#CVE

共收录 69142 条相关情报。

漏洞预警2026-10-25 发布HIGH

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a stack-based buffer overflow in the handling of bzip2 compressed images. Attackers can supply a crafted image usin...

CVE-2026-116149

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a stack-based buffer overflow in the handling of bzip2 com

来源摘录 · NVD

#cve #cwe-121

漏洞预警2026-10-25 发布LOW

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains an injection vulnerability in the MVG encoder, which does not properly neutralize user-specified drawing options be...

CVE-2026-116148

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains an injection vulnerability in the MVG encoder, which does

来源摘录 · NVD

#cve #cwe-79

漏洞预警2026-10-25 发布LOW

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a null pointer dereference in the DJVU decoder because the result of a memory allocation is not checked before use....

CVE-2026-116147

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a null pointer dereference in the DJVU decoder because the

来源摘录 · NVD

#cve #cwe-476

漏洞预警2026-10-25 发布LOW

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in the MSL decoder that fails to release allocated memory when processing a crafted MSL image. Attack...

CVE-2026-116146

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in the MSL decoder that fails to release all

来源摘录 · NVD

#cve #cwe-401

漏洞预警2026-10-25 发布LOW

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-32 contains a security policy bypass caused by an incomplete fix for the policy bypass reported in GHSA-jjp4-3fwf-393j. An atta...

CVE-2026-116145

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-32 contains a security policy bypass caused by an incomplete fix for t

来源摘录 · NVD

#cve #cwe-693

漏洞预警2026-10-25 发布LOW

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains uncontrolled recursion in the MVG decoder that can lead to a stack overflow. Attackers can supply a crafted MVG fil...

CVE-2026-116144

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains uncontrolled recursion in the MVG decoder that can lead to

来源摘录 · NVD

#cve #cwe-674

漏洞预警2026-10-25 发布LOW

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a policy bypass in the PS, PDF and XPS decoders that allows the security policy's list length limit on scene select...

CVE-2026-116143

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a policy bypass in the PS, PDF and XPS decoders that allow

来源摘录 · NVD

#cve #cwe-770

漏洞预警2026-10-25 发布LOW

ImageMagick before 7.1.2-33 contains a heap buffer over-read vulnerability that allows attackers to read beyond allocated memory when printing a minimum-bounding-box. Attackers ...

CVE-2026-116142

ImageMagick before 7.1.2-33 contains a heap buffer over-read vulnerability that allows attackers to read beyond allocate

来源摘录 · NVD

#cve #cwe-125

漏洞预警2026-10-25 发布MEDIUM

ImageMagick before 7.1.2-33 contains a policy bypass vulnerability in the UHDR decoder that allows attackers to evade image width and height limits because extent checks occur a...

CVE-2026-116141

ImageMagick before 7.1.2-33 contains a policy bypass vulnerability in the UHDR decoder that allows attackers to evade im

来源摘录 · NVD

#cve #cwe-400

漏洞预警2026-10-25 发布LOW

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 incorrectly parses delegate invocations, which can allow an executable blocked in policy.xml to still run. An attacker who g...

CVE-2026-116140

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 incorrectly parses delegate invocations, which can allow an executa

来源摘录 · NVD

#cve #cwe-863

漏洞预警2026-10-25 发布MEDIUM

A security flaw has been discovered in LinkStackOrg LinkStack up to 4.8.8. The affected element is an unknown function. Performing a manipulation results in cross-site request f...

CVE-2026-116052

A security flaw has been discovered in LinkStackOrg LinkStack up to 4.8.8. The affected element is an unknown function.

来源摘录 · NVD

#cve #cwe-352 #cwe-862

漏洞预警2026-10-25 发布LOW

adm-zip through 0.6.1 contains a duplicate-entry validation bypass that allows attackers to evade the readEntries() check by using canonically equivalent entry names like './hel...

CVE-2026-116137

adm-zip through 0.6.1 contains a duplicate-entry validation bypass that allows attackers to evade the readEntries() chec

来源摘录 · NVD

#cve #cwe-436

漏洞预警2026-10-25 发布MEDIUM

ProjectSend 2.0.0 through 2.7.1 contains an incomplete authorization vulnerability in FileVersions::link() that allows staff users to share files without authorization by linkin...

CVE-2026-116136

ProjectSend 2.0.0 through 2.7.1 contains an incomplete authorization vulnerability in FileVersions::link() that allows s

来源摘录 · NVD

#cve #cwe-863

漏洞预警2026-10-25 发布MEDIUM

Leon before commit 50df142 contains a path traversal vulnerability in getModelFileNameFromURL() that allows attackers to write files outside the models directory via percent-enc...

CVE-2026-116073

Leon before commit 50df142 contains a path traversal vulnerability in getModelFileNameFromURL() that allows attackers to

来源摘录 · NVD

#cve #cwe-22

漏洞预警2026-10-25 发布MEDIUM

rotki before 1.44.2 contains a weak key derivation vulnerability that allows attackers to brute-force backups because the premium sync key is a single unsalted SHA-256 of the us...

CVE-2026-116071

rotki before 1.44.2 contains a weak key derivation vulnerability that allows attackers to brute-force backups because th

来源摘录 · NVD

#cve #cwe-916

漏洞预警2026-10-25 发布MEDIUM

Docker-Proxy through 5.1.9 contains a missing authentication vulnerability in the hubcmdui routes/config.js that allows unauthenticated attackers to read and overwrite configura...

CVE-2026-116070

Docker-Proxy through 5.1.9 contains a missing authentication vulnerability in the hubcmdui routes/config.js that allows

来源摘录 · NVD

#cve #cwe-306

漏洞预警2026-10-25 发布MEDIUM

NiubiGEO before 0.3.2 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server fetch internal addresses by supplying...

CVE-2026-116069

NiubiGEO before 0.3.2 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers

来源摘录 · NVD

#cve #cwe-918

漏洞预警2026-10-25 发布HIGH

Paisa before 0.7.8 contains a path traversal vulnerability in the GetFile, GetSheet, DeleteBackups, and DeleteSheetBackups handlers that lets unauthenticated attackers read file...

CVE-2026-116067

Paisa before 0.7.8 contains a path traversal vulnerability in the GetFile, GetSheet, DeleteBackups, and DeleteSheetBacku

来源摘录 · NVD

#cve #cwe-22

漏洞预警2026-10-25 发布MEDIUM

Firecrawl before 2.11.586 contains a server-side request forgery vulnerability in the Playwright service SSRF proxy that allows attackers to bypass isInternalHost checks via DNS...

CVE-2026-116066

Firecrawl before 2.11.586 contains a server-side request forgery vulnerability in the Playwright service SSRF proxy that

来源摘录 · NVD

#cve #cwe-918

漏洞预警2026-10-25 发布HIGH

A vulnerability has been found in krupalshah Employee Recruitment System up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. This affects an unknown part of the file /source/registe...

CVE-2026-116050

A vulnerability has been found in krupalshah Employee Recruitment System up to 922ff6d208278282e7c8e36d70d9ae356adec9fe.

来源摘录 · NVD

#cve #cwe-74 #cwe-89