#CVE

共收录 69142 条相关情报。

← 返回所有主题
漏洞预警2026-10-25 发布HIGH

A vulnerability was detected in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. Affected by this vulnerability is the function mysql_query o...

CVE-2026-116048

A vulnerability was detected in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. Aff

来源摘录 · NVD

漏洞预警2026-10-25 发布MEDIUM

A vulnerability has been found in Privoce Vocechat up to 0.9.121. This issue affects some unknown processing of the file widget.html of the component Query Parameter Handler. Su...

CVE-2026-116047

A vulnerability has been found in Privoce Vocechat up to 0.9.121. This issue affects some unknown processing of the file

来源摘录 · NVD

漏洞预警2026-10-25 发布MEDIUM

A vulnerability was detected in 1999AZZAR designer-mcp up to 2.1.0. This affects the function get_reference of the file skills/motion-designer/references/motion-dev-guidelines.m...

CVE-2026-116045

A vulnerability was detected in 1999AZZAR designer-mcp up to 2.1.0. This affects the function get_reference of the file

来源摘录 · NVD

漏洞预警2026-10-25 发布MEDIUM

A security vulnerability has been detected in prasathmani TinyFileManager up to 2.6. Affected by this issue is some unknown functionality of the file tinyfilemanager.php of the ...

CVE-2026-116044

A security vulnerability has been detected in prasathmani TinyFileManager up to 2.6. Affected by this issue is some unkn

来源摘录 · NVD

漏洞预警2026-10-25 发布HIGH

A vulnerability was detected in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.09. The affected element is an unknown function of the file AuthController.java of the component SM...

CVE-2026-116006

A vulnerability was detected in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.09. The affected element is an unknown fun

来源摘录 · NVD

漏洞预警2026-10-25 发布LOW

A security vulnerability has been detected in onyx-dot-app Onyx up to 5.0.0. Impacted is an unknown function of the file web/src/app/craft/components/output-panel/PreviewTab.tsx...

CVE-2026-116004

A security vulnerability has been detected in onyx-dot-app Onyx up to 5.0.0. Impacted is an unknown function of the file

来源摘录 · NVD

漏洞预警2026-10-25 发布HIGH

A vulnerability has been found in mansi-k Restaurant_IMS d7ad49f61ab7cc1ec6eb359ac2b5378bdbde0694. Affected is the function mysqli_connect of the file lsmodal.php. The manipulat...

CVE-2026-115999

A vulnerability has been found in mansi-k Restaurant_IMS d7ad49f61ab7cc1ec6eb359ac2b5378bdbde0694. Affected is the funct

来源摘录 · NVD

漏洞预警2026-10-25 发布MEDIUM

A flaw has been found in pig-mesh pig up to 4.1.0. This impacts the function orderItem.getColumn of the file pig-common/pig-common-data/src/main/java/com/pig4cloud/pig/common/da...

CVE-2026-115997

A flaw has been found in pig-mesh pig up to 4.1.0. This impacts the function orderItem.getColumn of the file pig-common/

来源摘录 · NVD

漏洞预警2026-10-24 发布CRITICAL

A security vulnerability has been detected in Unitree Robotics Unitree Go2 up to 1.1.11.4. The impacted element is the function set_volume of the file gpt_thread.py of the compo...

CVE-2026-115995

A security vulnerability has been detected in Unitree Robotics Unitree Go2 up to 1.1.11.4. The impacted element is the f

来源摘录 · NVD

漏洞预警2026-10-24 发布MEDIUM

A vulnerability was detected in phpIPAM up to 1.8.3. Affected by this issue is the function create_rack_link of the file app/tools/racks/show-rack-popup.php of the component Rac...

CVE-2026-115982

A vulnerability was detected in phpIPAM up to 1.8.3. Affected by this issue is the function create_rack_link of the file

来源摘录 · NVD

漏洞预警2026-10-24 发布HIGH

A vulnerability was identified in FaveoSuite Faveo Helpdesk 2.0.3. Affected by this issue is the function ForgotPasswordController::sendResetLinkEmail/PasswordController::reset ...

CVE-2026-115973

A vulnerability was identified in FaveoSuite Faveo Helpdesk 2.0.3. Affected by this issue is the function ForgotPassword

来源摘录 · NVD

漏洞预警2026-10-24 发布MEDIUM

A vulnerability was determined in FaveoSuite Faveo Helpdesk up to 2.0.3. Affected by this vulnerability is the function UnAuthController.changeStatus/UnAuthController.close/UnAu...

CVE-2026-115972

A vulnerability was determined in FaveoSuite Faveo Helpdesk up to 2.0.3. Affected by this vulnerability is the function

来源摘录 · NVD

漏洞预警2026-10-24 发布HIGH

A vulnerability has been found in Travisun Opptrix 0.4.0. This impacts an unknown function of the file /api/system-update/import of the component Import Endpoint. Such manipulat...

CVE-2026-115970

A vulnerability has been found in Travisun Opptrix 0.4.0. This impacts an unknown function of the file /api/system-updat

来源摘录 · NVD

漏洞预警2026-10-24 发布HIGH

A flaw has been found in Travisun Opptrix 0.4.0. This affects an unknown function of the file /api/auth/setup of the component Schedule API. This manipulation causes command inj...

CVE-2026-115969

A flaw has been found in Travisun Opptrix 0.4.0. This affects an unknown function of the file /api/auth/setup of the com

来源摘录 · NVD

漏洞预警2026-10-24 发布CRITICAL

Postiz signs its session, invitation and password reset tokens with one shared secret and without any marker of what a token is for. A route that refreshes the credentials of a ...

CVE-2026-115933

Postiz signs its session, invitation and password reset tokens with one shared secret and without any marker of what a t

来源摘录 · NVD

漏洞预警2026-10-24 发布INFO

Python has added a denylist for known compromised certificates to the "ssl" module to ensure user safety even without certificate revocation configured. Known compromised certif...

CVE-2026-115557

Python has added a denylist for known compromised certificates to the "ssl" module to ensure user safety even without ce

来源摘录 · NVD

漏洞预警2026-10-24 发布HIGH

Web::Simple versions before 0.035 for Perl allocate a buffer sized by the Content-Length header for urlencoded body parameters. Web::Dispatch::ParamParser::get_unpacked_body_fr...

CVE-2026-114629

Web::Simple versions before 0.035 for Perl allocate a buffer sized by the Content-Length header for urlencoded body para

来源摘录 · NVD

漏洞预警2026-10-24 发布CRITICAL

When a post is published, Postiz treats a media path that is not a web address as a file on the server's disk, but it does not check that the file lies inside the upload directo...

CVE-2026-115932

When a post is published, Postiz treats a media path that is not a web address as a file on the server's disk, but it do

来源摘录 · NVD

漏洞预警2026-10-24 发布MEDIUM

BookStack before 26.09.2 contains an incorrect authorization vulnerability in AttachmentController that allows authenticated users to access other users' draft page attachments ...

CVE-2026-116020

BookStack before 26.09.2 contains an incorrect authorization vulnerability in AttachmentController that allows authentic

来源摘录 · NVD

漏洞预警2026-10-24 发布MEDIUM

ONEARMY community-platform before 2.165.2 contains an insecure direct object reference vulnerability that allows authenticated users to mark other users' notifications as read v...

CVE-2026-116018

ONEARMY community-platform before 2.165.2 contains an insecure direct object reference vulnerability that allows authent

来源摘录 · NVD