#CVE
共收录 69142 条相关情报。
← 返回所有主题 漏洞预警2026-10-26 发布HIGH
CVE-2026-99094
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: btintel_pcie: fix TX descriptor bounds c
来源摘录 · NVD
漏洞预警2026-10-26 发布INFO
CVE-2026-99091
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: MGMT: Fix status of pending commands flu
来源摘录 · NVD
漏洞预警2026-10-26 发布INFO
CVE-2026-99089
In the Linux kernel, the following vulnerability has been resolved:
ASoC: samsung: i2s: enable op_clk in probe to balan
来源摘录 · NVD
漏洞预警2026-10-26 发布INFO
CVE-2026-99088
In the Linux kernel, the following vulnerability has been resolved:
net: openvswitch: validate transport header presenc
来源摘录 · NVD
漏洞预警2026-10-26 发布MEDIUM
CVE-2026-93850
Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail to bind the volume of
来源摘录 · NVD
漏洞预警2026-10-26 发布MEDIUM
CVE-2026-93849
Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 Mattermost fail to apply a
来源摘录 · NVD
漏洞预警2026-10-26 发布LOW
CVE-2026-93848
Mattermost versions 11.7.x <= 11.7.10 fail to apply outbound internal-connection filtering to the OpenID discovery endpo
来源摘录 · NVD
漏洞预警2026-10-26 发布LOW
CVE-2026-93847
Mattermost versions 11.7.x <= 11.7.10 fail to validate reserved system post types on the scheduled post creation and pub
来源摘录 · NVD
漏洞预警2026-10-26 发布MEDIUM
CVE-2026-92171
A flaw was found in the Infinispan Operator for Red Hat Data Grid. When cross-site (xsite) TLS is enabled, the operator
来源摘录 · NVD
漏洞预警2026-10-26 发布INFO
CVE-2026-77057
boneIO Black does not limit authentication attempts on its web interface (POST /api/login) or SSH service, and does not
来源摘录 · NVD
漏洞预警2026-10-26 发布INFO
CVE-2026-77055
boneIO black_debian_images gives the boneio service account excessive privileges, including full passwordless sudo acces
来源摘录 · NVD
漏洞预警2026-10-26 发布INFO
CVE-2026-77053
boneIO Black firmware ships with authentication disabled by default. Its management web API listens on all network inter
来源摘录 · NVD
漏洞预警2026-10-26 发布INFO
CVE-2026-77052
boneIO Black exposes a Node-RED instance without authentication at the /nodered/ path through a Caddy reverse proxy. The
来源摘录 · NVD
漏洞预警2026-10-26 发布HIGH
CVE-2026-36698
Xovis AG APS-R-POE, APS-R-POE-PP, APS-R, APS-R-POE-USB, and APS-B 2.10.1.1 and earlier contains an OS command injection
来源摘录 · NVD
漏洞预警2026-10-26 发布CRITICAL
CVE-2026-31158
SQL Injection vulnerability in CRM SOFTTRADE Infotech (aka softtradeindia) 1.0 allows a remote attacker to execute arbit
来源摘录 · NVD
漏洞预警2026-10-26 发布MEDIUM
CVE-2026-116497
A NULL pointer dereference vulnerability was found in gssproxy. When a GSSX_INIT_SEC_CONTEXT request is received with th
来源摘录 · NVD
漏洞预警2026-10-26 发布MEDIUM
CVE-2026-116340
A vulnerability was identified in iFlytek astron-agent up to 1.1.2. This impacts the function FileInfoV2Service.listKnow
来源摘录 · NVD
漏洞预警2026-10-26 发布MEDIUM
CVE-2026-116284
A security vulnerability has been detected in Kameleo up to 5.3.1. This vulnerability affects unknown code of the file /
来源摘录 · NVD
漏洞预警2026-10-26 发布MEDIUM
CVE-2026-115930
The MongoDB Shell (mongosh) relies on Node.js as a third-party runtime that carries its own TLS root certificate store.
来源摘录 · NVD
漏洞预警2026-10-26 发布MEDIUM
CVE-2026-110748
This issue affects Apache SIS from version 0.7 through 1.6 inclusive. When a data file contains links to other files, Ap
来源摘录 · NVD