIS Server versions 12.1 and earlier on Windows and Linux that may all

来源摘录 · NVD

漏洞预警2026-10-26 发布HIGH

HashiCorp Consul and Consul Enterprise 1.17.0 up to 2.0.4 are vulnerable to an authorization bypass in the agent's service mesh leaf certificate API that may allow an attacker w...

CVE-2026-105765

HashiCorp Consul and Consul Enterprise 1.17.0 up to 2.0.4 are vulnerable to an authorization bypass in the agent's servi

来源摘录 · NVD