#CVE

共收录 69142 条相关情报。

← 返回所有主题
漏洞预警2026-10-26 发布CRITICAL

Burrito is a Terraform Automation Collaboration Software (TACoS) Kubernetes operator. Prior to 0.13.0, `POST /api/webhook` accepts unsigned GitHub and GitLab events when a `Terr...

CVE-2026-102649

Burrito is a Terraform Automation Collaboration Software (TACoS) Kubernetes operator. Prior to 0.13.0, `POST /api/webhoo

来源摘录 · NVD

漏洞预警2026-10-26 发布LOW

The Espressif AES driver drivers/crypto/crypto_esp32_aes.c advertises a multi-session cipher API — it hands out up to CONFIG_ESP32_CRYPTO_AES_SESSIONS_MAX (default 4) independen...

CVE-2026-82390

The Espressif AES driver drivers/crypto/crypto_esp32_aes.c advertises a multi-session cipher API — it hands out up to CO

来源摘录 · NVD

漏洞预警2026-10-26 发布MEDIUM

The Bluetooth host pre-allocates a bt_conn object (a "reservation") from the fixed acl_conns[] pool for every connectable advertising set it starts, in le_adv_start_add_conn() i...

CVE-2026-81039

The Bluetooth host pre-allocates a bt_conn object (a "reservation") from the fixed acl_conns[] pool for every connectabl

来源摘录 · NVD

漏洞预警2026-10-26 发布HIGH

The Object Transfer Service server builds its Object Action Control Point (OACP) response indication in oacp_ind_send() (subsys/bluetooth/services/ots/ots_oacp.c). Before this f...

CVE-2026-81038

The Object Transfer Service server builds its Object Action Control Point (OACP) response indication in oacp_ind_send()

来源摘录 · NVD

漏洞预警2026-10-26 发布INFO

Use of hard-coded cryptographic key vulnerability in Johnson Controls Kantech Entrapass allows Padding Oracle Crypto Attack. This issue affects Kantech Entrapass: before 9.20.

CVE-2026-71456

Use of hard-coded cryptographic key vulnerability in Johnson Controls Kantech Entrapass allows Padding Oracle Crypto Att

来源摘录 · NVD

漏洞预警2026-10-26 发布INFO

Cleartext storage of sensitive information in memory vulnerability in Johnson Controls Kantech Entrapass allows Retrieve Embedded Sensitive Data. This issue affects Kantech Ent...

CVE-2026-71455

Cleartext storage of sensitive information in memory vulnerability in Johnson Controls Kantech Entrapass allows Retrieve

来源摘录 · NVD

漏洞预警2026-10-26 发布LOW

The IPv6 stack derived the long-lived secret key used to compute RFC 7217 stable interface identifiers (gen_stable_iid() in subsys/net/ip/ipv6.c) and RFC 8981 temporary interfac...

CVE-2026-19742

The IPv6 stack derived the long-lived secret key used to compute RFC 7217 stable interface identifiers (gen_stable_iid()

来源摘录 · NVD

漏洞预警2026-10-26 发布MEDIUM

A weakness has been identified in Bdtask Garage 24 Garage Management Software 1.0. This vulnerability affects unknown code of the component Backend. Executing a manipulation can...

CVE-2026-116384

A weakness has been identified in Bdtask Garage 24 Garage Management Software 1.0. This vulnerability affects unknown co

来源摘录 · NVD

漏洞预警2026-10-26 发布MEDIUM

A weakness has been identified in Akuvox Akubela HyPanel PS51 51.130.40.26. The impacted element is an unknown function of the file /login. Executing a manipulation of the argum...

CVE-2026-116371

A weakness has been identified in Akuvox Akubela HyPanel PS51 51.130.40.26. The impacted element is an unknown function

来源摘录 · NVD

漏洞预警2026-10-26 发布CRITICAL

A security flaw has been discovered in 2K Games Sid Meier's Civilization VI 1.0.12.68. The affected element is the function loadstring of the component Lua sandbox. Performing a...

CVE-2026-116370

A security flaw has been discovered in 2K Games Sid Meier's Civilization VI 1.0.12.68. The affected element is the funct

来源摘录 · NVD

漏洞预警2026-10-26 发布MEDIUM

vLLM is an inference and serving engine for large language models. Prior to 0.32.0, the Phi-4 multimodal audio encoder in phi4mm_audio.py and phi4mm_utils.py uses eager attentio...

CVE-2026-115913

vLLM is an inference and serving engine for large language models. Prior to 0.32.0, the Phi-4 multimodal audio encoder i

来源摘录 · NVD

漏洞预警2026-10-26 发布HIGH

vLLM is an inference and serving engine for large language models. Prior to 0.32.0, an authenticated caller can place forged shared-memory address and monotonic_id values in pub...

CVE-2026-115912

vLLM is an inference and serving engine for large language models. Prior to 0.32.0, an authenticated caller can place fo

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-10-26 发布MEDIUM

vLLM is an inference and serving engine for large language models. From 0.19.0 until 0.32.0, authenticated callers can supply a request chat template when no server-side --chat-...

CVE-2026-115911

vLLM is an inference and serving engine for large language models. From 0.19.0 until 0.32.0, authenticated callers can s

来源摘录 · NVD

漏洞预警2026-10-26 发布MEDIUM

Python Social Auth is a social authentication and registration mechanism. Prior to 6.2.0, OpenIdConnectAuth in social_core/backends/open_id_connect.py uses get_and_store_nonce t...

CVE-2026-115910

Python Social Auth is a social authentication and registration mechanism. Prior to 6.2.0, OpenIdConnectAuth in social_co

来源摘录 · NVD

漏洞预警2026-10-26 发布HIGH

zip is a zip library for Rust that supports reading and writing simple ZIP files. From 5.1.0 until 9.0.0, applications built with the legacy-zip feature can reserve output capac...

CVE-2026-115907

zip is a zip library for Rust that supports reading and writing simple ZIP files. From 5.1.0 until 9.0.0, applications b

来源摘录 · NVD

漏洞预警2026-10-26 发布MEDIUM

zip is a zip library for Rust that supports reading and writing simple ZIP files. From 0.6.0 until 9.0.0, the AES entry reader in src/aes.rs verifies its HMAC only when the atta...

CVE-2026-115906

zip is a zip library for Rust that supports reading and writing simple ZIP files. From 0.6.0 until 9.0.0, the AES entry

来源摘录 · NVD

漏洞预警2026-10-26 发布INFO

zip is a zip library for Rust that supports reading and writing simple ZIP files. Through 9.0.4, ZipArchive treats Central Directory File Header filenames as authoritative while...

CVE-2026-115905

zip is a zip library for Rust that supports reading and writing simple ZIP files. Through 9.0.4, ZipArchive treats Centr

来源摘录 · NVD

漏洞预警2026-10-26 发布HIGH

SQL injection in the database-query custom resource handlers in the Amazon Web Services (AWS) Cloud Development Kit (CDK) @aws-cdk/aws-redshift-alpha module before 2.274.0-alpha...

CVE-2026-115418

SQL injection in the database-query custom resource handlers in the Amazon Web Services (AWS) Cloud Development Kit (CDK

来源摘录 · NVD

漏洞预警2026-10-26 发布HIGH

An issue in HUION Inspiroy Frego S (L310) Windows Driver 20.0.1.118 allows a local attacker to execute arbitrary code via the HUION driver installer DLL-loading logic

CVE-2026-107091

An issue in HUION Inspiroy Frego S (L310) Windows Driver 20.0.1.118 allows a local attacker to execute arbitrary code vi

来源摘录 · NVD

漏洞预警2026-10-26 发布HIGH

Homestay3 homestay-backend 0.0.1-SNAPSHOT contains an IDOR in ChatServiceImpl. An authenticated user can view conversations, read messages, send messages, and mark messages as r...

CVE-2026-106677

Homestay3 homestay-backend 0.0.1-SNAPSHOT contains an IDOR in ChatServiceImpl. An authenticated user can view conversati

来源摘录 · NVD