#CVE

共收录 69142 条相关情报。

← 返回所有主题

漏洞预警2026-10-26 发布HIGH

An issue in WCH CH340/CH341 USB-to-Serial Windows Driver setup package CH341SER.EXE version 4.0 allows a local attacker to escalate privileges.

CVE-2026-106781

An issue in WCH CH340/CH341 USB-to-Serial Windows Driver setup package CH341SER.EXE version 4.0 allows a local attacker

来源摘录 · NVD

#cve #cwe-269

漏洞预警2026-10-26 发布CRITICAL

A security vulnerability has been identified in the vSolution Matrix file sharing feature. A shared cryptographic trust configuration could allow an attacker who obtains the mat...

CVE-2026-59107

A security vulnerability has been identified in the vSolution Matrix file sharing feature. A shared cryptographic trust

来源摘录 · NVD

#cve #cwe-797

漏洞预警2026-10-26 发布MEDIUM

Frappe CRM app before 1.89.1 contains a missing authorization vulnerability that allows authenticated low-privileged users to read CRM Lead records they are not permitted to acc...

CVE-2026-116492

Frappe CRM app before 1.89.1 contains a missing authorization vulnerability that allows authenticated low-privileged use

来源摘录 · NVD

#cve #cwe-862

漏洞预警2026-10-26 发布MEDIUM

NXP MCUXpresso SDK USB middleware (mcuxsdk-middleware-usb) before 2.13.0 contains a heap buffer overflow in host audio, video and CDC class drivers that trust device-supplied bN...

CVE-2026-116488

NXP MCUXpresso SDK USB middleware (mcuxsdk-middleware-usb) before 2.13.0 contains a heap buffer overflow in host audio,

来源摘录 · NVD

#cve #cwe-122

漏洞预警2026-10-26 发布MEDIUM

NXP MCUXpresso SDK USB middleware (mcuxsdk-middleware-usb) before 2.13.0 contains an out-of-bounds read vulnerability in USB_DeviceCdcRndisSetCommand() that trusts a host-suppli...

CVE-2026-116487

NXP MCUXpresso SDK USB middleware (mcuxsdk-middleware-usb) before 2.13.0 contains an out-of-bounds read vulnerability in

来源摘录 · NVD

#cve #cwe-125

漏洞预警2026-10-26 发布CRITICAL

danmu_api before 1.21.7 contains an authentication bypass vulnerability that allows unauthenticated attackers to modify server environment configuration when the default TOKEN i...

CVE-2026-116485

danmu_api before 1.21.7 contains an authentication bypass vulnerability that allows unauthenticated attackers to modify

来源摘录 · NVD

#cve #cwe-306

漏洞预警2026-10-26 发布MEDIUM

A weakness has been identified in Kameleo up to 5.0.1.26. This affects an unknown part of the file /profiles of the component Local API. This manipulation causes information dis...

CVE-2026-116283

A weakness has been identified in Kameleo up to 5.0.1.26. This affects an unknown part of the file /profiles of the comp

来源摘录 · NVD

#cve #cwe-200 #cwe-284

漏洞预警2026-10-26 发布LOW

A vulnerability was identified in Kameleo up to 5.0.1.26. Affected by this vulnerability is the function ListProfiles of the file client-engine-application/t.cs of the component...

CVE-2026-116281

A vulnerability was identified in Kameleo up to 5.0.1.26. Affected by this vulnerability is the function ListProfiles of

来源摘录 · NVD

#cve #cwe-200 #cwe-284

漏洞预警2026-10-26 发布MEDIUM

A vulnerability was determined in Kameleo up to 5.0.1.26. Affected is the function InternalController.TestProxy of the file client-engine-application/f.cs of the component Proxy...

CVE-2026-116280

A vulnerability was determined in Kameleo up to 5.0.1.26. Affected is the function InternalController.TestProxy of the f

来源摘录 · NVD

#cve #cwe-918

漏洞预警2026-10-26 发布MEDIUM

A vulnerability has been found in JIZHICMS up to 2.5.6. This affects the function Pay of the file app/home/c/OrderController.php of the component Front-end Order Handler. Such m...

CVE-2026-116274

A vulnerability has been found in JIZHICMS up to 2.5.6. This affects the function Pay of the file app/home/c/OrderContro

来源摘录 · NVD

#cve #cwe-266 #cwe-285

漏洞预警2026-10-26 发布HIGH

Dolibarr ERP CRM before 24.0.0 contains an OS command injection vulnerability in htdocs/admin/tools/export.php that lets authenticated administrators bypass the restrict_os_comm...

CVE-2026-116219

Dolibarr ERP CRM before 24.0.0 contains an OS command injection vulnerability in htdocs/admin/tools/export.php that lets

来源摘录 · NVD

#cve #cwe-78

漏洞预警2026-10-26 发布HIGH

Dolibarr ERP CRM 19.0.0 before 23.0.4 contains an SQL injection vulnerability that allows authenticated API users to inject SQL via the type field of the third-party bankaccount...

CVE-2026-116218

Dolibarr ERP CRM 19.0.0 before 23.0.4 contains an SQL injection vulnerability that allows authenticated API users to inj

来源摘录 · NVD

#cve #cwe-89

漏洞预警2026-10-26 发布MEDIUM

MacCMS v10 through 2026.1000.4056 contains a mass assignment vulnerability in index/Comment::saveData() that allows unauthenticated attackers to set arbitrary mac_comment column...

CVE-2026-116216

MacCMS v10 through 2026.1000.4056 contains a mass assignment vulnerability in index/Comment::saveData() that allows unau

来源摘录 · NVD

#cve #cwe-915

漏洞预警2026-10-26 发布LOW

MacCMS v10 through 2026.1000.4056 contains a race condition vulnerability in Card::useData() that allows authenticated members to redeem one recharge card multiple times via the...

CVE-2026-116215

MacCMS v10 through 2026.1000.4056 contains a race condition vulnerability in Card::useData() that allows authenticated m

来源摘录 · NVD

#cve #cwe-362

漏洞预警2026-10-26 发布CRITICAL

MacCMS v10 before 2026.1000.4054 contains an authentication bypass vulnerability that allows unauthenticated attackers to reset any member's password because check_msg() never c...

CVE-2026-116214

MacCMS v10 before 2026.1000.4054 contains an authentication bypass vulnerability that allows unauthenticated attackers t

来源摘录 · NVD

#cve #cwe-640

漏洞预警2026-10-26 发布MEDIUM

Webasyst Framework through 4.4.0 contains a stored cross-site scripting vulnerability in the Photos app that allows authenticated backend users to inject JavaScript via the albu...

CVE-2026-116212

Webasyst Framework through 4.4.0 contains a stored cross-site scripting vulnerability in the Photos app that allows auth

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-26 发布MEDIUM

Webasyst Framework through 4.4.0 contains a cross-site request forgery vulnerability in the Photos app that allows remote attackers to perform backend actions because the app do...

CVE-2026-116210

Webasyst Framework through 4.4.0 contains a cross-site request forgery vulnerability in the Photos app that allows remot

来源摘录 · NVD

#cve #cwe-352

漏洞预警2026-10-26 发布INFO

Interpretation Conflict vulnerability in hackney_url in benoitc hackney allows Server Side Request Forgery via a percent-encoded bracketed IPv6 literal or an IP literal with a t...

CVE-2026-115700

Interpretation Conflict vulnerability in hackney_url in benoitc hackney allows Server Side Request Forgery via a percent

来源摘录 · NVD

#cve #cwe-436 #cwe-918

漏洞预警2026-10-26 发布INFO

Improper Certificate Validation vulnerability in hackney_ssl in benoitc hackney allows an on-path attacker to impersonate a server pinned to a private certificate authority via ...

CVE-2026-115693

Improper Certificate Validation vulnerability in hackney_ssl in benoitc hackney allows an on-path attacker to impersonat

来源摘录 · NVD

#cve #cwe-295

漏洞预警2026-10-26 发布INFO

Insufficiently Protected Credentials vulnerability in hackney in benoitc hackney allows a redirecting server to obtain the basic_auth and cookie credentials of a request via a s...

CVE-2026-113440

Insufficiently Protected Credentials vulnerability in hackney in benoitc hackney allows a redirecting server to obtain t

来源摘录 · NVD

#cve #cwe-522