#CVE

共收录 69142 条相关情报。

← 返回所有主题
漏洞预警2026-10-26 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel_pcie: fix TX descriptor bounds check btintel_pcie_prepare_tx() uses tfd_index to access ...

CVE-2026-99094

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel_pcie: fix TX descriptor bounds c

来源摘录 · NVD

漏洞预警2026-10-26 发布INFO

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix status of pending commands flushed on power off cmd_complete_rsp() receives a struct c...

CVE-2026-99091

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix status of pending commands flu

来源摘录 · NVD

漏洞预警2026-10-26 发布INFO

In the Linux kernel, the following vulnerability has been resolved: ASoC: samsung: i2s: enable op_clk in probe to balance runtime PM The probe function puts the device into th...

CVE-2026-99089

In the Linux kernel, the following vulnerability has been resolved: ASoC: samsung: i2s: enable op_clk in probe to balan

来源摘录 · NVD

漏洞预警2026-10-26 发布INFO

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: validate transport header presence in set_ipv6_addr When executing IPv6 address rewrite a...

CVE-2026-99088

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: validate transport header presenc

来源摘录 · NVD

漏洞预警2026-10-26 发布MEDIUM

Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail to bind the volume of text extracted from an uploaded PDF which allows an auth...

CVE-2026-93850

Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail to bind the volume of

来源摘录 · NVD

漏洞预警2026-10-26 发布MEDIUM

Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 Mattermost fail to apply allocation limits to the byte-string decode paths in its W...

CVE-2026-93849

Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 Mattermost fail to apply a

来源摘录 · NVD

漏洞预警2026-10-26 发布LOW

Mattermost versions 11.7.x <= 11.7.10 fail to apply outbound internal-connection filtering to the OpenID discovery endpoint request which allows a System Administrator to determ...

CVE-2026-93848

Mattermost versions 11.7.x <= 11.7.10 fail to apply outbound internal-connection filtering to the OpenID discovery endpo

来源摘录 · NVD

漏洞预警2026-10-26 发布LOW

Mattermost versions 11.7.x <= 11.7.10 fail to validate reserved system post types on the scheduled post creation and publication paths which allows an authenticated channel memb...

CVE-2026-93847

Mattermost versions 11.7.x <= 11.7.10 fail to validate reserved system post types on the scheduled post creation and pub

来源摘录 · NVD

漏洞预警2026-10-26 发布MEDIUM

A flaw was found in the Infinispan Operator for Red Hat Data Grid. When cross-site (xsite) TLS is enabled, the operator launches the Gossip Router container with keystore and tr...

CVE-2026-92171

A flaw was found in the Infinispan Operator for Red Hat Data Grid. When cross-site (xsite) TLS is enabled, the operator

来源摘录 · NVD

漏洞预警2026-10-26 发布INFO

boneIO Black does not limit authentication attempts on its web interface (POST /api/login) or SSH service, and does not enforce password complexity. An unauthenticated remote at...

CVE-2026-77057

boneIO Black does not limit authentication attempts on its web interface (POST /api/login) or SSH service, and does not

来源摘录 · NVD

漏洞预警2026-10-26 发布INFO

boneIO black_debian_images gives the boneio service account excessive privileges, including full passwordless sudo access and membership in the docker group. A local attacker wh...

CVE-2026-77055

boneIO black_debian_images gives the boneio service account excessive privileges, including full passwordless sudo acces

来源摘录 · NVD

漏洞预警2026-10-26 发布INFO

boneIO Black firmware ships with authentication disabled by default. Its management web API listens on all network interfaces and exposes all endpoints without requiring credent...

CVE-2026-77053

boneIO Black firmware ships with authentication disabled by default. Its management web API listens on all network inter

来源摘录 · NVD

漏洞预警2026-10-26 发布INFO

boneIO Black exposes a Node-RED instance without authentication at the /nodered/ path through a Caddy reverse proxy. The Node-RED Admin API allows deploying flows that can execu...

CVE-2026-77052

boneIO Black exposes a Node-RED instance without authentication at the /nodered/ path through a Caddy reverse proxy. The

来源摘录 · NVD

漏洞预警2026-10-26 发布HIGH

Xovis AG APS-R-POE, APS-R-POE-PP, APS-R, APS-R-POE-USB, and APS-B 2.10.1.1 and earlier contains an OS command injection vulnerability in /sbin/ImportParamSet.sh. The script proc...

CVE-2026-36698

Xovis AG APS-R-POE, APS-R-POE-PP, APS-R, APS-R-POE-USB, and APS-B 2.10.1.1 and earlier contains an OS command injection

来源摘录 · NVD

漏洞预警2026-10-26 发布CRITICAL

SQL Injection vulnerability in CRM SOFTTRADE Infotech (aka softtradeindia) 1.0 allows a remote attacker to execute arbitrary code via the Login Page

CVE-2026-31158

SQL Injection vulnerability in CRM SOFTTRADE Infotech (aka softtradeindia) 1.0 allows a remote attacker to execute arbit

来源摘录 · NVD

漏洞预警2026-10-26 发布MEDIUM

A NULL pointer dereference vulnerability was found in gssproxy. When a GSSX_INIT_SEC_CONTEXT request is received with the target_name field absent, the daemon dereferences the r...

CVE-2026-116497

A NULL pointer dereference vulnerability was found in gssproxy. When a GSSX_INIT_SEC_CONTEXT request is received with th

来源摘录 · NVD

漏洞预警2026-10-26 发布MEDIUM

A vulnerability was identified in iFlytek astron-agent up to 1.1.2. This impacts the function FileInfoV2Service.listKnowledgeByPage of the file FileInfoV2Service.java of the com...

CVE-2026-116340

A vulnerability was identified in iFlytek astron-agent up to 1.1.2. This impacts the function FileInfoV2Service.listKnow

来源摘录 · NVD

漏洞预警2026-10-26 发布MEDIUM

A security vulnerability has been detected in Kameleo up to 5.3.1. This vulnerability affects unknown code of the file /general/user-info of the component Local API. Such manipu...

CVE-2026-116284

A security vulnerability has been detected in Kameleo up to 5.3.1. This vulnerability affects unknown code of the file /

来源摘录 · NVD

漏洞预警2026-10-26 发布MEDIUM

The MongoDB Shell (mongosh) relies on Node.js as a third-party runtime that carries its own TLS root certificate store. This certificate store has the recoverable eMudhra interm...

CVE-2026-115930

The MongoDB Shell (mongosh) relies on Node.js as a third-party runtime that carries its own TLS root certificate store.

来源摘录 · NVD

漏洞预警2026-10-26 发布MEDIUM

This issue affects Apache SIS from version 0.7 through 1.6 inclusive. When a data file contains links to other files, Apache SIS opened these files regardless their paths. It wa...

CVE-2026-110748

This issue affects Apache SIS from version 0.7 through 1.6 inclusive. When a data file contains links to other files, Ap

来源摘录 · NVD